Two Major Healthcare Data Breach Settlements Resolve Class Action Lawsuits Two healthcare providers Compassion Health Care (North Carolina) and Emergency Medical Services Authority (EMSA, Oklahoma) have reached settlements in class action lawsuits following separate cyberattacks that exposed sensitive patient data. ### Compassion Health Care Settlement The Yanceyville, North Carolina-based medical practice agreed to a $600,000 settlement after a March 2025 breach compromised the protected health information (PHI) of 23,600 individuals. The incident, detected on March 17, 2025, involved unauthorized access to systems containing names, addresses, Social Security numbers, driver’s license details, health insurance data, and clinical information. Affected individuals were notified on May 16, 2025. The lawsuit, filed in Caswell County Superior Court on July 2, 2025, alleged negligence in cybersecurity measures. Under the settlement, funds will cover attorneys’ fees, administrative costs, and service awards, with class members eligible for: - Reimbursement of documented losses (up to $3,000 per person) - A $40 cash payment as an alternative - Two years of credit monitoring and identity theft protection ### EMSA Settlement EMSA, Oklahoma’s largest pre-hospital emergency care provider, settled a class action over a February 2024 cyberattack that exposed data of 611,743 individuals, including names, addresses, dates of birth, and Social Security numbers. The breach occurred between February 10–13, 2024, with unauthorized access to patient and employee files. The lawsuit, consolidated in Oklahoma County District Court, was resolved with a $1.5 million settlement fund. Class members can claim: - Reimbursement for documented losses (up to $3,000 per person) - Compensation for lost time (up to 4 hours at $15/hour, with attestation required) - Two years of single-bureau credit monitoring Claim deadlines vary by CPT ID, with final fairness hearings scheduled for April–May 2026. Both settlements were reached without admission of liability.