Oklahoma Spine Hospital Settles $1.1M for Data Breach Impacting 39,000 Patients
HIPAA Journal
|
Contributed by: Drex DeFord
Summary
Oklahoma Spine Hospital has reached a $1.1 million settlement following a July 2024 data breach that compromised the personal information of approximately 39,000 patients, sparking two consolidated class action lawsuits. These lawsuits alleged negligence and other misconduct related to the breach, which leaked sensitive data such as medical records, financial information, and identification details. The hospital chose to settle to avoid prolonged litigation despite denying any wrongdoing, with settlement funds earmarked for legal fees and benefits for affected patients, including credit monitoring services and reimbursement for documented losses. This incident highlights significant vulnerabilities within healthcare data security and underscores the importance of protective measures to safeguard patient information.