Alabama Cardiology Group Reaches $2.2M Settlement Over 2024 Data Breach Alabama Cardiology Group P.C. (d/b/a Alabama Cardiovascular Group) has agreed to a $2.225 million settlement to resolve a class action lawsuit stemming from a July 2, 2024, data breach that exposed sensitive personal and health information. The breach potentially compromised the data of U.S. residents who received a written notice from the organization regarding the incident. Eligible class members—individuals whose personally identifiable information (PII) or protected health information (PHI) was affected—may claim benefits under the settlement. These include: - Expense reimbursement of up to $5,000 for documented, unreimbursed out-of-pocket losses directly tied to the breach (e.g., credit monitoring fees, late charges, or professional services). - Pro rata cash payments as an alternative to reimbursement, with amounts determined by the number of valid claims. - Two years of credit monitoring via CyEx Medical Shield Complete, including one-bureau monitoring and $1 million in identity theft insurance. Claims must be submitted by March 6, 2026, either online or via mail/email to the settlement administrator. Documentation is required for expense reimbursement, while cash payments and credit monitoring only require an attestation of eligibility. Payouts will be distributed after final court approval, expected by March 20, 2026, and may be reduced pro rata if claims exceed available funds. The lawsuit alleged the group failed to adequately safeguard patient and employee data, leading to unauthorized access. Alabama Cardiology Group denies wrongdoing but settled to avoid prolonged litigation. The $2.225 million fund covers settlement costs, attorneys’ fees (up to $741,659.25), credit monitoring, and payments to class members.