What is this about?

If you recently received a letter or an email from Chicago Public Schools ("CPS") informing you that your sensitive personal information was compromised in a data breach involving its vendor, Cleo Communications, LLC ("Cleo"), you may be entitled to compensation. Chicago Public Schools recently disclosed that Cleo was the victim of a data breach that exposed individuals’ sensitive personal information.

What Happened?

On February 8, 2025, Chicago Public Schools became aware of a security incident involving Cleo, a third-party vendor that contains current and former CPS students' information on one of its servers. Upon detection, CPS launched an investigation with the assistance of third-party cybersecurity experts to determine the nature and scope of the incident. The investigation determined that an unauthorized third party gained access to a server used by Cleo to store student data. This breach affected both current and former students dating back to the 2017-2018 school year. CPS conducted a comprehensive review of the impacted data to determine what information was compromised and identified affected individuals. On March 7, 2025, CPS identified persons whose sensitive data was included in the impacted data. On March 7, 2025, CPS made a public disclosure and started sending out notice letters to the impacted individuals.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal information may have been compromised:

• Students’ names,
• Dates of birth,
• Genders,
• Chicago Public Schools student ID numbers,
• Medicaid ID numbers, and
• Dates of Medicaid program eligibility

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you have experienced a disruption in service from Chicago Public Schools there is no cost or obligation to participate. Follow the link below to find out if you are eligible for compensation.