Bank InfoSecurity has an update on the Norton Healthcare breach in 2023:
Norton Healthcare, which operates nine hospitals and 480 other care facilities in Kentucky and Indiana, has agreed to pay $11 million to settle class action litigation triggered by a 2023 data theft attack by ransomware-as-a-service gang Alphv/BlackCat that affected nearly 2.5 million people.
Under the preliminary settlement, which is set for a final court approval hearing on May 15 at a Kentucky state court, nonprofit Norton Healthcare will pay class member claims up to $2,500 each for unreimbursed out-of-pocket expenses that are “fairly traceable” to the data incident.
Norton Healthcare also will pay each class member for claims of up to $80 – or $20 per hour, up to four hours – for time spent related to dealing with the data breach. That includes time spent acquiring credit freezes, remedying actual fraud and monitoring bank statements.
Read more at Bank InfoSecurity.
