St. Joseph Health System Data Breach Class Action Settlement

A settlement has been reached in a class action lawsuit alleging St. Joseph Health System failed to protect the confidential information of nearly 32,000 patients whose information was reportedly publicly accessible on the internet between February 2011 and February 2012.

If your confidential medical information was publicly accessible on the internet by St. Joseph from Feb. 1, 2011 through Feb. 28, 2012, you may be entitled to a cash payment from this data breach class action settlement.

The medical records that were available online reportedly included lists of patients’ names, dates of birth, height, weight, diagnoses, active medications, lab results, body mass index, blood pressure, medication allegories, and other confidential information. Financial information such as Social Security numbers were not included in the publicly accessible data.

An investigation determined that the data exposure was not due to a criminal act, but was the result of misconfigured security settings.

St. Joseph Health System denies the allegations but has agreed to settle the class action lawsuit to avoid the risk and expense of trial and possible appeals.

Once final, the St. Joseph data breach settlement will provide cash payments to all eligible Class Members and offer reimbursement for identity theft losses and out-of-pocket expenses related to the medical data breach. St. Joseph previously offered all of the affected patients one year of identity theft protection.

The data breach settlement will cost St. Joseph up to $28 million.

Who’s Eligible

Class Members of the data breach settlement include all patients of St. Joseph Health System whose confidential medical information was made publicly accessible on the internet by St. Joseph at any time between Feb. 1, 2011 and Feb. 28, 2012.

Potential Award

A cash payment of at least $241.35.

Class Members may also file a claim to seek reimbursement of certain identity theft losses and out-of-pocket expenses related to the data breach.

Proof of Purchase

No proof is required to receive a cash payment of at least $241.35. Class Members will automatically receive this payment if the data breach settlement becomes final.

Class Members who file a claim for reimbursement of identity theft losses and out-of-pocket expenses must provide documentation of their expenses.

Claim Form

CLICK HERE TO FILE A CLAIM »

Claim Form Deadline

Out-of-Pocket Expenses Claim Filing Deadline: 90 days after the Effective Date of the class action settlement (TBD)

Identity Theft Losses Filing Deadline: April 1, 2017

Case Name

St. Joseph Health System Medical Information Cases, Case No. JCCP 4716, in the Superior Court of the State of California, County of Orange

Final Hearing

02/03/2016

Settlement Website

www.SJHSDataBreachClassAction.com

Claims Administrator

St. Joseph Health System Data Breach Settlement Administrator
P.O. Box 43356
Providence, RI 02940-3356
1-877-219-9782

Class Counsel

Jeremiah Frei-Pearson
FINKELSTEIN BLANKINSHIP FREI-PEARSON & GARBER LLP

Daniel S. Robinson
ROBINSON CALCAGNIE ROBINSON SHAPIRO DAVIS INC.

Defense Counsel

GIBSON DUNN & CRUTCHER LLP