The lawsuit alleges that DuPage Medical Group and its employees “failed to properly monitor the computer network and systems housing the private information.” “We remain committed to information security, and although we are unaware at this time of any attempted or actual misuse of the information involved, we understand the concern that this potential access raises,” DuPage Medical Group said in the statement. The plaintiffs are seeking damages, reimbursement of out-of-pocket costs and improvements to DuPage Medical Group’s data security systems, among other things.ĭuPage Medical Group said in a statement Thursday that it had not yet been served with the lawsuit and would need time to analyze the allegations. The lawsuit, filed on behalf of Rochelle Hestrup and Erin Peiss in DuPage County Circuit Court on Wednesday, alleges that DuPage Medical Group didn’t do enough to protect patients’ personal information and didn’t tell them quickly enough about the breach. Two patients have filed a lawsuit seeking class-action status against DuPage Medical Group just days after the physicians’ group said it was notifying 600,000 patients that their personal information may have been compromised during a July cyberattack.
