In May–June 2024, Fraser Child and Family Center experienced a cyberattack that exposed sensitive personal data of approximately 64,127 individuals, including names, Social Security numbers, dates of birth, addresses, and medical records. The breach led to a $725,000 class-action settlement, offering affected individuals cash payments (up to $2,500 for documented losses) and two years of credit/identity monitoring (including dark web monitoring and $1M identity theft insurance). The incident impacted both adults and minors, with no requirement for financial loss to qualify. The lawsuit alleged unauthorized access to Fraser’s systems, though the organization denied wrongdoing. The settlement covers administrative costs, attorney fees, and payouts to class members, with remaining funds potentially distributed to a cy pres designee (Mid-Minnesota Legal Aid). The breach posed risks of identity theft, fraud, and long-term exposure of highly sensitive personal and health data.
Source: https://www.claimdepot.com/settlements/fraser-data-settlement
TPRM report: https://www.rankiteo.com/company/frasermn
"id": "fra2302523100925",
"linkid": "frasermn",
"type": "Cyber Attack",
"date": "6/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '64,127 (adults and minors)',
'industry': 'Healthcare / Child and Family Services',
'location': 'United States (exact location '
'unspecified)',
'name': 'Fraser Child and Family Center',
'type': 'Non-profit Organization'}],
'customer_advisories': ['Claim deadline: December 1, 2025',
'Opt-out deadline: November 3, 2025',
'Final approval hearing: November 20, 2025',
'Payout options: PayPal, Venmo, Zelle, Virtual '
'prepaid card, Paper check',
'Documentation required for documented losses: Bank '
'statements, receipts, third-party records'],
'data_breach': {'data_exfiltration': 'Likely (files accessed unauthorizedly)',
'number_of_records_exposed': '64,127',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Dates of birth',
'Addresses'],
'sensitivity_of_data': 'High (includes SSNs, medical info, '
'and minor data)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2024-05-01',
'description': "A cyberattack on Fraser Child and Family Center's computer "
'systems in May-June 2024 exposed sensitive personal '
'information, including names, Social Security numbers, dates '
'of birth, addresses, and medical information of approximately '
'64,127 individuals (adults and minors). The incident led to a '
'$725,000 class action settlement offering cash payments and '
'credit monitoring services to affected individuals.',
'impact': {'brand_reputation_impact': 'Class action lawsuit and settlement',
'data_compromised': ['Names',
'Social Security numbers',
'Dates of birth',
'Addresses',
'Medical information'],
'financial_loss': {'administrative_costs': 'To be determined',
'attorneys_fees': 'Up to $241,642.50',
'documented_losses_per_claimant': 'Up to $2,500',
'remaining_funds_for_cash_payments': 'Balance '
'after '
'deductions',
'service_awards': '$24,000 (total for 6 class '
'representatives)',
'settlement_fund': '$725,000'},
'identity_theft_risk': 'High (PII and medical data exposed)',
'legal_liabilities': '$725,000 settlement',
'systems_affected': ['Computer systems (unspecified)']},
'initial_access_broker': {'high_value_targets': ['PII', 'Medical records']},
'investigation_status': 'Settled via class action (no further details on '
'forensic investigation)',
'post_incident_analysis': {'corrective_actions': ['$725,000 settlement fund '
'for affected individuals',
'Credit monitoring services '
'for 2 years (adults and '
'minors)',
'Identity theft insurance '
'($1M for adults)']},
'references': [{'source': 'Class Action Settlement Notice (Fraser Data '
'Incident)'},
{'source': 'Settlement Administrator Contact: Fraser Data '
'Incident Settlement'}],
'regulatory_compliance': {'legal_actions': ['Class action lawsuit (settled '
'for $725,000)',
'Potential HIPAA violations '
'(unspecified)']},
'response': {'communication_strategy': ['Notice letters sent to affected '
'individuals',
'Class action settlement website and '
'claim process',
'Settlement administrator contact '
'channels (phone, email, mail)']},
'stakeholder_advisories': ['Notice letters to affected individuals',
'Settlement claim process (online/mail/email)',
'Credit monitoring services offered (CyEx Identity '
'Defense Complete for adults, CyEx Minor Defense '
'for minors)'],
'title': 'Fraser Child and Family Center Data Breach (May-June 2024)',
'type': ['Data Breach', 'Cyberattack', 'Unauthorized Access']}