One Brooklyn Health System Data Breach Settlement: $1.5M

Individuals who were notified by One Brooklyn Health System that their personal information may have been compromised in a data breach between July 9, 2022, and Nov. 19, 2022.

To claim reimbursement, class members must provide documentation of data breach-related expenses, such as:

• Bank and credit card statements
• Receipts for fraud-related costs
• Invoices for credit monitoring or identity theft services
• Documentation of professional fees, such as attorney or accountant costs
• Tax documents or IRS letters

One Brooklyn Health System has agreed to pay $1.5 million to settle claims that it failed to adequately protect patient information from a cyberattack in 2022.

According to the class action lawsuit, cybercriminals accessed One Brooklyn Health System’s network between July and November 2022, gaining access to a wide range of sensitive patient data. The compromised information reportedly included:

• Names
• Social Security numbers
• Driver’s license numbers
• Birth dates
• Financial account details
• Medical treatment information
• Health insurance information

The plaintiffs claim One Brooklyn Health System could have prevented the breach if it had invested in stronger cybersecurity protections and followed industry-standard data protection practices. By failing to implement these safeguards, the health system allegedly left patient data vulnerable to hackers.

One Brooklyn Health System, which serves over 400,000 patients annually across several Brooklyn-based hospitals and health centers, denied any wrongdoing but agreed to the settlement to resolve the litigation.

Under the Terms of the Settlement

Class members who experienced out-of-pocket losses directly related to the data breach can claim up to $2,500 for:

• Unreimbursed fraudulent charges
• Bank fees and credit expenses
• Travel expenses incurred to address identity theft issues
• Professional fees for credit repair or financial counseling
• Up to four hours of lost time at $25 per hour

All class members, including those who did not experience direct financial losses, can choose between:

• A pro-rata cash payment (final amount depends on the number of claims submitted)
• 24 months of credit monitoring services, including:
  • Three-bureau credit monitoring
  • Identity restoration assistance
  • $1 million in identity theft insurance

The settlement reflects the growing scrutiny on health care systems to protect patient information, especially given the sensitivity of medical records and insurance data. The financial and personal fallout from these breaches can be significant, and settlements like this aim to provide some compensation and added protection to affected individuals.