**HealthEC LLC Reaches $4.5M Settlement Over 1.67M-Patient Data Breach**
A proposed $4.5 million settlement with HealthEC LLC, a healthcare technology company, has been submitted for final approval in the U.S. District Court for the District of New Jersey following a data breach that exposed the personal and medical information of approximately 1.67 million patients. The breach, which affected clients of HealthEC’s services, led to nearly 50,000 valid claims filed by impacted individuals.
Under the settlement terms, affected patients were given options for reimbursement or compensation, including three years of medical financial fraud protection—even after the claims period closed. The motion for final approval, filed on Monday, noted that only 22 members of the affected class opted out of the agreement. The settlement aims to resolve legal action stemming from the breach while providing long-term monitoring for those at risk of identity theft or fraud.
Source: https://news.bloomberglaw.com/litigation/healthec-5-5-million-data-breach-settlement-seeks-final-nod
TPRM report: https://www.rankiteo.com/company/hitcare
"id": "hit1765311026",
"linkid": "hitcare",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1.67 million patients',
'industry': 'Healthcare',
'name': 'HealthEC LLC',
'type': 'Health-care technology company'}],
'customer_advisories': 'Settlement includes reimbursement or compensation '
'options and three years of medical financial fraud '
'protection',
'data_breach': {'number_of_records_exposed': '1.67 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (medical and personally '
'identifiable information)',
'type_of_data_compromised': 'Personal and medical data'},
'description': 'A data breach at HealthEC LLC, a health-care technology '
'company, impacted approximately 1.67 million patients. A '
'settlement has been submitted for final approval after nearly '
'50,000 valid claims were received. The settlement includes '
'reimbursement or compensation options and three years of '
'medical financial fraud protection.',
'impact': {'brand_reputation_impact': 'Likely significant',
'data_compromised': 'Personal and medical data of 1.67 million '
'patients',
'identity_theft_risk': 'High (medical financial fraud protection '
'included)',
'legal_liabilities': 'Settlement with reimbursement and '
'compensation'},
'investigation_status': 'Settlement submitted for final approval',
'references': [{'source': 'Motion for final approval filed in US District '
'Court for the District of New Jersey'}],
'regulatory_compliance': {'legal_actions': 'Settlement filed in US District '
'Court for the District of New '
'Jersey'},
'title': 'HealthEC LLC Data Breach Settlement',
'type': 'Data Breach'}