Settlement Details and Compensation
Alabama Ophthalmology Associates has reached a preliminary settlement in a class action lawsuit stemming from a January 2025 ransomware attack. The breach, discovered on January 30, 2025, allowed hackers to access patient data between January 22 and January 30. Compromised information includes names, Social Security numbers, dates of birth, and medical history. Affected patients can claim two years of credit monitoring and identity theft protection. They may also choose between documented losses up to $5,000 or a pro rata cash payment, expected to be around $60 per person. Claims must be filed by June 25, 2026.
Allegations and Legal Context
The consolidated lawsuit alleged that Alabama Ophthalmology Associates failed to implement reasonable safeguards to protect sensitive data. Specific claims include negligence, breach of contract, and invasion of privacy. The defendant denies all wrongdoing but agreed to settle to avoid further legal costs and trial uncertainty. A final fairness hearing is scheduled for July 6, 2026. The breach notification letters were mailed in April 2025, affecting 131,576 individuals. This incident underscores ongoing risks to healthcare providers, where patient records are a prime target for ransomware attacks due to the value of billing and personal health information.
Source: Hipaajournal
