Norton Healthcare Reaches $11M Settlement Over 2023 Ransomware Attack Norton Healthcare has agreed to a $11 million settlement in a class-action lawsuit stemming from a May 2023 ransomware attack that disrupted its computer systems. The breach, detected on May 9, 2023, occurred after suspicious activity was flagged on Norton’s servers, followed by a threatening fax demanding payment. An investigation revealed unauthorized access to network storage devices between May 7 and May 9. The lawsuit, filed in June 2023 against Norton Healthcare and Norton Hospitals, alleged negligence, breach of contract, privacy violations, and failure to meet industry cybersecurity standards. Plaintiffs claimed Norton did not adequately protect sensitive data or train employees on security protocols. While Norton maintained that patient personal information was not accessed, it later notified potentially affected individuals. Under the settlement, class members may receive: - Three years of medical monitoring services - Up to $2,500 in out-of-pocket expense reimbursements - Up to $80 for lost time due to the breach - A minimum $5 cash payment A final approval hearing is scheduled for May 15. The settlement fund will be distributed pending court approval.

On December 8, 2023, the Washington State Office of the Attorney General reported a data breach incident involving Norton Healthcare, Inc., which occurred from May 7, 2023, to May 9, 2023. The breach was identified as a ransomware attack affecting approximately 1,872 Washington residents, potentially compromising personal information including names, Social Security Numbers, and health information.