A Massachusetts community health centre that serves patients across the Brockton area has agreed to fund an $850,000 settlement over a 2024 ransomware break-in that touched 97,488 people. Brockton Neighborhood Health Center pays up to $825,000 into the pot, with the balance covering administration.
The Interlock crew held the network from November 1 to November 3, 2024, walking off with names, addresses, birth dates, diagnoses, lab results, medication lists, medical record numbers and insurance details.
Consolidated litigation in Plymouth County Superior Court alleged negligence, breach of implied contract, unjust enrichment and invasion of privacy. The health centre denies wrongdoing and says it settled to end the uncertainty of continued litigation.
Claims open the door to three years of credit monitoring, reimbursement of documented losses capped at $2,500 per person, or a flat cash payment of up to $50 where no reimbursement claim is filed.
The court granted preliminary approval. Objections are due November 9, 2026, claims close December 8, 2026, and the final fairness hearing is set for January 12, 2027.
Small providers should read the arithmetic plainly. Two days of attacker access produced a six-figure payout plus monitoring obligations, legal fees and a two-year claims tail.
