Skip to main content
photo of a Doctor

Morris Hospital & Healthcare Data Breach Investigation

The Lyon Firm is investigating Morris Hospital data breach claims for victims in Illinois and nationwide. The healthcare system has begun sending out notice of a cyberattack months after it was first discovered.

An April 2023 cyberattack on Morris Hospital and Healthcare Centers has exposed the personal data of former and current patients, as well as employees. Compromised files include the following:

  • Names
  • Addresses
  • Social Security numbers
  • Medical record numbers
  • Codes used to identify diagnoses and treatments
  • Dates of birth of employees

What happened?

In late May, Morris Hospital & Healthcare Centers, a hospital located 55 miles southwest of Chicago, disclosed that it had been looking into a cybersecurity incident. Morris had detected unusual activity on its network and later discovered that an unauthorized party had accessed it. The Royal ransomware gang listed Morris Hospital on its dark web blog, showing off its victims.

Months later, Morris Hospital started notifying individuals impacted by the April breach. The notification letter sent to victims shows the large scale of the attack. According to Morris Hospital’s letter to the Maine Attorney General, 248,943 individuals were exposed in the attack.

Why Contact a Lawyer?

Healthcare data can be sold for good money on dark web forums. Bad actors can use medical details for medical identity theft, a type of fraud where threat actors use stolen information to submit forged claims to Medicare and other health insurers. Other personal identifiable information compromised in data theft incidents can be used to commit fraud and identity theft.

If you or a loved on has been a victim of the Morris Hospital breach or another healthcare data breach event, contact our privacy lawyers to investigate. The Lyon Firm provides free and confidential consultations and works to settle your claims quickly.

We are currently involved in some of the biggest data privacy cases in the country, representing plaintiffs and fighting for rightful compensation.