Tens of thousands of patients are in line for settlement benefits after two health providers agreed to resolve class action lawsuits over data breaches in Michigan and Massachusetts.
An April 2025 intrusion at McKenzie Memorial Hospital in Michigan’s Sanilac County let an unauthorized party move around the network for roughly a day before it was spotted. The hospital’s operator, McKenzie Health System, has now settled the resulting class action, reporting the breach to federal regulators as affecting 58,839 people. Names, Social Security numbers, and diagnosis details were among the exposed records. Class members receive two years of credit monitoring and identity theft protection, plus a choice between reimbursement of documented losses up to $4,000 and a flat $50 payment. The opt-out and claims window closes August 24, with a fairness hearing set for October 6.
The Massachusetts half of the pair is Aspire Health Alliance, the operating name of South Shore Mental Health Center, whose Quincy, Braintree, and Marshfield facilities were hit by a September 2023 incident affecting 17,490 people. Medicare and Medicaid numbers, insurance details, and treatment records were exposed. The provider set up a $400K fund: class members receive a one-year CyEx Medical Shield membership and may claim up to $2,500 in documented losses or a pro rata cash award. Claims close September 16, with a hearing October 1. Both organizations deny wrongdoing and said they settled to end costly litigation.
