Pennsylvania Healthcare Data Breach Case Settled for $65 Million


Source: Infoesecurity Magazine

A significant legal case involving a data breach at a Pennsylvania healthcare provider has concluded with a landmark $65 million settlement.

Background of the Case

In March 2023, a lawsuit was filed against Lehigh Valley Health Network (LVHN), an independent healthcare organization in Pennsylvania, following a data breach that compromised the personal and medical information of nearly 135,000 patients and employees.

Details of the Breach

The breach exposed sensitive information, including addresses, email addresses, dates of birth, Social Security numbers, passport details, and various medical records. Notably, the breach also included nude photographs of cancer patients taken during treatment, often without their knowledge.

Legal Proceedings

The plaintiffs, represented by the law firm Saltz Mongeluzzi Bendesky, argued that LVHN failed to adequately protect their data, leading to the exposure of highly sensitive information. The case highlighted the severe impact of the breach on the affected individuals, particularly those whose nude photos were stolen and, in some cases, published online.

Settlement Announcement

On September 11, 2024, it was announced that a settlement had been reached, with LVHN, now under the ownership of Jefferson Health, agreeing to pay $65 million in compensation. This settlement is considered a record amount for a hacking-related lawsuit in the healthcare sector.

Compensation Details

The settlement will provide payments to the affected individuals, ranging from $50 to $70,000. Those who had their nude photos published online will receive the highest compensation amounts.

Final Approval

The Lackawanna County Court of Common Pleas, which has jurisdiction over the case, has scheduled a final fairness hearing for November 15 to determine whether the settlement will receive final approval.