Arisa Health Data Breach Settlement: $1.9M

Individuals identified by Arisa Health as impacted by the 2024 cybersecurity incident, including all those who were sent formal notification of the breach.

Claimants seeking reimbursement must submit receipts, billing statements, or other documentation not “self-prepared.” Handwritten records alone are not sufficient but may help support a valid claim when paired with verifiable documents.

Arisa Health has agreed to a $1.9 million class action settlement to resolve allegations that it failed to protect sensitive patient information in a data breach disclosed in March 2024. The breach reportedly exposed highly sensitive data such as names, Social Security numbers, medical records, insurance details, and driver’s license numbers.

Plaintiffs alleged that the breach was preventable and pointed to the company’s failure to use standard security practices such as multifactor authentication as contributing to the incident. Arisa Health, which offers behavioral health services throughout Arkansas, has denied wrongdoing but opted to settle the lawsuit to avoid extended litigation.

What Class Members Can Receive

Class members are eligible for the following benefits:

• Documented Loss Reimbursement:
  Up to $5,000 for losses linked to the breach, including expenses such as fraudulent charges, identity recovery services, bank fees, and credit monitoring. All claims must include reliable, third-party documentation.

• Flat-Rate Cash Payment:
  A $70 payment is available for those who do not have supporting documentation of financial losses.

• Credit Monitoring:
  All class members can enroll in three years of free credit monitoring, providing tools like identity theft alerts and fraud insurance.