Two Major Data Breach Settlements Offer Payouts to Affected Consumers Two recent class action settlements are providing financial compensation to individuals impacted by data breaches at healthcare organizations one involving the New York Blood Center and Memorial Blood Centers, and another affecting Capital Health clients. ### New York Blood Center & Memorial Blood Centers Settlement Residents of New York City, Minnesota, and Wisconsin may qualify for payouts from a $500,000 settlement following a January 2025 data breach that exposed sensitive information, including Social Security numbers, blood types, and test results. While the centers denied wrongdoing, they agreed to the settlement to resolve claims. - Eligible individuals who received a breach notice can claim up to $2,500 if they provide documented losses (e.g., identity theft, fraud) incurred between January 26, 2026, and February 11, 2026. - Those without documentation may receive $20, with potential pro-rata adjustments based on claim volume. - All class members are entitled to one year of CyEx Medical Shield Pro, including $1 million in medical identity theft insurance and monitoring for healthcare fraud. - The deadline to submit claims is February 11, 2026, with a final approval hearing scheduled for February 10, 2026. ### Capital Health Settlement A separate $4.5 million settlement has been reached for individuals affected by a 2023 data breach at Capital Health, which exposed clinical records, email addresses, and Social Security numbers between November 11 and November 26, 2023. - Affected clients can claim up to $5,000 for documented losses (e.g., identity theft, credit monitoring costs). - Those without proof of losses will receive a flat $100 payout. - All class members qualify for three years of free credit monitoring. - The deadline to submit claims is April 6, 2026, with objections or exclusions due by March 9, 2026. Both settlements follow the standard class action process, where defendants deny liability but agree to payouts to avoid prolonged litigation. Affected individuals must submit claims by the specified deadlines to receive compensation.

Cyberattack Settlements Reached by New Liberty Hospital, New York Blood Center, and Memorial Blood Centers Three healthcare organizations—New Liberty Hospital (Missouri), New York Blood Center, and Memorial Blood Centers (Minnesota)—have settled class action lawsuits stemming from cyberattacks that exposed sensitive patient and donor data. ### New Liberty Hospital (Missouri) In December 2023, New Liberty Hospital suffered a cyberattack where attackers claimed to have exfiltrated protected health information (PHI) of 264,541 individuals, including names, Social Security numbers, medical records, and insurance details. While it remains unclear if data was encrypted, a ransom note was received, and the breach was confirmed in an investigation. Affected individuals were notified in February 2024. Two lawsuits filed in January and February 2024 were consolidated into C.P. et al. v. New Liberty Hospital Corporation in the District Court of Clay County, Missouri. The suits alleged negligence, breach of confidentiality, and violations of the Missouri Merchandising Practices Act, among other claims. Though the hospital denies wrongdoing, it agreed to a $1.5 million settlement to avoid litigation costs. The settlement fund will cover attorneys’ fees, administrative costs, and payments to class members, with individuals eligible for up to $500 in documented loss reimbursements or an estimated $150 cash payment. Additionally, the hospital will invest over $1 million in cybersecurity upgrades. The claim deadline is January 12, 2026, with a final approval hearing set for January 20, 2026. ### New York Blood Center & Memorial Blood Centers In January 2025, hackers breached systems at the New York Blood Center and Memorial Blood Centers, exposing data of 18,487 employees and 175,335 donors, including names, Social Security numbers, blood test results, and financial information. Multiple lawsuits were consolidated into Dean, et al. v. New York Blood Center, Inc., et al in the Ramsey County District Court, Minnesota, alleging negligence in failing to secure sensitive data. The organizations deny liability but agreed to a $500,000 settlement to resolve the case. The fund will cover attorneys’ fees (up to $166,666.66), expenses, and service awards, with remaining funds allocated to class members. Affected individuals may claim up to $2,500 for documented losses or an estimated $20 cash payment, along with a one-year medical data monitoring service with $1 million identity theft insurance. The objection deadline is January 12, 2026, with claims due by February 11, 2026, and a final approval hearing on February 10, 2026.