Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) reported this breach to the Illinois Attorney General. Affected individuals who received a notification letter may be entitled to financial compensation through a class action lawsuit — at no cost to you.
The Illinois Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear on this page only when supported by a public case record. This tracker does not estimate or guarantee legal outcomes.
According to the Illinois Attorney General filing, the following types of personal information were compromised in the Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) data breach:
Each type of exposed data strengthens your legal claim. Courts have consistently recognized that the unauthorized disclosure of this information constitutes actionable harm.
Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) operates as a specialized medical practice dedicated to the surgical and medical care of infants, children, and adolescents with complex ear, nose, throat, and related head and neck disorders. Because the practice handles vulnerable pediatric populations, it maintains exceptionally detailed records encompassing not only standard demographic and financial information but also deeply personal clinical data. This includes comprehensive pediatric patient histories, specialized surgical notes, diagnostic imaging, audiograms, allergy testing results, insurance billing details, and parents' or legal guardians' payment information. The necessity of maintaining continuity of care, coordinating with pediatricians, and processing intricate medical insurance claims requires the practice to store and transmit vast quantities of sensitive electronic protected health information across its administrative and clinical networks.
In 2025, Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) reported a significant security incident to the Illinois Attorney General, joining a growing wave of cyberattacks targeting specialized medical providers. In incidents of this nature, unauthorized actors frequently exploit vulnerabilities in digital infrastructure, compromise employee credentials, or leverage third-party vendor systems to gain entry into centralized databases. Healthcare organizations remain prime targets for malicious actors due to the high market value of medical identities on the dark web and the operational pressures that can sometimes leave legacy administrative networks vulnerable to sophisticated intrusion methods, ransomware deployment, or unauthorized data exfiltration.
The exposure resulting from a breach of a specialized pediatric surgical practice involves categories of sensitive data that carry profound and long-term risks for affected families. Compromised information typically includes full names, dates of birth, Social Security numbers, home addresses, health insurance policy numbers, medical record numbers, and detailed diagnostic, surgical, and treatment histories. Unlike standard retail breaches where credit cards can be canceled, medical and pediatric data cannot be easily altered. The exposure of a child's Social Security number and medical history creates a severe, multi-year risk of identity theft, fraudulent medical accounts being opened in the minor's name, insurance fraud, and compromised credit profiles that may go undetected until the child reaches adulthood and attempts to apply for student loans, housing, or employment.
Under federal and state law, including the Health Insurance Portability and Accountability Act (HIPAA) and the Illinois Personal Information Protection Act, healthcare providers like Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) have a strict legal duty to implement and maintain robust administrative, physical, and technical safeguards to protect patient data. These regulations mandate regular risk assessments, encryption of stored and transmitted records, secure network architectures, and employee cybersecurity training. A data breach of this magnitude strongly indicates a failure to satisfy these fundamental legal obligations, suggesting that existing security controls were inadequate to prevent unauthorized access or to detect network intrusions in a timely manner.
Receiving a formal data breach notification letter from Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) serves as formal legal confirmation that your or your child's confidential records were compromised as a result of the organization's inadequate security measures. Under established legal principles, the receipt of this notice establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the practice accountable. Affected individuals do not need to demonstrate that financial fraud or direct monetary loss has already occurred to pursue legal claims for negligence, breach of implied contract, and statutory violations. Our firm evaluates and investigates these data breach matters on a strict contingency fee basis, meaning families pay absolutely no upfront costs or out-of-pocket legal fees, and we only recover compensation if a successful financial recovery is achieved.
You do not need to prove you were financially harmed to qualify. Courts have recognized that the exposure of personal data itself constitutes actionable harm. You may qualify if any of the following apply:
You received a data breach notification letter from Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns)
You were a customer, patient, employee, or client of Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns)
Your personal information was stored in Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns)'s systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Take these steps immediately to protect yourself and preserve your right to compensation.
Your Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) data breach notification letter is legal evidence. Store it in a safe place — physical and digital copies. It establishes that you were affected by this breach and strengthens your claim for compensation.
Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) is typically required to offer free credit monitoring to affected individuals. Check your notification letter for enrollment instructions and use all offered services — they help detect fraud early and document harm.
Contact Equifax, Experian, and TransUnion to place a free credit freeze. This prevents new accounts from being opened in your name and protects you from identity theft. You can lift the freeze at any time.
You have a limited window to file a claim. Contact our attorneys today for a free, no-obligation case review. We handle all Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) data breach cases on a contingency basis — you pay nothing unless we win.
Security Incident
Prior to AG notification
Unauthorized access to Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns)'s systems containing personal information.
Reported to Attorney General
February 24, 2025
Pediatric Otolaryngology Head And Neck Surgery Associates (Pohns) filed an official data breach notice with the Illinois AG.
Consumer Notification Letters Sent
Within weeks of AG filing
State law requires companies to mail notification letters to all affected individuals.
Legal Window — Act Now
Statute of limitations applies
State law sets a deadline to file claims. Waiting can forfeit your right to compensation.
Data breach victims may be entitled to several forms of compensation. The specific amounts depend on your state, the type of data exposed, and the company's conduct.
States like California allow $100–$750 per incident regardless of actual harm. Other states provide separate statutory remedies for data breach victims.
Reimbursement for any fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Illinois's Personal Information Protection Act (PIPA) and Biometric Information Privacy Act (BIPA) provide some of the strongest data protection rights in the country. BIPA allows statutory damages of $1,000–$5,000 per violation, and class actions have resulted in substantial settlements.
These companies also reported data breaches to the Illinois Attorney General. If you received a letter from any of these organizations, you may also be entitled to compensation.
Power Solutions International, Inc
Illinois · Jan 2025
Sunflower Medical Group
Illinois · Jan 2025
Division Of Specialized Care For Children
Illinois · Jan 2025
Orthominds, Llc (Supplemental)
Illinois · Jan 2025
Conduent State & Local Services, Inc.
Illinois · Jan 2025
Continental Casualty Company And Its Affiliates ("Cna")
Illinois · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris