Hillcrest Convalescent Center Reaches $2,500 Settlement Over 2024 Data Breach
Hillcrest Convalescent Center Inc. has agreed to a class action settlement following a June 2024 cyberattack that exposed sensitive personal and health data. The breach compromised names, addresses, Social Security numbers, financial account details, dates of birth, government-issued IDs, and medical and insurance information.
Eligibility & Compensation
U.S. residents whose data was potentially exposed may file claims. The settlement divides affected individuals into two groups:
- Group One: Those whose Social Security numbers were compromised. They may opt for a $50 cash payment or other benefits.
- Group Two: Those without exposed Social Security numbers.
All class members can claim up to $2,500 for documented out-of-pocket losses (e.g., identity theft, credit monitoring, ID replacement) incurred between June 27, 2024, and August 26, 2026. They may also receive two years of credit monitoring via CyEx Identity Defense Complete, including $1 million in identity theft insurance.
Claim Process & Deadlines
Claims can be submitted online, by mail, or via phone/email request. Required documentation varies:
- Documented losses: Bank statements, receipts, or other proof.
- $50 cash payment (Group One only): No documentation needed.
- Credit monitoring: No documentation required.
Payment options include PayPal, Venmo, Zelle, virtual prepaid cards, or physical checks. The settlement fund covers administration costs, $325,000 in attorneys’ fees, $7,500 in service awards for class representatives, and remaining funds for claimants.
Key deadlines:
- Opt-out deadline: July 27, 2026
- Final approval hearing: August 24, 2026
- Claim deadline: August 26, 2026
Payouts will be issued within 60 days of final court approval, following any appeals.
Background
The lawsuit alleged Hillcrest failed to adequately protect sensitive data, leading to the breach. While the company denies wrongdoing, it settled to avoid further litigation and provide relief to affected individuals.
Source: https://www.claimdepot.com/settlements/hillcrest-nc
Hillcrest Nursing Center cybersecurity rating report: https://www.rankiteo.com/company/hillcrest-nursing-center
"id": "HIL1781202529",
"linkid": "hillcrest-nursing-center",
"type": "Breach",
"date": "6/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'U.S. residents whose data was '
'potentially exposed',
'industry': 'Healthcare',
'location': 'United States',
'name': 'Hillcrest Convalescent Center Inc.',
'type': 'Healthcare Facility'}],
'customer_advisories': 'Claim process and deadlines for affected individuals',
'data_breach': {'personally_identifiable_information': ['Names',
'Addresses',
'Social Security '
'numbers',
'Dates of birth',
'Government-issued '
'IDs'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Identifiable '
'Information',
'Health Information',
'Financial Information']},
'date_detected': '2024-06-27',
'description': 'Hillcrest Convalescent Center Inc. agreed to a class action '
'settlement following a June 2024 cyberattack that exposed '
'sensitive personal and health data, including names, '
'addresses, Social Security numbers, financial account '
'details, dates of birth, government-issued IDs, and medical '
'and insurance information.',
'impact': {'data_compromised': 'Sensitive personal and health data',
'financial_loss': '$325,000 (attorneys’ fees) + $7,500 (service '
'awards) + settlement fund',
'identity_theft_risk': 'High (Social Security numbers and '
'financial account details exposed)',
'legal_liabilities': 'Class action settlement',
'payment_information_risk': 'High (financial account details '
'exposed)'},
'investigation_status': 'Settled',
'post_incident_analysis': {'root_causes': 'Alleged failure to adequately '
'protect sensitive data'},
'references': [{'source': 'Settlement Notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Settlement notice and claim process',
'enhanced_monitoring': 'Two years of credit monitoring via CyEx '
'Identity Defense Complete'},
'title': 'Hillcrest Convalescent Center Data Breach Settlement',
'type': 'Data Breach'}