Baptist Health Medical Center-Drew County data breach class action settlement gets preliminary approval
A class action settlement over the data breach at Baptist Health Medical Center-Drew County (Arkansas) has received preliminary court approval. An unidentified cybercriminal actor accessed the hospital's systems and acquired patient personal and protected health information, affecting 5,207 individuals according to the report to the HHS Office for Civil Rights. The consolidated suit, Latanya Frazier & Chanta Ringo v. Baptist Health, alleged negligence and HIPAA-related security failures. The provider denies wrongdoing. The final fairness hearing is set for February 4, 2027.
Detalhes técnicos
- The article dates the unauthorized access as between August 22 and July 8, 2024. The start year is not clear in the text.
- Exposed data: names, addresses, birth dates, diagnoses, treatment information, medical record numbers and other information.
- The plaintiffs alleged insufficient intrusion monitoring and a lack of industry-standard safeguards. The article does not describe the attack vector, malware or threat actor.
- Claims asserted: negligence, negligence per se, breach of implied contract, breach of fiduciary duty, unjust enrichment and invasion of privacy.
Remediação
- Settlement benefits: two years of single-bureau credit monitoring with a $1 million identity theft insurance policy.
- Up to four hours of lost time at $20 per hour.
- Up to $400 for documented ordinary losses incurred between April 22, 2024 and December 8, 2026.
- Up to $4,000 per class member for documented extraordinary losses from fraud or identity theft.
- The deadline to object or opt out is November 9, 2026. The claim deadline is December 8, 2026.
Linha do tempo
-
Baptist Health Medical Center-Drew County data breach class action settlement gets preliminary approval
ler a análise desta fonte ocultar
A class action settlement over the data breach at Baptist Health Medical Center-Drew County (Arkansas) has received preliminary court approval. An unidentified cybercriminal actor accessed the hospital's systems and acquired patient personal and protected health information, affecting 5,207 individuals according to the report to the HHS Office for Civil Rights. The consolidated suit, Latanya Frazier & Chanta Ringo v. Baptist Health, alleged negligence and HIPAA-related security failures. The provider denies wrongdoing. The final fairness hearing is set for February 4, 2027.
Technical Details
- The article dates the unauthorized access as between August 22 and July 8, 2024. The start year is not clear in the text.
- Exposed data: names, addresses, birth dates, diagnoses, treatment information, medical record numbers and other information.
- The plaintiffs alleged insufficient intrusion monitoring and a lack of industry-standard safeguards. The article does not describe the attack vector, malware or threat actor.
- Claims asserted: negligence, negligence per se, breach of implied contract, breach of fiduciary duty, unjust enrichment and invasion of privacy.
Remediation
- Settlement benefits: two years of single-bureau credit monitoring with a $1 million identity theft insurance policy.
- Up to four hours of lost time at $20 per hour.
- Up to $400 for documented ordinary losses incurred between April 22, 2024 and December 8, 2026.
- Up to $4,000 per class member for documented extraordinary losses from fraud or identity theft.
- The deadline to object or opt out is November 9, 2026. The claim deadline is December 8, 2026.