$4M Illinois Bone and Joint Institute Data Breach Settlement, Are You One of 568,000 Affected Patients? Deadline is July 1, 2026

A cybersecurity incident discovered by Illinois Bone and Joint Institute (IBJI) in July 2024 exposed the sensitive personal and medical information of an estimated 568,000 current and former patients. IBJI agreed to pay $4,000,000 to settle the resulting class action lawsuit, Redman, et al. v. Illinois Bone and Joint Institute LLC, Case No. 2024-CH-08333. Eligible class members can claim up to $5,000 for documented losses, an estimated $50 cash payment with no proof at all, or two full years of Kroll medical monitoring services. The claim deadline is July 1, 2026.

Quick Facts

Field	Detail
Settlement Amount	$4,000,000
Claim Deadline	July 1, 2026
Who Qualifies	Individuals who received a data breach notice from IBJI regarding the July 2024 cybersecurity incident
Payout Per Person	~$50 pro rata (no proof) or up to $5,000 (with documentation)
Proof Required	Yes — for the $5,000 out-of-pocket loss tier only
Settlement Status	Open for Claims
Administrator	Kroll Settlement Administration LLC — 833-447-8441
Official Website	ibjisettlement.com

Current Status & What Happens Next

• The settlement is open for claims right now. Eligible class members can file online or by mail through July 1, 2026.
• The opt-out deadline is June 1, 2026. If you want to preserve your right to sue IBJI independently over this breach, you must submit a written exclusion request before that date.
• The final approval hearing is July 1, 2026. The court will consider any objections and decide whether to formally approve the settlement. Payments go out after final approval and the resolution of any appeals.

How a July 2024 Cyberattack Put the Health Records of 568,000 IBJI Patients at Risk

Illinois Bone and Joint Institute is one of the largest orthopedic practices in the United States, serving patients across dozens of clinic locations throughout Illinois. In July 2024, IBJI discovered that unauthorized parties had gained access to its computer systems and potentially accessed files containing sensitive personal and protected health information belonging to current and former patients.

The exposed data included the type of information that makes identity theft and medical fraud possible — names, contact details, and protected health information tied directly to patient records. IBJI sent breach notification letters to approximately 568,000 individuals whose data may have been involved.

Related article: $3.75M Chattanooga Heart Institute Data Breach Settlement, Are You Eligible to Claim? The deadline to File is July 13, 2026

Plaintiff Redman and additional class representatives filed a class action lawsuit in Illinois state court alleging that IBJI failed to implement adequate data security safeguards to protect patient information. The complaint asserted claims for negligence, breach of implied contract, unjust enrichment, invasion of privacy, and violations of the Illinois Consumer Fraud and Deceptive Business Practices Act. IBJI denied all allegations but agreed to settle to avoid the cost and risk of continued litigation.

IBJI Mailed Breach Notices to 568,000 People — If You Got One, You Likely Qualify

• You may qualify if you received a data breach notification letter from Illinois Bone and Joint Institute stating that your personal information may have been compromised in the July 2024 cybersecurity incident.
• You may qualify if you are a current or former IBJI patient whose records were stored in the systems affected by the breach.
• You may qualify if you are a U.S. resident who falls within the class definition described in your notice letter.
• You do not qualify if you never received a breach notice from IBJI or your information was not identified as part of the July 2024 incident.

If you received a notice but misplaced it, contact Kroll at 833-447-8441 to retrieve your Class Member ID. You will need that ID to file your claim online.

$50 With No Paperwork, Up to $5,000 With Receipts, or Two Years of Medical Monitoring — Here Is How Each Tier Works

This settlement offers three separate benefits. Class members can submit for one, two, or all three, depending on their circumstances.

Tier 1 — Pro Rata Cash Payment (estimated ~$50, no proof required) 

Every eligible class member can claim a pro rata cash payment without providing any documentation. The settlement administrator estimates this payment at approximately $50 per person. The final amount depends on the total number of valid claims submitted — if fewer people file, each individual payment may be higher.

Tier 2 — Out-of-Pocket Loss Reimbursement (up to $5,000, proof required)

 Class members who suffered real, verifiable financial harm as a direct result of the breach can claim up to $5,000 in documented losses. Eligible expenses include monetary losses from identity theft or fraud, costs for credit monitoring services, fees to freeze or unfreeze credit accounts after May 30, 2024, and miscellaneous expenses such as postage for contacting financial institutions. You must submit supporting documentation — such as receipts, bank statements, credit card statements, police reports, or proof of fraudulent charges. Self-prepared personal notes alone are not sufficient as standalone proof, but you may use them to supplement other documentation.

Tier 3 — Two Years of Kroll Medical Monitoring (all class members) 

All eligible class members can elect to receive two years of Kroll medical monitoring services, valued at an estimated $240 per year. The monitoring package includes credit monitoring, dark web scanning, medical identity scanning, dedicated fraud specialist access, identity theft restoration services, and up to $1,000,000 in identity fraud loss reimbursement coverage. This benefit is available regardless of which cash tier you choose.

File Your IBJI Data Breach Claim Online in Less Than 10 Minutes

Step 1 — Go to the official settlement website at ibjisettlement.com and click the claim filing link, or access the online form directly at the link provided in your notice letter.

Step 2 — Enter your Class Member ID from your breach notice letter to log in and begin your claim. If you cannot locate your ID, call Kroll at 833-447-8441 before attempting to file.

Step 3 — Select the benefit or benefits you want to claim: the pro rata cash payment, the up to $5,000 out-of-pocket reimbursement, the two years of Kroll medical monitoring, or any combination of the three.

Step 4 — If you are claiming documented losses, upload your supporting proof — bank statements, receipts, credit card records, police reports, or other documentation showing the breach caused the expense and the date it occurred.

Step 5 — Choose your payment method: electronic payment or a paper check mailed to the address you provide on the claim form.

Step 6 — Submit your claim and save your confirmation number for your records.

Mail-in claims go to: Settlement Administrator — 83381, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391.

Estimated time to complete: 5–10 minutes online.

Miss June 1 and You Lose the Right to Sue IBJI Separately — Every Key Date You Need

Milestone	Date
Data Breach Discovered by IBJI	July 2024
Lawsuit Filed	2024 (Case No. 2024-CH-08333)
Claims Period Opens	TBD
Opt-Out Deadline	June 1, 2026
Objection Deadline	TBD
Final Approval Hearing	July 1, 2026
Claim Filing Deadline	July 1, 2026
Expected Payment Date	After final approval and resolution of any appeals

$4 Million Settlement Fund Breakdown

Line Item	Amount
Total Settlement Fund	$4,000,000
Attorneys’ Fees	Up to $1,400,000
Attorneys’ Expenses	Presented to court for approval
Service Awards (9 representatives)	Up to $2,000 each ($18,000 total)
Medical Monitoring Costs	Determined by number of valid claims
Settlement Administration Costs	TBD
Payments to Approved Claimants	Remaining fund

Frequently Asked Questions

Do I need a lawyer to file a claim?

 No. You do not need an attorney to participate in this settlement. The online claim form at ibjisettlement.com takes approximately 5–10 minutes to complete. If you need assistance, call Kroll Settlement Administration directly at 833-447-8441.

Is this settlement legitimate?

 Yes. The case is Redman, et al. v. Illinois Bone and Joint Institute LLC, Case No. 2024-CH-08333, filed in Illinois state court. Kroll Settlement Administration — one of the country’s most recognized third-party claims administrators — manages the settlement. Verify all information at the official settlement website: ibjisettlement.com.

When will I receive my payment?

Kroll will distribute cash payments and activate medical monitoring services after the court grants final approval at the July 1, 2026 hearing and after it completes claim processing. No specific payment date has been confirmed. Settlements with no appeals typically distribute payments within a few months of the final approval date.

What if I miss the July 1, 2026 claim deadline?

 You will forfeit your right to receive any cash payment or enroll in medical monitoring through this settlement. Courts rarely accept late claims. If you believe you qualify, file as early as possible rather than waiting until the deadline.

Will my settlement payment affect my taxes?

 Reimbursements for actual documented out-of-pocket losses are generally not considered taxable income. Pro rata cash payments may be taxable depending on how the IRS classifies the settlement. Consult a qualified tax professional about your specific situation.

What type of personal and health information did the IBJI breach expose? 

The July 2024 breach potentially exposed sensitive personal and protected health information stored in IBJI’s systems. This includes patient-level data typically held by a large orthopedic practice — names, contact information, and health records. The exact categories of data affected for each individual are detailed in the breach notice letter IBJI mailed to approximately 568,000 people.

Can I claim both the $50 cash payment and the $5,000 documented loss reimbursement at the same time?

 Yes. These two cash tiers are not mutually exclusive. Class members who have documented losses can claim the pro rata cash payment and submit receipts for out-of-pocket reimbursement in the same claim. All class members can also separately elect the two years of Kroll medical monitoring on top of any cash benefit.

What does the Kroll medical monitoring actually cover? 

The two-year Kroll Medical Shield package includes credit monitoring across all major bureaus, dark web surveillance, medical identity scanning to detect fraudulent use of your health information, access to a dedicated fraud specialist, full identity theft restoration services, and up to $1,000,000 in identity fraud loss reimbursement insurance. The estimated retail value is $240 per year.

Sources & References

1. Official Settlement Website: ibjisettlement.com
2. Official Long-Form Class Notice: ibjisettlement.com/files/Redman v IBJI — Long Form Notice — Final.pdf
3. Settlement Agreement: ibjisettlement.com/files/Settlement Agreement
4. Settlement FAQ: ibjisettlement.com/faq

Last Updated: April 16, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.