LifeBridge Health, a Baltimore-based healthcare provider with nearly 150 locations, experienced a cybersecurity breach where an unauthorized user accessed its third-party electronic health records (EHR) vendor. The incident exposed personally identifiable information (PII) and protected health information (PHI) of an undetermined number of patients, including names, Social Security numbers, medical record numbers, diagnoses, medicines, test results, treatment images, and care details. The breach, under investigation by law firm Lynch Carpenter, LLP, has prompted potential legal action for affected individuals, who may be eligible for compensation. The compromised data—highly sensitive and regulated under HIPAA—poses severe risks, including identity theft, medical fraud, and financial exploitation. The breach’s scope remains unclear, but the exposure of full medical histories and SSNs elevates its severity, particularly given the healthcare sector’s critical nature. Patients receiving breach notifications are advised to seek legal review, underscoring the incident’s broad reputational, financial, and operational repercussions for LifeBridge.

LifeBridge Health Settles $575,000 Class Action Over 2024 Data Breach LifeBridge Health Inc. has agreed to a $575,000 settlement to resolve a class action lawsuit stemming from a November 2024 data breach. The incident, discovered on or around November 12, 2024, involved unauthorized access to the healthcare provider’s systems, potentially exposing sensitive patient information. Affected Data & Eligibility The breach may have compromised personal and medical details, including names, dates of birth, Social Security numbers, addresses, medical record numbers, health insurance information, and limited treatment records. Individuals who received a notice from LifeBridge Health about the incident are eligible to file a claim. Settlement Payouts Class members can seek two types of compensation: - Cash Payment A (Documented Losses): Up to $5,000 per person for verified financial losses tied to the breach, requiring supporting documentation. - Cash Payment B (Flat Cash Payment): A pro rata share of remaining funds, nominally $100 but subject to adjustment based on claim volume. No documentation is required for this payment. Claimants submitting valid documented losses will also receive the flat cash payment. The settlement administrator will first reimburse approved losses, then distribute remaining funds equally among flat-payment claimants. Claim Process & Deadlines Eligible individuals must submit a claim by February 28, 2026, either online or via mail to the settlement administrator (Ragin v. LifeBridge Health Inc., c/o CPT Group Inc.). Required details include a CPT ID and passcode from the notice letter. The final fairness hearing is scheduled for March 20, 2026, with payouts expected approximately 31 days after court approval. Settlement Fund Allocation The $575,000 fund covers: - $50,000 for administration costs - Up to $191,647.50 in attorneys’ fees - Additional attorneys’ expenses (TBD) - Up to $2,500 for the class representative - Remaining balance for class member payments Unclaimed funds from uncashed checks will be directed to the Center for Urban Families, a court-approved cy pres recipient. Company Response LifeBridge Health denies wrongdoing but agreed to the settlement to avoid litigation costs. As part of the agreement, the company will invest an estimated $200,000 annually to enhance system security, separate from the settlement fund.

The California Office of the Attorney General reported that LifeBridge Health experienced a data breach affecting patient information. The breach involved unauthorized access to servers through one of their physician practices on September 27, 2016, and was discovered on March 18, 2018. The compromised data potentially included names, addresses, dates of birth, and insurance information, but not social security or financial information. Approximately 298,000 individuals were affected.