$1.3M+ Morris Hospital Settlement Reached in Data Breach Lawsuit

New to ClassAction.org? Read our Newswire Disclaimer

Morris Hospital has agreed to pay a more than $1.3 million settlement to resolve a consolidated class action lawsuit that claimed the Illinois-based nonprofit negligently failed to prevent an April 2023 data breach.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The court-authorized website for the Morris Hospital data breach settlement can be found at MorrisHospitalSettlement.com.

The deal covers a class of approximately 248,943 people whose personal or health information was compromised during the cyberattack on Morris Hospital’s network, which occurred around April 4, 2023. The settlement class includes consumers who received notice of the incident.

Eligible class members who file a valid claim form by October 28, 2025 will be entitled to receive Morris Hospital settlement benefits.

Morris Hospital settlement claim forms can be submitted online on this page. Alternatively, class members can download a PDF claim form or call 866-603-5601 to request a paper copy to return by mail.

Claim form submission requires a unique ID that is provided in the personalized settlement notice issued about the deal. To file a claim online, consumers will need a PIN, which can also be found in the notice.

According to the official Morris Hospital settlement website, class members who submit a timely, valid claim form are eligible to receive two years of three-bureau credit/medical monitoring and identity theft protection services at no cost.

In addition, under the terms of the settlement agreement, consumers may file a claim form to receive reimbursement of up to $5,000 per person for documented out-of-pocket expenses that were incurred between April 4, 2023 and October 28, 2025 and are “more likely than not” linked to the Morris Hospital data breach. The website says that qualifying losses may include unreimbursed charges related to fraud, phone or data fees, costs associated with credit monitoring or fraud resolution services, bank or credit reporting fees, and other expenses incurred as a result of the incident.

The site shares that in lieu of receiving reimbursement for out-of-pocket losses, class members who file a claim form can opt for an estimated $100 cash payment.

According to the settlement agreement, individual payout amounts are subject to adjustment on a pro rata basis and will depend on how many valid claims are submitted and what remains of the $1,361,571.77 settlement fund after deductions are made for administrative costs, taxes, service awards, attorneys’ fees and all other settlement benefits.

The deal with Morris Hospital received preliminary court approval on June 30, 2025. It is now up to the court to determine whether to grant final approval to the terms of the settlement at a hearing on October 24, 2025.

The agreement states that, should the deal be ultimately approved, class action settlement payments and enrollment instructions for credit monitoring and identity theft protection services will be issued to eligible class members within 30 days following the date the deal goes into effect.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.