UI Health MyChart Lawsuit: No Tracking Case Found, Ransomware Disclosed
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
As of October 8, 2026 we found no UI Health lawsuit over Meta Pixel, Google Analytics or other tracking on the hospital website or the UI Health MyChart portal — and no settlement, no fund and no claim form. What is in the news is different: on October 2, 2026 the University of Illinois Chicago disclosed a ransomware attack on College of Medicine systems. UIC says patient care at UI Health was not affected and that it is still working out whose data was taken.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Actually Happened at UIC
UI Health is the University of Illinois Hospital & Health Sciences System in Chicago: the 485-bed University of Illinois Hospital, outpatient clinics and two federally qualified health centers, run by the University of Illinois Chicago. Its patient portal is UI Health MyChart, built on Epic.
In a campus notice dated October 2, 2026, UIC said IT staff found “unauthorized activity within portions of the College of Medicine network.” UIC calls it a ransomware attack. Some College of Medicine systems went down and have since been restored. UIC says “the main UIC network was not affected, and there was no impact on patient care delivery at UI Health.”
UIC also says the attackers “obtained some data located on College of Medicine servers” and that it is checking whether personal, research or academic information was in it. A ransomware group claims it took 344 GB. That is the criminals’ claim, not a confirmed fact, and a law firm tracking the incident notes the same figure appears on the group’s listing of another organization.
Case Details
There is no court case to report. We searched news coverage and federal dockets on CourtListener for the hospital name and for the Board of Trustees of the University of Illinois combined with pixel or tracking terms. The results were employment, civil-rights and trademark cases — nothing about the UI Health website or MyChart.
One reason a UIC hospital lawsuit looks different from a private hospital case: UI Health belongs to the state. Under the University of Illinois Act (110 ILCS 305/1), the Board may “sue and be sued, provided that any suit against the Board based upon a claim sounding in tort must be filed in the Court of Claims.” Illinois courts treat the University as the State for sovereign-immunity purposes (Abo-Saif v. Board of Trustees, 2022 IL App (1st) 211091). Privacy claims such as intrusion or negligence are torts, so a state-law tracking claim would likely face that hurdle. Whether a federal wiretap claim could proceed against the University in federal court has not been tested in any UI Health case we found.
Status: Reference Only, No Case and No Settlement
For the College of Medicine ransomware attack, UIC has said it will notify everyone affected once its review is complete. As of October 6, 2026, a law firm watching the incident reported that no notice letters or regulator filing had appeared, and we found no lawsuit filed over it. Law firm pages advertising a “UIC data breach lawsuit” are recruiting clients; they are not a filed case.
Who Could Be Affected
Tracking: no case means no class. If you used the UI Health website or MyChart and want to keep a record anyway, note what you did there (booking, searching a condition, messaging a doctor) and roughly when you last did it. Our form on this page asks exactly that, so we can tell you if a case appears.
Ransomware: UIC has not said whose data was involved — students, staff, research participants or patients. Watch for a letter from UIC or UI Health. Keep it and the envelope: it will list which data fields were taken and is your proof if a case follows. Questions go to security@uic.edu; UI Health’s privacy office is at 312.355.5650 or privacyoffice@uic.edu.
What Similar Cases Have Paid
UI Health and UIC Timeline
- 1
March 31, 2021 — Results Flow Into MyChart
UI Health begins releasing test results and provider notes through MyChart as soon as they are available.
- 2
July 10, 2024 — Advocate Aurora Pixel Deal Approved
A federal court in Wisconsin approves the $12,225,000 tracking settlement covering Advocate Aurora patients — not UI Health.
- 3
February 16, 2026 — Current Privacy Notice
UI Health’s current Notice of Privacy Practices takes effect. It names the privacy office as the contact for complaints.
- 4
October 2, 2026 — UIC Discloses Ransomware
UIC reports unauthorized activity on College of Medicine systems, says some data was taken and that UI Health patient care was not affected.
- 5
October 5, 2026 — Attackers Claim 344 GB
The Record reports the incident. A ransomware group claims 344 GB of data; UIC has not confirmed the claim.
- 6
October 8, 2026 — No Lawsuit, No Settlement
We found no tracking lawsuit against UI Health and no lawsuit over the ransomware attack. No fund, no claim form, no deadline.
Three Things to Watch For
A fresh ransomware headline plus a well-known hospital name is what scammers look for:
“Claim your UI Health MyChart settlement”
There is no UI Health tracking settlement and no claims site. A page asking for your MyChart login or Social Security number to “verify” you is harvesting data.
Emails or texts about the UIC ransomware attack
UIC says it will notify affected people after its review. A message that rushes you to click a link, reset your MyChart password through it, or pay for “protection” is not that notice. Log in to MyChart only by typing the address yourself or using the app.
Calls claiming your records were posted online
The attackers’ data claim is unconfirmed. Anyone phoning to say your file is on a leak site and asking for payment or account details is exploiting the news, not helping you.
UI Health Lawsuit — Questions People Actually Ask
Is there a UI Health MyChart lawsuit over tracking?
Not that we could find, as of October 8, 2026. We found no lawsuit claiming UI Health shared website or MyChart activity with Meta, Google or other trackers, and no settlement or claim form.
Is there a UIC hospital lawsuit over the ransomware attack?
We found none filed. UIC disclosed the College of Medicine attack on October 2, 2026 and says it will notify affected people. Law firm pages are inviting inquiries, but that is advertising, not a case.
Were UI Health patient records stolen?
Unknown. UIC says data was taken from College of Medicine servers, that the main UIC network was not affected and that patient care at UI Health was not affected. It has not said whose information was involved.
What is the UI Health patient portal called?
UI Health MyChart, Epic’s portal. In the MyChart app you select “UI Health” as your organization.
Can you even sue UI Health? It is a state hospital.
The University of Illinois Act requires tort suits against the Board of Trustees to be filed in the Illinois Court of Claims, not ordinary court. That shapes any state-law privacy claim. Whether federal wiretap claims could go forward is untested for UI Health. Ask a licensed Illinois attorney.
How did other hospital tracking cases end?
Advocate Aurora Health settled for $12,225,000, with payments capped at $50 per person, final approval July 10, 2024. Other Chicago-area cases are on our Endeavor Health, Northwestern Medicine and UChicago Medicine pages.
Do I need to do anything now?
There is nothing to file. Keep any UIC or UI Health letter you receive. Watch your insurer’s explanation-of-benefits statements for care you never had. A credit freeze is free and reversible.
How would I hear about a real case?
If a class is certified or a case settles, a court-appointed administrator sends notice directly. You can also use the form on this page to tell us whether you used the website or MyChart and when.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
MyChart Class Action Claim Form
Which hospital tracking cases have settled and how claims worked
MyChart Settlement Calculator
Estimate what a hospital pixel settlement has paid per person
Data Breach Settlement Calculator
If a UIC breach letter arrives, see what similar cases paid
Open Class Action Settlements
Settlements taking claims right now, with deadlines