Elekta, NMH Data Breach Class Action Settlement: $8.9M

Individuals in the United States who:

• Had their information accessed or potentially compromised in the Elekta and Northwestern Memorial Healthcare data breach in April 2021.
• Received a notification letter about the breach.

Illinois residents impacted by the breach may qualify for additional relief under Illinois’ Genetic Information Privacy Act (GIPA).

Documentation of losses is required for claims, including:

• Bank statements
• Credit reports
• Invoices or bills
• Receipts
• Other third-party documentation

Elekta Inc. and Northwestern Memorial Healthcare (NMH) have agreed to an $8.9 million settlement to resolve claims that a 2021 data breach compromised sensitive patient information, including genetic data, Social Security numbers, and medical records.

The breach reportedly impacted 3.1 million individuals, including 1.4 million NMH patients, after hackers exploited cybersecurity vulnerabilities in Elekta’s systems.

Plaintiffs allege that Elekta failed to implement adequate cybersecurity measures to protect sensitive information. Elekta and NMH deny any wrongdoing but have agreed to the settlement to avoid further litigation.

Class members can claim the following benefits:

1. Reimbursement for Documented Losses:

   • Up to $5,000 for out-of-pocket losses related to the data breach, including:
     • Bank fees
     • Credit costs
     • Fraud damages
     • Postage and other expenses
   • Documentation such as bank statements, receipts, or tax documents is required.

2. Pro Rata Cash Payments:

   • Up to $1,000 for class members.
   • Illinois GIPA subclass members can claim an additional pro rata payment of up to $1,000.

Payments may vary depending on the number of claims filed and the available settlement funds.