Healthcare Data Breach Settlement Could Mean Payments for More Than 900,000 Patients
A $4 million settlement could provide compensation to more than 900,000 patients after a healthcare data breach exposed sensitive personal and medical information. Eligible individuals may receive up to $5,000 for documented losses or a smaller cash payment if they do not have proof of expenses.
A major healthcare data breach settlement could put money back in the hands of nearly a million affected patients.
Essen Medical Associates, a healthcare provider based in New York, has agreed to pay $4 million to settle a class action lawsuit after a cyberattack exposed sensitive information belonging to current and former patients. The lawsuit followed a March 2023 breach in which unauthorized access to the company’s systems reportedly compromised a huge amount of personal and medical data.
The incident affected more than 900,000 people. Depending on the person, the exposed information may have included names, dates of birth, Social Security numbers, driver’s license or passport details, insurance records, financial account information, lab results, medical histories, treatment information, prescriptions, and other private health data.
Under the settlement, people who can show they suffered losses tied to the breach may be eligible to receive up to $5,000. Those who do not have documentation for specific expenses may still be able to claim a $100 cash payment.
There are a few key dates to know. Anyone who wants to object to the settlement must do so by May 4, 2026. Claims must be submitted by June 1, 2026, and the final approval hearing is set for July 7, 2026.
While the settlement resolves the lawsuit, it does not automatically mean the company admitted fault. Still, the case is another reminder of how damaging healthcare data breaches can be, especially when deeply personal information ends up in the wrong hands.
For affected patients, this settlement may offer some financial relief after a serious privacy scare.
