In August 2024, PRC-Saltillo, a company specializing in assistive communication devices, suffered a targeted cyberattack that compromised its computer systems. The breach exposed highly sensitive personal and medical data of individuals, including names, addresses, phone numbers, dates of birth, medical and insurance details, and in some cases, Social Security numbers. The incident led to a $632,250 class action settlement, with affected individuals eligible for reimbursement of up to $5,000 for out-of-pocket losses (e.g., fraud, identity theft, credit monitoring, legal fees) and a pro rata share of remaining funds. Minors impacted received automatic eight-year identity monitoring. The lawsuit alleged negligence in safeguarding data, though PRC-Saltillo denied wrongdoing. The breach’s scope—affecting medical and personally identifiable information (PII)—poses long-term risks of identity theft, financial fraud, and reputational harm to victims.