Breach Help CenterIL · Feb 28, 2025

University Of Illinois, Dscc Lombard, Regional Office Data Security Incident

Investigation Open

Reported to the IL Attorney General on February 28, 2025.

IL residents may qualify for compensation. Free attorney review — no obligation, no upfront cost.

Check My Rights →
§ I

About This Security Incident

University Of Illinois, Dscc Lombard, Regional Office was responsible for safeguarding the personal data of its customers and employees. According to a IL state filing, University Of Illinois, Dscc Lombard, Regional Office experienced a data security incident affecting an undisclosed number of individuals, exposing protected health information and medical records. Legal proceedings relating to this breach are ongoing.

Schools and universities face increasing pressure from ransomware groups that target institutions with limited IT security budgets and large repositories of valuable data. The University Of Illinois, Dscc Lombard, Regional Office breach may affect current and former students, faculty, and administrative staff whose records were stored in the compromised systems.

Based on the organization's name, University Of Illinois, Dscc Lombard, Regional Office appears to be an educational and specialized healthcare-related regional office associated with the university system's Division of Specialized Care for Children. In the regular course of operations, such institutions typically collect and store sensitive personal, educational, and medical information, including names, dates of birth, contact details, medical records, and related administrative data. The security incident affecting the organization was officially reported to the Illinois Attorney General in 2025. Individuals whose personal information may have been compromised during the incident were sent an official data breach notification letter detailing the event. If you received this letter, it serves to inform you of the potential exposure of your data and provides recommended steps you can take to protect your personal information.
§ II

Case Facts & Filing Record

State Filed
IL
Date Reported to AG
Feb 28, 2025
Date of Breach
Not disclosed
Records Affected
Not disclosed
Filing Status
Investigation Open
Last Updated
Aug 8, 2026
Data Types Exposed
NameDate of BirthAddressContact InformationMedical Record NumberHealth Insurance InformationStudent IDParent or Guardian Information
§ III

Risk Analysis — Exposed Data

Based on the data types reported in this filing, affected individuals face the following specific risks:

Identity Verification Bypassmedium

Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.

Physical Security Riskmedium

Home address exposure can enable mail theft, package fraud, and targeted phishing attacks that reference your known location.

§ IV

Are You One of the Victims?

Under the Illinois Personal Information Protection Act (PIPA), you may have a legal claim against University Of Illinois, Dscc Lombard, Regional Office if any of the following apply:

  • You received a written data breach notification letter from University Of Illinois, Dscc Lombard, Regional Office
  • You are or were a customer, patient, or employee of University Of Illinois, Dscc Lombard, Regional Office
  • Your information was held by University Of Illinois, Dscc Lombard, Regional Office in IL
  • Your protected health information was stored in the compromised system

Applicable law: This breach was reported under the Illinois Personal Information Protection Act (PIPA), which establishes your right to seek damages from University Of Illinois, Dscc Lombard, Regional Office.

§ V

Your Legal Rights — Compensation Available

01
Lost Time & Remediation Costs

The hours spent responding to a data breach — canceling accounts, contacting credit bureaus, updating passwords, and investigating fraud — represent compensable economic harm in data breach litigation.

02
HIPAA Statutory Damages

HIPAA violations carry civil penalties between $100 and $50,000 per violation. Where a healthcare organization's negligence led to the exposure of protected health information, class members may recover statutory damages in addition to actual losses.

03
Emotional Distress

Data breach victims regularly report anxiety, loss of sleep, and ongoing fear of identity theft. These non-economic harms are cognizable injuries in data breach litigation, particularly in cases involving SSN or medical record exposure.

§ VI

Frequently Asked Questions

Do I need proof that my data was misused to file a claim against University Of Illinois, Dscc Lombard, Regional Office?

No. Under Illinois Personal Information Protection Act (PIPA) and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.

How much does filing a claim cost?

Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.

Does HIPAA give me additional rights in the University Of Illinois, Dscc Lombard, Regional Office breach?

If University Of Illinois, Dscc Lombard, Regional Office is a covered healthcare entity or business associate under HIPAA, affected patients have additional rights — including the right to an HHS complaint. These HIPAA violations also strengthen civil damages claims. Consult an attorney to understand your full remedies.

Is it too late to file a claim?

Statutes of limitations for data breach claims vary by state but typically run 2–4 years. Depending on when you learned of the breach, you may still have time. Contact our office for a free eligibility review — there is no cost to find out.

What if University Of Illinois, Dscc Lombard, Regional Office offered me free credit monitoring after the breach?

Accepting free credit monitoring from University Of Illinois, Dscc Lombard, Regional Office does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.

Do I need to have received a notice letter to be eligible?

Not necessarily. Many data breach victims are never notified directly. If your personal information was held by University Of Illinois, Dscc Lombard, Regional Office during the relevant period, you may still qualify even without receiving a letter. A free eligibility review can confirm your status.

How long does a data breach class action lawsuit take?

Most data breach class actions resolve within 18 to 36 months, though timelines vary by court and complexity. Your participation requires minimal effort — typically completing a claim form. Our office handles all litigation; you are notified when a settlement is reached.

Received a notification letter from University Of Illinois, Dscc Lombard, Regional Office?

Read our dedicated guide — what the letter means and exactly what to do.

Read Letter Guide →
§ VII

Submit Your Free Case Review

If you were affected by the University Of Illinois, Dscc Lombard, Regional Office data breach, you may be entitled to compensation. Submit your information below for a free attorney review — no obligation, no upfront cost.

Tell Us About Your Notice Letter

Received a data breach notification letter? Fill out the form — an attorney will review your mailing and contact you. No cost, no obligation.

Start typing to find a matching case, or enter a company not yet listed.

Attach a copy of your data breach notification letter. Accepted: PDF, JPG, PNG — max 10 MB.

No attorney-client relationship is created by submitting this form. Attorney Advertising.

Source: State Attorney General filing, IL

View Official AG Filing →

University Of Illinois, Dscc Lombard, Regional Office breach?

Free case review · No fee unless you win

Call Now
Made with AI in Macaly