/
← Voltar ao feed
low healthcare

Washington Gastroenterology to pay $4.6M to settle class action over breach affecting 583,741 people

1 fonte(s) · 1 atualização(ões) · publicado 23/10/2026 09:34 · coletado há 3 horas

Washington Gastroenterology has agreed to a $4,600,000 settlement of consolidated class action litigation (In re Washington Gastroenterology, PLLC Data Breach Litigation) over a breach of its network. Attackers accessed the network on October 23, 2024, and the incident was identified on January 28, 2025. The personal and protected health information of 583,741 individuals was potentially stolen. Affected employees were notified on May 23, 2025, and patients on August 22, 2025. The defendant denies any wrongdoing.

Detalhes técnicos

  • Data potentially exposed: names, Social Security numbers, financial and banking information, medical information and health insurance information.
  • The article gives no information on the attack vector, malware or threat actor.
  • Roughly 15 months passed between the intrusion and patient notification.
  • The lawsuit alleged negligence, breach of implied contract, unjust enrichment, invasion of privacy, and violations of the Washington Consumer Protection Act, the Washington Data Breach Notification Disclosure Law and the Uniform Health Care Information Act.
  • The settlement was preliminarily approved by the Pierce County Superior Court (Washington). The final fairness hearing is set for January 29, 2027.

Remediação

  • Class members are entitled to two years of single-bureau medical record and credit monitoring.
  • Class members can claim either reimbursement of documented losses up to $4,000 per person or a pro rata cash payment, estimated at $75.
  • Opt-out and objection deadline: December 11, 2026. Claim deadline: January 10, 2027.

Linha do tempo

  1. hipaajournal.com ↗ · pub. 23/10/2026 09:34 · coletado 23/10 10:01 primeiro registro

    Washington Gastroenterology to pay $4.6M to settle class action over breach affecting 583,741 people

    ler a análise desta fonte

    Washington Gastroenterology has agreed to a $4,600,000 settlement of consolidated class action litigation (In re Washington Gastroenterology, PLLC Data Breach Litigation) over a breach of its network. Attackers accessed the network on October 23, 2024, and the incident was identified on January 28, 2025. The personal and protected health information of 583,741 individuals was potentially stolen. Affected employees were notified on May 23, 2025, and patients on August 22, 2025. The defendant denies any wrongdoing.

    Technical Details

    • Data potentially exposed: names, Social Security numbers, financial and banking information, medical information and health insurance information.
    • The article gives no information on the attack vector, malware or threat actor.
    • Roughly 15 months passed between the intrusion and patient notification.
    • The lawsuit alleged negligence, breach of implied contract, unjust enrichment, invasion of privacy, and violations of the Washington Consumer Protection Act, the Washington Data Breach Notification Disclosure Law and the Uniform Health Care Information Act.
    • The settlement was preliminarily approved by the Pierce County Superior Court (Washington). The final fairness hearing is set for January 29, 2027.

    Remediation

    • Class members are entitled to two years of single-bureau medical record and credit monitoring.
    • Class members can claim either reimbursement of documented losses up to $4,000 per person or a pro rata cash payment, estimated at $75.
    • Opt-out and objection deadline: December 11, 2026. Claim deadline: January 10, 2027.