Illinois Bone and Joint Institute Data Breach Settlement (Closed)
PublishedJune 22, 2026
UpdatedJuly 1, 2026
The Illinois Bone and Joint Institute data breach settlement is now closed — the July 1, 2026 claim deadline has passed and no new claims can be filed.
Illinois Bone and Joint Institute, LLC (IBJI), one of the largest independent orthopedic practices in Illinois, has agreed to a $4,000,000 settlement to resolve a class action lawsuit over a 2024 data breach. The case is Redman v. Illinois Bone and Joint Institute, LLC, pending in the Circuit Court of Cook County, Illinois.
According to the lawsuit, an unauthorized party accessed the IBJI network between May 30, 2024 and July 4, 2024 and may have obtained patients' personal information. The complaint alleges IBJI failed to adequately protect that information. IBJI denies the allegations and any wrongdoing, and no court has found that the company did anything wrong. The two sides agreed to settle to avoid the cost and risk of continued litigation.
Important: the July 1, 2026 claim filing deadline has passed, so this settlement is now closed and no new claims can be filed.
StatusSettlement Closed
Claim DeadlineJuly 1, 2026 (passed)
Estimated PayoutUp to $5,000Documented losses · or ~$50 cash · plus 2 yrs Kroll medical monitoring
Proof RequiredYesClass Member ID from the IBJI notice was required to file (filing now closed)
What Happened?
IBJI determined that an unauthorized actor accessed its network over a roughly five-week window from May 30, 2024 through July 4, 2024. The incident was discovered on or around July 4, 2024. A forensic investigation found that files potentially containing personal information could have been accessed during that period.
IBJI later began notifying affected individuals. The information involved varied by person and may have included names along with other personal or health-related details maintained by an orthopedic provider. If you received a notice letter from IBJI about this incident, your information was among the data the company identified as potentially affected.
Who Qualified?
The settlement class included individuals who were sent notice that their personal information may have been compromised in the IBJI data security incident discovered around July 4, 2024. In practical terms, if IBJI mailed or emailed you a breach notice about this incident, you were a class member and could file a claim.
Filing required the Class Member ID printed on the notice to log in to the claim portal. Important: the claim window is now closed, so this Class Member ID requirement is moot — no new claims can be filed regardless of whether a class member retained their notice.
How Much Could You Get?
The settlement let class members choose any combination of three benefits.
Out-of-pocket loss reimbursement. Class members could claim up to $5,000 for documented, unreimbursed losses fairly traceable to the breach. This could include losses from identity theft or fraud, the cost of credit monitoring or identity protection purchased and credit-freeze fees incurred on or after May 30, 2024, and other miscellaneous related expenses such as postage, notary, copying, and mileage, with supporting documents showing the loss and the date it occurred.
Two years of medical monitoring. Class members could enroll in two years of Kroll Medical Monitoring, estimated at $240 per year in value. It included single-bureau credit monitoring; dark web and medical identity scanning with real-time alerts; Social Security number and payday loan monitoring; unlimited access to fraud specialists; identity theft restoration; and up to $1,000,000 in identity fraud loss reimbursement with no deductible. No documentation was required to select this benefit.
Estimated $50 cash payment. Class members could claim a pro rata cash payment, estimated at around $50, with no documentation required. Because it was paid pro rata from the remaining settlement fund, the actual amount could have been higher or lower depending on how many valid claims were filed.
Was Proof Required?
Yes. Filing required logging in to the claim portal using the Class Member ID printed on the notice IBJI sent, so the page was marked proof required. Important: this is now moot, since the claim deadline has passed and the portal no longer accepts new claims.
Beyond the ID, the documentation needed depended on which benefit a claimant chose. The estimated $50 cash payment and the two years of medical monitoring required no supporting documents. The up to $5,000 out-of-pocket reimbursement required documentation — receipts, bank or credit card statements, police reports, or similar records showing the loss and that it was tied to the breach.
Key Dates
• Unauthorized access window: May 30, 2024 – July 4, 2024
• Opt-Out (Exclusion) Deadline: June 1, 2026 (passed)
• Objection Deadline: June 1, 2026 (passed)
• Claim Deadline: July 1, 2026 (passed)
• Final Approval Hearing: July 1, 2026 at 10:30 a.m. CT, before Judge William B. Sullivan, Courtroom 2410, Richard J. Daley Center, Chicago (via Zoom)
All key deadlines — opt-out, objection, and claim filing — have now passed. This settlement is closed, and no new claims can be filed. Check the official settlement website for any updates on the final approval hearing.
Attorneys' Fees and Service Awards
Class Counsel — Ben Barnow of Barnow and Associates, P.C., Raina C. Borrelli of Strauss Borrelli PLLC, and Gary M. Klinger of Milberg PLLC — will ask the Court to approve attorneys' fees of up to 35% of the settlement fund ($1,400,000), plus reimbursement of litigation costs and a service award of up to $2,000 for each class representative. These amounts come out of the $4,000,000 settlement fund and are subject to Court approval.
Claim Filing Has Closed
The claim window for this settlement was open through IBJISettlement.com and required the Class Member ID from the mailed or emailed notice to log in. Important: the July 1, 2026 deadline has passed, so filing is no longer available. The official settlement website remains available as a reference for class members with questions about a claim already submitted.
Frequently Asked Questions
Who qualified for the Illinois Bone and Joint Institute settlement?
The settlement covered individuals who were sent a notice that their personal information may have been affected by the data security incident IBJI discovered around July 4, 2024. Claim filing is now closed.
How much could class members get from the IBJI data breach settlement?
Eligible class members could choose any combination of three benefits: reimbursement of up to $5,000 for documented out-of-pocket losses, two years of Kroll medical monitoring, and an estimated $50 pro rata cash payment. The claim deadline has passed, so these benefits are no longer available to new claimants.
Was proof required to file a claim?
Yes. Filing required logging in using the Class Member ID printed on the IBJI notice. This is now moot, since the claim window has closed and no new claims can be filed.
What is the deadline to file an IBJI settlement claim?
The claim deadline was July 1, 2026. That deadline has passed, and the settlement is now closed — no new claims can be filed.
What happens if I do nothing?
The claim deadline has passed. Class members who did not file a claim by July 1, 2026 will not receive a payment or monitoring, and gave up their right to sue Illinois Bone and Joint Institute over this data breach.
Official Settlement Notice
Sources
• Official Settlement Website: IBJISettlement.com
• Redman v. Illinois Bone and Joint Institute, LLC, Case No. 2024-CH-08333, Circuit Court of Cook County, Illinois, Chancery Division
OpenClassActions.com is a consumer news site and is not a settlement administrator or a law firm.
For more class actions keep scrolling below.
Status
Closed — claim deadline July 1, 2026 has passed
Settlement Amount
$4,000,000
Case Title
Redman v. Illinois Bone and Joint Institute, LLC
Case Number
2024-CH-08333
Court
Circuit Court of Cook County, Illinois, Chancery Division
Final Approval Hearing
July 1, 2026 at 10:30 AM CT Before Judge William B. Sullivan
Concord Orthopaedics Data Breach: Another orthopedic-practice breach — up to $3,000 documented, up to $100 lost time or $50 cash, plus a year of medical monitoring. Claim by July 8, 2026. See who qualifies →
Cardiovascular Consultants Data Breach: $3.85M fund — ~$75 cash or up to $5,000 documented plus 2 years of medical monitoring for ~484,000 people. See who qualifies →
South Texas Oncology & Hematology: $1.075M fund — ~$100 pro rata cash or up to $5,000 documented plus CyEx Medical Shield. See who qualifies →
Mt. Baker Imaging & Northwest Radiologists: $3.3M fund — up to $5,000 documented or pro rata cash plus 2 years of medical identity monitoring. See who qualifies →
Family Medicine Centers (FMC): $2.15M fund — ~$75 cash (no proof) or up to $5,000 documented plus 2 years of credit monitoring. See who qualifies →
Datavant (Ciox Health) Data Breach: $900K fund — up to $5,000 documented or pro rata cash plus 1 year of identity monitoring. See who qualifies →