Albany College of Pharmacy and Health Sciences Reaches $5,080 Settlement Over 2024 Data Breach
Albany College of Pharmacy and Health Sciences (ACPHS) has agreed to a class action settlement following an August 2024 cybersecurity incident that potentially exposed sensitive personal data. The breach, which occurred between August 31 and September 14, 2024, may have compromised Social Security numbers, financial information, passport numbers, driver’s license numbers, and other personally identifiable information (PII).
Eligibility and Compensation
U.S. residents whose data was impacted and who received notice of the breach are eligible to file claims. Compensation options include:
- Up to $5,000 for documented out-of-pocket losses (e.g., identity theft, credit monitoring fees, ID replacement costs).
- Up to $80 for time spent responding to the breach (four hours at $20/hour).
- $25 as a one-time cash payment for those not claiming documented losses.
- Two years of free credit monitoring (CyEx Financial Shield Total) with $1 million in fraud insurance.
Claim Process and Deadlines
Eligible individuals can submit claims online, by mail, or via a paper form. Required documentation varies by claim type:
- Documented losses require receipts, bank statements, or other proof.
- Lost time requires an attestation of hours spent.
- Cash payment requires no documentation beyond the claim form.
The deadline to file a claim is November 16, 2026, with the final approval hearing scheduled for December 10, 2026. Payments will be distributed after court approval, with options including PayPal, Venmo, Zelle, or a physical check.
Settlement Fund Breakdown
The total settlement fund covers:
- Up to $300,000 in attorneys’ fees and costs.
- Up to $10,000 in service awards for class representatives.
- Credit monitoring costs (based on claims filed).
- Payments to eligible class members (amounts depend on valid claims).
Background and Allegations
The lawsuit alleged that ACPHS failed to adequately protect sensitive data after a third-party attacker gained unauthorized access to its network. While ACPHS denied wrongdoing, it opted to settle to avoid prolonged litigation. The breach underscores the risks of inadequate cybersecurity measures in safeguarding PII.
Source: https://www.claimdepot.com/settlements/albany-college-settlement
Albany Med Health System cybersecurity rating report: https://www.rankiteo.com/company/albanymed
"id": "ALB1788280437",
"linkid": "albanymed",
"type": "Breach",
"date": "8/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'U.S. residents whose data was '
'impacted',
'industry': 'Education/Health Sciences',
'location': 'Albany, New York, USA',
'name': 'Albany College of Pharmacy and Health '
'Sciences (ACPHS)',
'type': 'Educational Institution'}],
'attack_vector': 'Unauthorized network access by third-party attacker',
'customer_advisories': 'Affected individuals notified of the breach and '
'settlement options, including compensation for '
'documented losses, time spent, and credit monitoring.',
'data_breach': {'personally_identifiable_information': 'Social Security '
'numbers, passport '
'numbers, driver’s '
'license numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII), Financial '
'Information, Government-Issued '
'IDs'},
'date_detected': '2024-08-31',
'description': 'Albany College of Pharmacy and Health Sciences (ACPHS) has '
'agreed to a class action settlement following an August 2024 '
'cybersecurity incident that potentially exposed sensitive '
'personal data, including Social Security numbers, financial '
'information, passport numbers, driver’s license numbers, and '
'other personally identifiable information (PII).',
'impact': {'data_compromised': 'Social Security numbers, financial '
'information, passport numbers, driver’s '
'license numbers, and other PII',
'financial_loss': '$5,080 settlement',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action settlement',
'payment_information_risk': 'High'},
'investigation_status': 'Settled',
'lessons_learned': 'Inadequate cybersecurity measures can lead to significant '
'legal and financial consequences, including class action '
'settlements and reputational damage.',
'post_incident_analysis': {'corrective_actions': 'Settlement includes '
'compensation for affected '
'individuals and potential '
'future security '
'improvements.',
'root_causes': 'Inadequate cybersecurity measures '
'leading to unauthorized network '
'access by a third-party attacker.'},
'recommendations': 'Implement stronger cybersecurity protocols, regular '
'security audits, and employee training to prevent '
'unauthorized access to sensitive data.',
'references': [{'source': 'Class Action Settlement Notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Notice of breach and settlement '
'details provided to affected '
'individuals'},
'stakeholder_advisories': 'Eligible individuals advised to file claims for '
'compensation or credit monitoring by November 16, '
'2026.',
'title': 'Albany College of Pharmacy and Health Sciences Data Breach '
'Settlement',
'type': 'Data Breach'}