In July 2023, M&D Capital Premier Billing experienced a data breach where unauthorized actors gained access to systems containing sensitive personal and medical information of individuals. The incident exposed private data, leading to a class action lawsuit alleging inadequate safeguards. Affected individuals were offered settlements, including up to $5,000 for documented losses (e.g., bank fees, credit monitoring costs) or a flat $75 cash payment, alongside optional two-year medical monitoring. The breach resulted in potential financial and reputational harm, with victims required to submit claims by January 27, 2026. A $1 million settlement fund was allocated, covering legal fees, administrative costs, and payouts to eligible class members. The company denied wrongdoing but settled to avoid litigation risks.
Source: https://www.claimdepot.com/settlements/md-data-settlement
M&D Capital Premier Billing, LLC cybersecurity rating report: https://www.rankiteo.com/company/m-d-capital-premier-billing-llc
"id": "M-D05102305112625",
"linkid": "m-d-capital-premier-billing-llc",
"type": "Breach",
"date": "7/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Individuals whose private '
'information was compromised '
'(exact number unspecified)',
'name': 'M&D Capital Premier Billing',
'type': 'Company'}],
'customer_advisories': 'Eligible individuals notified via settlement website '
'and mailing address (M&D Capital Data Breach '
'Litigation, Settlement Administrator, P.O. Box 2696, '
'Portland, OR 97208-2696)',
'data_breach': {'data_exfiltration': 'Yes (unauthorized access to systems)',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personal and medical data)',
'type_of_data_compromised': ['personal information',
'medical data']},
'date_detected': '2023-07-08',
'description': 'Individuals whose private information the July 2023 M&D '
'Capital Premier Billing data breach potentially compromised '
'may be eligible to claim up to $5,000 or a $75 cash payment '
'from a class action settlement. The breach exposed sensitive '
'personal and medical data due to unauthorized access to '
'systems containing private information.',
'impact': {'brand_reputation_impact': 'Negative (settlement and public '
'disclosure)',
'customer_complaints': 'Class action lawsuit filed',
'data_compromised': ['personal information', 'medical data'],
'financial_loss': '$1,000,000 (settlement fund)',
'identity_theft_risk': 'High (exposed personal and medical data)',
'legal_liabilities': '$1,000,000 settlement fund (including '
"attorneys' fees, service awards, and medical "
'monitoring)'},
'investigation_status': 'Settled (class action lawsuit)',
'post_incident_analysis': {'corrective_actions': 'Settlement agreement (no '
'specific technical or '
'procedural changes '
'disclosed)',
'root_causes': 'Alleged failure to implement '
'reasonable safeguards to protect '
'personal and medical information'},
'references': [{'source': 'Class Action Settlement Notice'},
{'source': 'M&D Capital Data Breach Litigation Settlement '
'Administrator'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit settled for '
'$1,000,000'},
'response': {'communication_strategy': 'Class action settlement notification '
'and claims process'},
'stakeholder_advisories': 'Settlement claims process communicated to affected '
'individuals',
'title': 'M&D Capital $1M Data Breach Class Action Settlement',
'type': 'Data Breach'}