DuPage Medical Group was Negligent With Patient Information in Data Breach, Class Action Alleges

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Dupage Medical Group Data Breach Overview:

• Who: Two patients have filed a class action lawsuit against Illinois-based DuPage Medical Group.
• Why: The patients allege their information was stolen in a data breach as a result of inadequate safeguarding on the part of DuPage Medical Group.
• Where: The lawsuit was filed in DuPage County, Illinois.

DuPage Medical Group’s inadequate safeguarding of its patients’ information led to an unauthorized data breach, and the company failed to tell patients about the breach and what was accessed in a timely and adequate manner, a new class action lawsuit alleges.

The class action lawsuit was filed by law firm Keller Lenkner LLC on behalf of patients whose sensitive medical information was stolen in a massive data breach in July.

The two patients accuse DuPage Medical Group (DMG) with negligence, breach of contract, and violation of the Illinois Consumer Fraud and Deceptive Business Practices Act, among other allegations.

According to the claim, in August DMG — Illinois’ largest independent physicians group — revealed that “unauthorized actors” had accessed its network in July, exposing highly sensitive personal information and medical records of nearly 600,000 patients.

The compromised information includes names, addresses, dates of birth, diagnosis codes, medical procedure data, treatment dates, social security numbers, and other protected health information.

The plaintiffs allege that DMG’s “inadequate safeguarding of its patients’ information led to the unauthorized access,” and that DMG then failed to provide timely and adequate notice of what information was accessed and stolen.

It also alleges that, as a result of the unauthorized access and DMG’s delayed discovery of the breach, patients have suffered ascertainable losses, including the loss of the value in their private and confidential information, loss of benefit of their contractual bargain, out-of-pocket expenses, and the value of their time incurred to remedy the effects of the data breach.

Keller Lenkner Partner Seth Meyer said that the patients harmed in the data breach were “now at serious, imminent risk of fraud and identity theft.”

“DMG failed to take the necessary steps to secure private, sensitive information entrusted to them by their patients. On behalf of our clients, we intend to hold DMG accountable for putting hundreds of thousands of patients’ information at risk.”

In addition to compensatory damages and reimbursement of out-of-pocket costs, plaintiffs seek improvements to DMG’s data security systems, future annual audits, and adequate credit monitoring services funded by DMG.

Another company currently facing legal action over mismanaging consumer data is T-Mobile. Recently, the company was hit with two new class action lawsuits alleging negligence in regards to August’s large-scale data breach, while the CEO maintains that it is taking “significant steps to enhance our approach to cybersecurity.” All of the lawsuits filed against the company allege that T-Mobile failed to adequately protect consumers’ sensitive personal identifying information, and that the company’s lack of proper safeguards gave intruders a means to breach its computer network and steal sensitive personal identifying information in the August data breach.

Were you a DMG patient? Tell us if this data breach affected you in the comments section!

The patients are represented by Seth Meyer and Alex Dravillas of Keller Lenkner LLC and Todd S. Garber of Finkelstein, Blankinship, Frei-Pearson & Garber LLP.

The DuPage Medical Group Data Breach Class Action Lawsuit is Hestrup & Peiss v. DuPage Medical Group. Ltd. d/b/a DuPage Medical Group, Case No. 2021L000937 in the 18th Judicial Circuit Court, DuPage County.

Read About More Class Action Lawsuits & Class Action Settlements:

• ArbiterSports Data Breach Class Action Settlement
• T-Mobile Faces Two New Class Action Lawsuits After Data Breach Leaked User’s Social Security Numbers, Birth Dates, and Other Personal Data
• Automation Personnel Services Negligent in Staffing Agency Data Breach, Says Class Action
• Default Microsoft Settings Exposed 38 Million Users’ Info