CarePro Health Services Data Breach Settlement: $1.3M

Patients and individuals who received notice that their records were potentially accessed during the unauthorized network intrusion at CarePro Health Services discovered in November 2023.

Those seeking reimbursement for breach-related expenses must provide records showing the costs incurred, which may include financial statements, receipts or other transaction records.

A home health care provider has agreed to pay $1.3 million to settle a lawsuit accusing the company of leaving patient records vulnerable to hackers.

The case involves C.R. Pharmacy Services, which provides medical services under the CarePro Health Services brand across multiple states.

The litigation arose after the company detected suspicious activity on its computer network in mid-November 2023. An internal review determined that an unauthorized party may have gained access to files containing confidential patient data. Those affected were later notified that their records could have been viewed or copied during the incident.

According to the lawsuit, the exposed files contained highly sensitive information spanning multiple categories. Plaintiffs alleged that intruders may have obtained full names, birth dates, mailing addresses, government-issued identification numbers, banking details and comprehensive health and insurance records.

The legal complaint argued that CarePro neglected basic data protection standards despite handling large volumes of protected health information. Attorneys for the plaintiffs contended that the company stored patient records without proper encryption and ignored warning signs that its network defenses were outdated.

CarePro has denied these accusations and maintains that it acted appropriately. Nevertheless, the company opted to settle rather than face a prolonged court battle. The agreement does not constitute an admission of fault.

What Affected Individuals Can Recover

The settlement offers a combination of direct payments and protective services to qualifying class members.

Patients who spent money dealing with the aftermath of the breach can seek reimbursement for verified expenses up to $5,000. Covered costs include subscription fees for credit monitoring services purchased independently, money lost to fraudulent transactions that was not recovered, charges from financial institutions, and incidental expenses like mileage, postage and phone bills related to resolving breach-related issues.

Those who did not experience measurable financial harm remain eligible for a share of the settlement fund. After deducting legal fees and administrative expenses, the remaining balance will be divided among all valid claimants.

Early projections suggest each participant could receive around $100, though this figure may shift based on overall participation rates.

Beyond cash compensation, every class member who files a valid claim will receive a comprehensive identity protection package at no cost. This benefit runs for two years and includes monitoring of all three national credit bureaus, alerts for personal information appearing on illicit websites, insurance coverage up to $1 million for identity theft losses, and professional assistance restoring compromised identities.