Pediatric Home Service Data Breach Settlement Offers Compensation to Affected Individuals
A class action settlement has been reached with Pediatric Home Respiratory Services LLC (d/b/a Pediatric Home Service) following a November 2024 cyberattack that exposed the personal and protected health information (PII/PHI) of 436,434 individuals. The breach prompted a lawsuit alleging the company failed to adequately safeguard sensitive data, including names, addresses, Social Security numbers, and medical records.
Eligibility & Compensation
Individuals who received a breach notification from Pediatric Home Service may qualify for compensation. Parents or guardians can file claims on behalf of affected minors. The settlement offers two types of benefits:
-
Cash Payments:
- Up to $1,500 for documented out-of-pocket losses (e.g., identity theft, credit monitoring fees, ID replacement costs) incurred between November 1, 2024, and April 23, 2026.
- A $50 one-time payment for those without documented losses.
-
Credit Monitoring:
- CyEx Medical Shield Complete (adults): $1M medical identity theft insurance, healthcare ID monitoring, and HSA fraud detection.
- CyEx Identity Defense Total (adults): $1M identity theft insurance, credit file monitoring, dark web scanning, and public records tracking.
- CyEx Minor Defense Pro (minors): Identity monitoring, dark web scanning, and public records tracing.
Claim Process & Deadlines
Eligible individuals must submit a claim using their unique ID and PIN from the settlement notice. Claims can be filed online or by mail to the settlement administrator (P.O. Box 25226, Santa Ana, CA 92799) and must be postmarked or submitted by April 23, 2026. Approved payments and credit monitoring codes will be distributed approximately 90 days after the court’s final approval, scheduled for May 8, 2026.
Settlement Fund Allocation
The total settlement fund covers:
- Up to $240,000 in attorneys’ fees and costs.
- $1,500 in service awards for class representatives.
- Credit monitoring costs (based on claims filed).
- Payments to approved claimants (amounts dependent on participation).
Pediatric Home Service denied wrongdoing but agreed to settle to avoid prolonged litigation. The breach underscores the risks of inadequate cybersecurity measures in protecting sensitive health data.
Source: https://www.claimdepot.com/settlements/phs-data-settlement
Pediatric Home Service cybersecurity rating report: https://www.rankiteo.com/company/pediatric-home-service
"id": "PED1770422403",
"linkid": "pediatric-home-service",
"type": "Breach",
"date": "11/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '436,434',
'industry': 'Pediatric Home Respiratory Services',
'name': 'Pediatric Home Respiratory Services LLC '
'(d/b/a Pediatric Home Service)',
'type': 'Healthcare'}],
'customer_advisories': 'Breach notification with unique ID and PIN for '
'settlement claims',
'data_breach': {'number_of_records_exposed': '436,434',
'personally_identifiable_information': ['Names',
'Addresses',
'Social Security '
'numbers',
'Medical records'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2024-11-01',
'description': 'A class action settlement has been reached with Pediatric '
'Home Respiratory Services LLC (d/b/a Pediatric Home Service) '
'following a November 2024 cyberattack that exposed the '
'personal and protected health information (PII/PHI) of '
'436,434 individuals. The breach prompted a lawsuit alleging '
'the company failed to adequately safeguard sensitive data, '
'including names, addresses, Social Security numbers, and '
'medical records.',
'impact': {'data_compromised': 'Personal and protected health information '
'(PII/PHI), including names, addresses, Social '
'Security numbers, and medical records',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action lawsuit settlement'},
'lessons_learned': 'The breach underscores the risks of inadequate '
'cybersecurity measures in protecting sensitive health '
'data.',
'post_incident_analysis': {'root_causes': 'Inadequate cybersecurity measures'},
'references': [{'source': 'Settlement Notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Breach notification to affected '
'individuals'},
'title': 'Pediatric Home Service Data Breach Settlement',
'type': 'Data Breach'}