Octapharma Plasma, a plasma donation center, faced a $2.55 million class-action lawsuit due to allegations of failing to implement adequate cybersecurity measures, resulting in a data breach exposing donor information. The breach led to unauthorized third-party access to sensitive client data, including financial and personal details, forcing affected individuals to incur expenses to mitigate risks like identity theft and fraud. Eligible class members—including those with documented losses (up to $5,000) and those without (flat $100 payment)—were offered compensation, alongside three years of credit monitoring. California-based members received an additional $50. The settlement underscores the severe financial and reputational repercussions of inadequate data protection, as clients had to bear costs to secure their compromised information. The breach highlights systemic vulnerabilities in handling donor/patient data, reinforcing the critical need for robust cybersecurity in healthcare-related entities. The company did not admit wrongdoing, but the lawsuit’s scale and payout structure reflect the high-stakes impact of the breach on individuals’ financial security and trust in the organization.

The BlackSuit ransomware gang targeted Octapharma, a blood plasma collection organization, leading to the temporary closure of nearly 200 blood plasma collection centers across the U.S. This disruption severely impacted the healthcare system by limiting the availability of critical blood plasma supplies, which are essential for medical treatments. The attack underscored the vulnerability of healthcare infrastructure to cyber threats and highlighted the broader implications of ransomware on public health and safety.

In April 2024, Octapharma Plasma Inc. experienced a data breach due to alleged inadequate cybersecurity measures, resulting in unauthorized access to sensitive personal information of consumers. The compromised data included names, dates of birth, Social Security numbers, health data, and donor eligibility information. The breach exposed affected individuals to risks of identity theft, fraud, and financial harm. Octapharma agreed to a $2.55 million class action settlement to resolve claims, offering affected individuals up to $5,050 in compensation for documented losses, a flat cash payment (estimated at $100), and three years of credit monitoring. California residents were eligible for an additional $50 statutory payment. The settlement aimed to mitigate the fallout from the breach, though the company denied wrongdoing.