Brockton Neighborhood Health Center has reached a proposed settlement in class action litigation regarding a 2024 cyberattack and data incident that impacted 97,488 present and past patients.
The Howard, et al. v. Brockton Neighborhood Health Center, Inc. litigation is pending in the Plymouth County Superior Court for the Commonwealth of Massachusetts under Case No. 2483-CV-01076.
A cyberattack involving the HIPAA-covered entity Brockton Neighborhood Health Center’s systems from November 1 to November 3, 2024 resulted in a data breach discovered on November 3, 2024. An unauthorized third party accessed the organization’s system during that period, and the third party was identified as the ransomware group Interlock.
Stolen files during the incident contained patient data, such as names, addresses, birth dates, diagnoses or health conditions, lab test results, prescription drugs, other treatment details, medical record numbers, and medical insurance data.
Claims in the Consolidated Lawsuit
Brockton Neighborhood Health Center faced multiple class action lawsuits after the data breach, which were consolidated into Howard, et al. v. Brockton Neighborhood Health Center, Inc. The plaintiffs alleged unjust enrichment, negligence, breach of implied contract, and an invasion of privacy. The allegations also stated that the data breach was preventable and resulted only from cybersecurity breakdowns.
The Health Center denies the allegations and the wrongdoing. Nevertheless, the parties reached a proposed settlement after taking into consideration the risks and concerns related to continued litigation.
Settlement Terms
Brockton Neighborhood Health Center agreed to pay up to $850,000 to settle the class action litigation. This settlement fund will pay valid claims for settlement benefits, notice and management fees, and court-approved lawyers’ fees, costs, and service awards.
The proposed settlement offers several forms of benefits for qualified Settlement Class members. The Settlement Class includes individuals living in the United States whose personal information was impacted in the Brockton data incident in or around November 2024, and those who received breach notification.
Each eligible class member may claim reimbursement for documented losses of up to $2,500; and compensation for up to three hours of lost time spent on dealing with the data incident at a $30 hourly rate, up to $90. Eligible individuals could also opt for an alternative $50 cash payment. The Settlement Class members are also offered three years of complimentary credit monitoring.
Court Approval and Deadlines
The court already granted preliminary approval of the settlement, but final approval is still pending. The last day to object to the settlement is November 9, 2026. The last day to submit a claim is December 8, 2026. The Final Approval Hearing is on January 12, 2027 at Plymouth Superior Court for the Commonwealth of Massachusetts.
Image credit: 20092477232009247723 Oleh Adobestock / logo© BNHC
