Des Plaines, Ill.-based Illinois Bone & Joint Institute has agreed to pay $4 million to settle a class-action lawsuit stemming from a 2024 security incident, according to an April 17 report from The HIPAA Journal.
An investigation determined that an unauthorized third party accessed the practice’s network and certain files between May 30 and July 4, 2024. The breach was initially reported to the HHS’ Office for Civil Rights as impacting about 183,000 individuals, but was later amended to more than 665,000 individuals.
Patient information that may have been accessed by the unauthorized party includes names, addresses, Social Security numbers, medical treatment information and health insurance information.
The consolidated class-action lawsuit includes claims for negligence, breach of implied contract, unjust enrichment, invasion of privacy and violation of the Illinois Consumer Fraud and Deceptive Business Practices Act.
Illinois Bone & Joint Institute denied all claims of fault, wrongdoing and liability, the report said.
At the Becker's 23rd Annual Spine, Orthopedic and Pain Management-Driven ASC + The Future of Spine Conference, taking place June 11-13 in Chicago, spine surgeons, orthopedic leaders and ASC executives will come together to explore minimally invasive techniques, ASC growth strategies and innovations shaping the future of outpatient spine care. Apply for complimentary registration now.
