A federal court has granted final approval for a settlement from Nashville, Tenn.-based HCA Healthcare over a 2023 data breach.
The health system faced the consolidated class-action lawsuit over a hack that affected an estimated 11 million patients. Class members are each eligible for up to $5,000 payments, while the plaintiffs’ attorneys will receive $3.1 million, or no more than 8.75% of the settlement. A judge for the U.S. District of the Middle District of Tennessee approved the agreement in late October.
“We are pleased to have reached a fair and appropriate resolution to this litigation,” an HCA spokesperson emailed Becker’s, sending a statement the health system released after the initial settlement agreement.
“The 2023 incident involved an external storage location, and no clinical information (such as treatment, diagnosis or condition), payment information (such as credit card or account numbers), or other sensitive information (such as passwords, driver’s license or Social Security number) was involved. HCA Healthcare offered credit monitoring and identity protection services to all impacted patients.”
The lawsuit class included “more than 100” members, according to the original complaint. Becker’s reached out to HCA to confirm the total amount of the settlement.
