/
← Voltar ao feed
low healthcare government

Jefferson County Health Department Agrees to $2.25M Settlement Over 2022 Data Breach Affecting 115,940 People

1 fonte(s) · 1 atualização(ões) · publicado 21/10/2026 13:35 · coletado há 2 dias

Jefferson County Health Department (Hillsboro, Missouri) has agreed to a $2.25 million settlement of a consolidated class action over a 2022 data security incident. An unauthorized third party accessed its network between October 31 and November 15, 2022, and may have viewed or obtained personal and protected health information. The breach was reported to the HHS Office for Civil Rights on January 13, 2023, as affecting 115,940 individuals. The department denies any wrongdoing or liability, but settled to avoid the cost and risk of trial after the court denied its motion to dismiss.

Detalhes técnicos

  • The article does not describe the attack vector, malware or threat actor.
  • Exposed data may include names, dates of birth, Social Security numbers, driver's license numbers, financial account information, medical information and health insurance information.
  • The first lawsuit was filed on January 27, 2023, and consolidated with a second complaint on October 2, 2023. The case, J.D., et al. v. Jefferson County Health Center d/b/a Jefferson County Health Department, is pending in the Circuit Court of the City of St. Louis, Missouri.
  • The plaintiffs allege negligence, breach of contract, breach of fiduciary duty and violation of the covenant of good faith and fair dealing.
  • Settlement terms: attorneys' fees, administration costs and service awards for three class representatives are paid from the fund. Class members can claim documented losses up to $300, including up to three hours of lost time at $20 per hour, or a one-time $150 cash payment.
  • The deadline for exclusion, objection and claims is November 16, 2026. The final fairness hearing is set for December 10, 2026.

Remediação

  • Affected individuals should submit a claim, opt out or object by November 16, 2026.
  • Class members should monitor financial accounts and credit reports for misuse of the exposed identity and health data.

Linha do tempo

  1. hipaajournal.com ↗ · pub. 21/10/2026 13:35 · coletado 21/10 14:02 primeiro registro

    Jefferson County Health Department Agrees to $2.25M Settlement Over 2022 Data Breach Affecting 115,940 People

    ler a análise desta fonte

    Jefferson County Health Department (Hillsboro, Missouri) has agreed to a $2.25 million settlement of a consolidated class action over a 2022 data security incident. An unauthorized third party accessed its network between October 31 and November 15, 2022, and may have viewed or obtained personal and protected health information. The breach was reported to the HHS Office for Civil Rights on January 13, 2023, as affecting 115,940 individuals. The department denies any wrongdoing or liability, but settled to avoid the cost and risk of trial after the court denied its motion to dismiss.

    Technical Details

    • The article does not describe the attack vector, malware or threat actor.
    • Exposed data may include names, dates of birth, Social Security numbers, driver's license numbers, financial account information, medical information and health insurance information.
    • The first lawsuit was filed on January 27, 2023, and consolidated with a second complaint on October 2, 2023. The case, J.D., et al. v. Jefferson County Health Center d/b/a Jefferson County Health Department, is pending in the Circuit Court of the City of St. Louis, Missouri.
    • The plaintiffs allege negligence, breach of contract, breach of fiduciary duty and violation of the covenant of good faith and fair dealing.
    • Settlement terms: attorneys' fees, administration costs and service awards for three class representatives are paid from the fund. Class members can claim documented losses up to $300, including up to three hours of lost time at $20 per hour, or a one-time $150 cash payment.
    • The deadline for exclusion, objection and claims is November 16, 2026. The final fairness hearing is set for December 10, 2026.

    Remediation

    • Affected individuals should submit a claim, opt out or object by November 16, 2026.
    • Class members should monitor financial accounts and credit reports for misuse of the exposed identity and health data.