Logan Health Medical Center has reached a $4.3 million settlement with the 213,543 patients and employees whose personal and protected health information was likely accessed during a Nov. 22, 2021, cyberattack.
This is the second breach-related lawsuit settled by the Montana provider in less than three years, SC Media reports. Prior to rebranding from Kalispell Regional Healthcare in May 2021, the health system reported an undetected phishing attack in 2019 that led to a monthslong data compromise for 130,000 patients.
The incident exposed Social Security numbers, birthdates, contact information, medical histories, insurance data, medical record numbers, insurance details, provider names, and other sensitive data.
The hospital was sued by patients after that incident, leading to a $4.2 million settlement in December 2020. If the latest proposal is approved, Logan Health will have paid $8.5 million in breach settlements in less than three years. Read more.