Morris Hospital experienced a data breach on April 4, 2023, exposing sensitive personal and health information of patients and consumers. The breach led to a $1.36 million class-action settlement, with affected individuals eligible for up to $5,000 in reimbursement for out-of-pocket losses (e.g., fraud, credit monitoring, bank charges) or an alternative cash payment (~$100). The settlement also includes 24 months of free credit/medical monitoring, identity theft insurance ($1M), and dark web monitoring. The lawsuit alleged negligence in data protection, violating laws like the Illinois Consumer Fraud Act. While Morris Hospital denied wrongdoing, the breach compromised patient records, financial data, and medical histories, prompting legal action. The settlement fund covers administrative costs, attorney fees (~$453K), class representative awards ($26K), and remaining payouts to victims. Claims must be filed by October 28, 2025, with payouts expected ~31 days post-court approval.
Source: https://www.claimdepot.com/settlements/morris-hospital-settlement
TPRM report: https://www.rankiteo.com/company/morris-hospital
"id": "mor540090325",
"linkid": "morris-hospital",
"type": "Breach",
"date": "4/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Morris, Illinois, USA',
'name': 'Morris Hospital',
'type': 'Healthcare Provider'}],
'customer_advisories': {'eligible_claimants': 'Individuals who received '
'breach notification for the '
'April 4, 2023 incident',
'required_documentation': ['Unique ID and PIN from '
'settlement notice',
'For reimbursement: '
'receipts, bank '
'statements, or bills + '
'explanatory statement',
'Alternative cash/credit '
'monitoring: selection '
'only'],
'settlement_administrator_contact': {'email': 'info@MorrisHospitalSettlement.com',
'mailing_address': 'Morris '
'Hospital '
'Data '
'Incident '
'c/o '
'Settlement '
'Administrator, '
'P.O. '
'Box '
'25397, '
'Santa '
'Ana, '
'CA '
'92799',
'phone': '866-603-5601'}},
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High (includes personally '
'identifiable and health data)',
'type_of_data_compromised': ['personal information',
'health information']},
'date_detected': '2023-04-04',
'description': 'Morris Hospital experienced a data breach on April 4, 2023, '
'exposing sensitive personal and health information of '
'patients and consumers. The breach led to a class action '
'lawsuit, alleging negligence and failure to adequately '
'protect data. Morris Hospital agreed to a $1.36 million '
'settlement to resolve claims, offering affected individuals '
'reimbursement for out-of-pocket losses (up to $5,000) or an '
'alternative cash payment (~$100), along with free '
'credit/medical monitoring services for up to 24 months.',
'impact': {'brand_reputation_impact': 'Class action lawsuit and settlement '
'due to alleged negligence',
'data_compromised': ['personal information', 'health information'],
'financial_loss': {'alternative_cash_payment': 'Estimated $100 '
'(varies by claim '
'volume)',
'attorneys_fees': 'Up to $453,857.26',
'reimbursement_per_person': 'Up to $5,000',
'service_awards': '$26,000 (total for class '
'representatives)',
'settlement_fund': '$1,361,571.77'},
'identity_theft_risk': 'High (exposed sensitive personal and '
'health data)',
'legal_liabilities': {'lawsuit': 'Class action alleging violation '
'of Illinois Consumer Fraud and '
'Deceptive Business Practices Act',
'settlement_agreement': '$1.36 million'}},
'investigation_status': 'Settled (final approval hearing on Oct. 24, 2025)',
'post_incident_analysis': {'corrective_actions': {'settlement_terms': ['Financial '
'compensation '
'for '
'affected '
'individuals',
'Credit/medical '
'monitoring '
'services',
'Denial '
'of '
'wrongdoing '
'but '
'agreement '
'to '
'settle '
'to '
'avoid '
'litigation '
'costs']}},
'references': [{'source': 'Morris Hospital Data Breach Settlement Claim '
'Website'},
{'source': 'Class Action Settlement Notice (April 2023 '
'Breach)'}],
'regulatory_compliance': {'legal_actions': {'allegations': ['Negligence',
'Failure to '
'protect '
'patient/consumer '
'data'],
'class_action_lawsuit': 'Settled '
'for '
'$1.36 '
'million'},
'regulations_violated': ['Illinois Consumer Fraud '
'and Deceptive Business '
'Practices Act']},
'response': {'communication_strategy': {'claim_process': ['Online claim form',
'Mail-in PDF claim '
'form (deadline: '
'Oct. 28, 2025)',
'Settlement '
'administrator '
'contact for lost '
'IDs/PINs (email: '
'info@MorrisHospitalSettlement.com, '
'phone: '
'866-603-5601)'],
'notification': 'Breach notices sent '
'to affected '
'individuals with '
'unique ID and PIN '
'for claims',
'payout_options': ['PayPal',
'Venmo',
'Zelle',
'Paper check',
'Credit monitoring '
'code']},
'recovery_measures': {'credit_monitoring_services': {'duration': '24 '
'months',
'features': ['Real-time '
'credit '
'file '
'monitoring '
'(three '
'major '
'bureaus)',
'$1,000,000 '
'identity '
'theft '
'insurance '
'(no '
'deductible)',
'Dark '
'web '
'monitoring',
'Medical '
'record '
'monitoring',
'Health '
'insurance '
'and '
'health '
'savings '
'account '
'monitoring',
'Access '
'to '
'fraud '
'resolution '
'agents']},
'settlement_offer': ['Reimbursement for '
'out-of-pocket losses '
'(up to $5,000)',
'Alternative cash '
'payment (~$100)',
'Free credit/medical '
'monitoring (CyEx '
'Medical Shield '
'Total) for up to 24 '
'months']}},
'stakeholder_advisories': {'claim_deadline': 'Oct. 28, 2025',
'exclusion_deadline': 'Sept. 29, 2025',
'final_approval_hearing': 'Oct. 24, 2025',
'payout_timeline': '~31 days post-final approval '
'(no appeals)'},
'title': 'Morris Hospital Data Breach (April 2023)',
'type': 'Data Breach'}