Memorial Heart Institute Settles $3.75M Over 2023 Data Breach Impacting Nearly Half a Million Patients A federal court has preliminarily approved a $3.75 million settlement between Tennessee-based Memorial Heart Institute LLC and plaintiffs affected by a March 2023 data breach. The cyberattack exposed the private information of approximately 460,000 individuals, with 287,000 also having their Social Security numbers (SSNs) compromised. Under the agreement, the SSN subclass will receive $2 million in a fund for prorated cash payments. The settlement resolves litigation stemming from the breach, which was attributed to a cybercrime group that accessed sensitive patient data. The case was overseen by Judge Curtis L. Collier of the U.S. District Court for the Eastern District of Tennessee. Memorial Heart Institute, which operates under a different business name, has not disclosed further details about the breach’s origin or the attackers’ identities. The financial and reputational consequences of the incident highlight the growing risks healthcare organizations face from cyber threats.