Illinois Settlement Claims: BIPA, Data Breaches, and AG Restitution

Illinois class action settlements still open to new claims as of mid-2026 are led by two data breach cases: the Illinois Bone and Joint Institute settlement, with a July 1, 2026 deadline, and the nationwide Comcast/Xfinity breach settlement, with a September 14, 2026 deadline. A proposed Neutrogena Skin360 biometric privacy settlement is awaiting preliminary approval and has not set a claim date. Most of the other high-profile Illinois settlements from the past two years — including the $47.5 million Motorola BIPA case, the Speedway fingerprint case, and the Hospital Sisters Health System breach — have already closed their claim windows and are in the payment phase.

Settlements Still Accepting Claims

Illinois Bone and Joint Institute — $4 Million

The IBJI settlement is the most important open case for Illinois patients. It resolves Redman, et al. v. Illinois Bone and Joint Institute LLC (Case No. 2024-CH-08333, Circuit Court of Cook County), which arose from a data security incident discovered around July 4, 2024. Roughly 568,000 patients had personal information potentially accessed.1IBJISettlement.com. IBJI Settlement FAQ2ClassAction.org. 4M Illinois Bone and Joint Institute Settlement Resolves Data Breach Lawsuit

Eligible class members choose one of three benefits:

  • A pro rata cash payment estimated at about $50, with no documentation required.
  • Reimbursement of up to $5,000 for documented out-of-pocket losses traceable to the breach.
  • Two years of Kroll Medical Monitoring, which includes credit monitoring, identity scanning, and up to $1 million in identity fraud loss reimbursement.

The claim deadline is July 1, 2026, the same day as the final approval hearing before Judge William B. Sullivan at the Richard J. Daley Center in Chicago. Preliminary approval was granted March 3, 2026. Claims are filed at ibjisettlement.com.3IBJISettlement.com. IBJI Settlement Home4HIPAA Journal. Illinois Bone Joint Institute Settles Class Action Data Breach Lawsuit

Comcast/Xfinity Data Breach — $117.5 Million

This is a nationwide settlement, not limited to Illinois, but Illinois Xfinity customers are eligible. Hasson v. Comcast Cable Communications, LLC (Case No. 2:23-cv-05039-JMY, Eastern District of Pennsylvania) covers anyone who received an official breach notification from Comcast in December 2023 following the October 2023 incident.5ComcastBreachSettlement.com. Comcast Breach Settlement Home

You can choose from three benefits: a $50 alternative cash payment with no documentation, reimbursement of up to $10,000 for documented out-of-pocket losses and lost time, or automatic enrollment in identity defense and restoration services. Filing requires the unique settlement member ID from your original December 2023 breach notification. The final approval hearing is scheduled for July 7, 2026, and the claim deadline runs through September 14, 2026, at comcastbreachsettlement.com.6USA Today. Comcast Xfinity Settlement 2023 Data Breach7CNET. Xfinity Data Breach Settlement What to Know How to Claim 117 Million

Neutrogena Skin360 — $4.7 Million (Proposed)

The proposed settlement in Melzer et al. v. Johnson & Johnson Consumer Inc. (Case No. 3:22-cv-03149) covers Illinois residents who used the Neutrogena Skin360 app to perform a skin assessment while in Illinois between December 2019 and May 2023. The lawsuit alleges the app collected facial scan data in violation of Illinois’s Biometric Information Privacy Act. As of early 2026, the settlement was awaiting preliminary court approval, and no claim deadline had been set. Per-person payouts were estimated in the hundreds of dollars.8ClassAction.org. 4.7M Neutrogena Settlement to End Class Action Over Alleged BIPA Violations

BIPA Settlements in the Payment Phase

The Illinois Biometric Information Privacy Act allows $1,000 in damages for negligent violations and $5,000 for willful ones, which has driven a wave of large settlements. If you already filed a claim in any of these, watch your mail for a check. If you were an employee or user covered by an automatic-payment settlement, you do not need to do anything.

Motorola Solutions — $47.5 Million

Simmons v. Motorola Solutions, Inc. (Case No. 2024-L-010142) alleged that Motorola’s FaceSearch tool and booking photo galleries collected biometric data of Illinois residents without consent. The settlement covered at least 150,000 people. Claimants who filed valid claims were estimated to receive between $200 and $550. Final approval came August 20, 2025, with payments scheduled for distribution on February 6, 2026.9ClassAction.org. 47.5M Motorola Solutions Settlement Resolves Class Action Over Alleged FaceSearch BIPA Violations10SimmonsBIPASettlement.com. Simmons v. Motorola Solutions Settlement

NCS Pearson — $18.2 Million

The testing company’s settlement in Velazquez v. NCS Pearson, Inc. (No. 2022 CH 00280) received final approval on July 8, 2025, over allegations it unlawfully collected palm scan and facial comparison data. The claim deadline was June 20, 2025. Each claimant receives an equal share of the fund after deductions for attorneys’ fees (requested at up to 38%), administrative costs, and service awards.11BIPATestSettlement.com. Velazquez v. NCS Pearson Settlement FAQ12BIPATestSettlement.com. Velazquez v. NCS Pearson Settlement

Speedway — $12.1 Million

Current and former Speedway employees who used finger scanners on time clocks in Illinois between September 2012 and November 2017 are covered by Howe v. Speedway, LLC (Case No. 1:19-cv-01374, Northern District of Illinois). No claim form was required; eligible workers were to receive checks automatically, estimated at $970 each. Final approval was granted October 22, 2025.13SpeedwayBIPASettlement.com. Howe v. Speedway Settlement FAQ14Law360. Judge Gives Final OK to 12M Speedway BIPA Deal

Google Workspace for Education — $8.75 Million

H.K. et al. v. Google LLC (Case No. CC 20LL00017, Circuit Court of McDonough County) covered roughly 660,000 Illinois residents who had a voice or face model created in a Google Workspace for Education account while enrolled at an Illinois school between March 26, 2015, and May 15, 2025. Final approval was granted October 17, 2025, and payment distribution began February 13, 2026. Estimated payouts range from $30 to $100.15GoogleEducationBIPASettlement.com. H.K. v. Google LLC Settlement16GoogleEducationBIPASettlement.com. H.K. v. Google LLC Settlement FAQ

YouTube Face Blur — $6 Million

Colombo v. YouTube, LLC (Case No. 3:22-cv-06987) covered about 16,500 Illinois residents who uploaded videos processed by YouTube’s Face Blur program. The claim deadline was November 30, 2025. After final approval in January 2026, the roughly 4,500 valid claimants received approximately $900 each.17ClassAction.org. 6M YouTube Settlement Ends Class Action Over Facial Recognition Tech in Illinois18Courthouse News Service. Judge Approves 6 Million Class Settlement in YouTube Facial Data Collection Case

Smaller BIPA Cases

Several smaller settlements moved through Illinois courts in late 2024 through early 2026:

  • DX Enterprises ($1.5 million): McClaine v. DX Enterprises, Inc. (Case No. 3:23-cv-01168) paid about 586 class members approximately $2,445 each, with 86 rehired employees receiving an additional $846. No claim form was required. Final approval was granted April 15, 2025.19ClassAction.org. 1.5M DX Enterprises Settlement Ends Class Action Over Alleged Biometric Privacy Violations
  • Aura Frames ($1.86 million): Bulgatz v. Aura Home, Inc. (Case No. 2025LA0000070) covered Illinois residents who signed up for Aura accounts between July 2019 and November 2025. Payout was up to $13.28; the claim deadline was February 2, 2026.20AFBIPASettlement.com. Bulgatz v. Aura Home Settlement
  • JustPlay (up to $4.5 million), WorkEasy ($1.685 million), and Accu-Time ($1.5 million): Announced in January 2026. Specific claim deadlines and per-person amounts were not publicly detailed at announcement.21ClassAction.org. Illinois Biometric Information Privacy Act Settlements

Healthcare Data Breaches Now Paying Out

Hospital Sisters Health System — $7.6 Million

The HSHS settlement resolved claims from a cyberattack between August 16 and August 27, 2023 that compromised patient health and personal data. In In re Hospital Sisters Health System Data Breach Litigation (Case No. 2024CH000043, Sangamon County), Judge Adam Giganti issued final approval on December 10, 2025. About 80,000 patients joined the class. Payments averaged $40 to $50 for undocumented claims, up to $5,000 with documentation. All class members were also eligible for two years of CyEx Financial Shield monitoring. The claim deadline was November 14, 2025.22Illinois Times. Court Finalizes HSHS Settlement23HSHSDataSettlement.com. HSHS Data Settlement FAQ

Community First Medical Center — $1 Million

Pacheco, et al. v. CFMC (Case No. 2023CH08487, Cook County) addressed a July 12, 2023 data incident that exposed information for roughly 216,000 patients. The fund provided up to $5,000 for documented losses and an estimated $40 payment without documentation. The claim deadline was April 2, 2026.24HIPAA Journal. Community First Medical Center Data Breach Settlement25CFMCSettlement.com. CFMC Settlement Home

Arthur J. Gallagher & Co. — $21 Million

The insurance brokerage’s settlement in In re: Arthur J. Gallagher Data Breach Litigation allowed claims of up to $6,000 for documented losses, three years of financial account monitoring, or a pro rata cash share. California residents were eligible for an additional $100. Final approval was granted February 27, 2025; the claim deadline was February 10, 2025.26AJGDataSettlement.com. AJG Data Breach Settlement27Insurance Business Magazine. Gallagher Settles Lawsuit Over Major Data Breach

Illinois Attorney General Consumer Restitution

The Illinois Attorney General’s office under Kwame Raoul has recovered over $25 million from alternative retail electric suppliers accused of charging inflated rates through deceptive marketing. These are enforcement settlements rather than private class actions, and restitution is generally distributed directly to eligible customers without a claim form.28Illinois Attorney General. Attorney General Raoul Announces Settlement With Rushmore Energy

  • Direct Energy Services ($12 million): The People of the State of Illinois v. Direct Energy Services, LLC (Case No. 25 CH 4091) covers Illinois residential customers between June 2013 and April 2025. Restitution is based on each customer’s electricity usage. Atticus Administration has been distributing checks. Direct Energy was also barred from marketing and enrolling new Illinois customers for 12 months.29ILDirectEnergySettlement.com. Direct Energy Settlement30Illinois Attorney General. Attorney General Raoul Announces 12 Million Settlement With Direct Energy
  • Clearview Electric ($8.4 million): Announced September 2025. Eligible Illinois residential customers receive restitution based on usage. Clearview is permanently banned from marketing and selling electricity and gas in Illinois.31My Journal Courier. Settlement Reached Electricity Supplier
  • Rushmore Energy ($500,000): Announced June 4, 2026. Restitution goes to Illinois customers who received at least 30 days of service between January 2020 and December 2024.28Illinois Attorney General. Attorney General Raoul Announces Settlement With Rushmore Energy
  • DoorDash ($11.25 million): The People of the State of Illinois v. DoorDash, Inc. (Case No. 2024 CH 10011) covered Dashers who completed Illinois deliveries between July 2017 and September 2019. The claim deadline was February 10, 2025, with payments expected shortly after March 4, 2025.32ILDoorDashSettlement.com. IL DoorDash Settlement

Filing a Claim and Cashing a Check

For the two open cases, file at the official settlement websites: ibjisettlement.com for the Illinois Bone and Joint Institute case, and comcastbreachsettlement.com for the Xfinity breach. The Comcast site requires the member ID from your December 2023 breach notice, so locate that letter or email before starting. If you’re claiming documented losses in either case, keep receipts, bank statements, or fraud reports ready to upload.

If you already filed in one of the closed cases and haven’t received payment, check the settlement administrator’s website for distribution updates. Settlement checks typically expire 90 days after issue, so deposit them promptly. And if you were a Speedway employee, a DX Enterprises worker, or a Clearview or Direct Energy customer, no filing is required; your payment should arrive automatically at the address the administrator has on file.