Memorial Heart Institute LLC: Memorial Heart Institute Ends Data Breach Suit for $3.75 Million

Memorial Heart Institute Settles $3.75M Over 2023 Data Breach Impacting Nearly Half a Million Patients

A federal court has preliminarily approved a $3.75 million settlement between Tennessee-based Memorial Heart Institute LLC and plaintiffs affected by a March 2023 data breach. The cyberattack exposed the private information of approximately 460,000 individuals, with 287,000 also having their Social Security numbers (SSNs) compromised.

Under the agreement, the SSN subclass will receive $2 million in a fund for prorated cash payments. The settlement resolves litigation stemming from the breach, which was attributed to a cybercrime group that accessed sensitive patient data.

The case was overseen by Judge Curtis L. Collier of the U.S. District Court for the Eastern District of Tennessee. Memorial Heart Institute, which operates under a different business name, has not disclosed further details about the breach’s origin or the attackers’ identities. The financial and reputational consequences of the incident highlight the growing risks healthcare organizations face from cyber threats.

Source: https://news.bloomberglaw.com/business-and-practice/memorial-heart-institute-ends-data-breach-suit-for-3-75-million

Heart and Vascular Care cybersecurity rating report: https://www.rankiteo.com/company/heart-and-vascular-care

"id": "HEA1773426785",
"linkid": "heart-and-vascular-care",
"type": "Breach",
"date": "3/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '460,000 individuals',
                        'industry': 'Healthcare',
                        'location': 'Tennessee, USA',
                        'name': 'Memorial Heart Institute LLC',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'number_of_records_exposed': '460,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (SSNs and patient data)',
                 'type_of_data_compromised': ['Personal information',
                                              'Social Security numbers']},
 'date_detected': '2023-03',
 'description': 'A federal court preliminarily approved a $3.75 million '
                'settlement between Memorial Heart Institute LLC and '
                'plaintiffs affected by a March 2023 data breach that exposed '
                'the private information of approximately 460,000 individuals, '
                'including Social Security numbers of 287,000 patients.',
 'impact': {'brand_reputation_impact': 'High',
            'data_compromised': 'Personal and sensitive patient data, '
                                'including Social Security numbers',
            'financial_loss': '$3.75 million (settlement)',
            'identity_theft_risk': 'High (SSNs compromised)',
            'legal_liabilities': 'Litigation resolved via settlement'},
 'investigation_status': 'Settled',
 'references': [{'source': 'U.S. District Court for the Eastern District of '
                           'Tennessee'}],
 'regulatory_compliance': {'legal_actions': 'Litigation resolved via '
                                            'settlement'},
 'threat_actor': 'Cybercrime group',
 'title': 'Memorial Heart Institute Data Breach Settlement',
 'type': 'Data Breach'}