Covenant Health Agrees to $2 Million Settlement Over 2025 Data Breach Affecting 502,606 Patients
Covenant Health, along with St. Joseph Healthcare Foundation, St. Joseph Hospital, and St. Joseph Hospital Nashua, N.H., have reached a $2 million settlement to resolve consolidated class action lawsuits stemming from a 2025 data breach. An unauthorized third party first accessed Covenant Health's network on May 18, 2025, with suspicious activity detected on May 26, 2025. The breach exposed the protected health information of 502,606 individuals, including names, addresses, dates of birth, medical record numbers, Social Security numbers, health information, and health insurance information. Notification letters were mailed starting July 11, 2025, and multiple lawsuits were later consolidated into In re: Covenant Health Data Security Litigation in Penobscot County Superior Court, Maine.
Remediação
Under the preliminarily approved settlement, class members can claim reimbursement for documented losses up to $5,000, a pro rata cash payment of approximately $75, and a two-year CyEx Medical Shield Complete credit monitoring membership. Covenant Health has also agreed to implement security enhancements to reduce the risk of future incidents. The opt-out/objection deadline is December 15, 2026, the claims deadline is December 30, 2026, and a final fairness hearing is expected in early 2027.
Linha do tempo
-
Covenant Health Agrees to $2 Million Settlement Over 2025 Data Breach Affecting 502,606 Patients
ler a análise desta fonte ocultar
Covenant Health, along with St. Joseph Healthcare Foundation, St. Joseph Hospital, and St. Joseph Hospital Nashua, N.H., have reached a $2 million settlement to resolve consolidated class action lawsuits stemming from a 2025 data breach. An unauthorized third party first accessed Covenant Health's network on May 18, 2025, with suspicious activity detected on May 26, 2025. The breach exposed the protected health information of 502,606 individuals, including names, addresses, dates of birth, medical record numbers, Social Security numbers, health information, and health insurance information. Notification letters were mailed starting July 11, 2025, and multiple lawsuits were later consolidated into In re: Covenant Health Data Security Litigation in Penobscot County Superior Court, Maine.
Remediation
Under the preliminarily approved settlement, class members can claim reimbursement for documented losses up to $5,000, a pro rata cash payment of approximately $75, and a two-year CyEx Medical Shield Complete credit monitoring membership. Covenant Health has also agreed to implement security enhancements to reduce the risk of future incidents. The opt-out/objection deadline is December 15, 2026, the claims deadline is December 30, 2026, and a final fairness hearing is expected in early 2027.