Susan B. Allen Memorial Hospital Reaches $100+ Settlement Following 2025 Data Breach
Susan B. Allen Memorial Hospital has agreed to a class action settlement after a July 2025 cyberattack exposed the personal and medical data of over 12,000 patients. The breach compromised both personally identifiable information (PII) and protected health information (PHI), leading to allegations that the hospital failed to adequately safeguard patient records.
Eligible claimants current and former patients who received a written notice about the breach may submit claims for up to $100 in compensation, along with two years of credit monitoring and identity theft protection. The settlement offers three benefit options:
- Credit monitoring via CyEx Medical Shield Complete, including $1 million in medical identity theft insurance and fraud resolution support.
- Reimbursement for out-of-pocket losses (up to $100) for expenses like credit monitoring fees, ID replacement, or fraud-related costs.
- Compensation for time spent (up to $100) addressing the breach, such as researching the incident or changing passwords.
Claims must be filed by November 12, 2026, either online or by mail, with supporting documentation required for reimbursement requests. Payments will be distributed via PayPal, Venmo, Zelle, virtual prepaid cards, or paper checks.
The settlement fund allocates up to $150,000 for attorneys’ fees, $6,000 for class representatives, and $15,000 for administrative costs, with the remainder covering claimant payouts. A final approval hearing is scheduled for December 7, 2026, with payments expected within 65 days of finalization.
While the hospital denies wrongdoing, it opted to settle to avoid prolonged litigation. The breach underscores ongoing risks in healthcare cybersecurity, where sensitive patient data remains a prime target for attackers.
Source: https://www.claimdepot.com/settlements/sbamh-data-settlement
Susan B. Allen Memorial Hospital cybersecurity rating report: https://www.rankiteo.com/company/susan-b.-allen-memorial-hospital
"id": "SUS1787583946",
"linkid": "susan-b.-allen-memorial-hospital",
"type": "Breach",
"date": "7/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '12,000+ patients',
'industry': 'Healthcare',
'name': 'Susan B. Allen Memorial Hospital',
'type': 'Hospital'}],
'customer_advisories': 'Written notice to affected patients; settlement '
'details published for claims.',
'data_breach': {'number_of_records_exposed': '12,000+',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2025-07-01',
'description': 'Susan B. Allen Memorial Hospital has agreed to a class action '
'settlement after a July 2025 cyberattack exposed the personal '
'and medical data of over 12,000 patients. The breach '
'compromised both personally identifiable information (PII) '
'and protected health information (PHI), leading to '
'allegations that the hospital failed to adequately safeguard '
'patient records.',
'impact': {'brand_reputation_impact': 'Allegations of inadequate safeguards',
'data_compromised': 'Personal and medical data (PII and PHI)',
'financial_loss': '$150,000 (settlement fund)',
'identity_theft_risk': 'High (PII and PHI exposed)',
'legal_liabilities': 'Class action settlement'},
'investigation_status': 'Settled',
'lessons_learned': 'Ongoing risks in healthcare cybersecurity, where '
'sensitive patient data remains a prime target for '
'attackers.',
'post_incident_analysis': {'root_causes': 'Alleged failure to adequately '
'safeguard patient records'},
'references': [{'source': 'Class action settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Written notice to affected patients'},
'title': 'Susan B. Allen Memorial Hospital Data Breach Settlement',
'type': 'Data Breach'}