Innovative Renal Care Agrees to $900,000 Settlement Over February 2024 Data Breach Affecting 59,400 People
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care provider with more than 200 locations in 28 U.S. states, has proposed a $900,000 settlement to resolve consolidated class action litigation (In re American Renal Management LLC Data Breach Litigation, U.S. District Court for the Middle District of Tennessee). The litigation stems from a cyberattack identified on February 29, 2024, in which an unauthorized third party copied files containing patient data. Notification letters began on February 14, 2025, almost a year after discovery, and the defendant notified 59,400 living individuals according to the lawsuit. The company denies wrongdoing and liability, but mediation succeeded.
Detalhes técnicos
- Unauthorized access to the network lasted from February 21, 2024, to March 1, 2024; the intrusion was identified on February 29, 2024.
- Exfiltrated files contained names, contact information, birth dates, Social Security numbers, driver's license numbers, financial account information, health insurance information, billing and claims information, and medical information.
- HHS was notified on April 29, 2024, with a placeholder figure of at least 501 individuals, which has not been updated since.
- The article does not name the attacker, malware or initial access vector.
- The five named plaintiffs allege inadequate cybersecurity measures and unreasonable notification delay. Claims include negligence, negligence per se, breach of implied contract, invasion of privacy, unjust enrichment, and violations of the California Consumer Privacy Act and California Unfair Competition Law.
Remediação
- Class members can claim reimbursement of up to $5,000 for documented, unreimbursed losses and/or a pro rata cash payment, estimated at $100 but variable with claim volume.
- Key dates: opt-out and objection deadline November 20, 2026; claims deadline December 21, 2026; final fairness hearing February 1, 2027.
- The fund covers attorneys' fees and expenses, administration costs and class representative service awards, with the remainder paid to class members.
Linha do tempo
-
Innovative Renal Care Agrees to $900,000 Settlement Over February 2024 Data Breach Affecting 59,400 People
ler a análise desta fonte ocultar
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care provider with more than 200 locations in 28 U.S. states, has proposed a $900,000 settlement to resolve consolidated class action litigation (In re American Renal Management LLC Data Breach Litigation, U.S. District Court for the Middle District of Tennessee). The litigation stems from a cyberattack identified on February 29, 2024, in which an unauthorized third party copied files containing patient data. Notification letters began on February 14, 2025, almost a year after discovery, and the defendant notified 59,400 living individuals according to the lawsuit. The company denies wrongdoing and liability, but mediation succeeded.
Technical Details
- Unauthorized access to the network lasted from February 21, 2024, to March 1, 2024; the intrusion was identified on February 29, 2024.
- Exfiltrated files contained names, contact information, birth dates, Social Security numbers, driver's license numbers, financial account information, health insurance information, billing and claims information, and medical information.
- HHS was notified on April 29, 2024, with a placeholder figure of at least 501 individuals, which has not been updated since.
- The article does not name the attacker, malware or initial access vector.
- The five named plaintiffs allege inadequate cybersecurity measures and unreasonable notification delay. Claims include negligence, negligence per se, breach of implied contract, invasion of privacy, unjust enrichment, and violations of the California Consumer Privacy Act and California Unfair Competition Law.
Remediation
- Class members can claim reimbursement of up to $5,000 for documented, unreimbursed losses and/or a pro rata cash payment, estimated at $100 but variable with claim volume.
- Key dates: opt-out and objection deadline November 20, 2026; claims deadline December 21, 2026; final fairness hearing February 1, 2027.
- The fund covers attorneys' fees and expenses, administration costs and class representative service awards, with the remainder paid to class members.