UnityPoint Data Breach Class Action Settlement

UPDATE: The UnityPoint Data Breach Class Action Settlement was granted final approval on March 4, 2021. Let Top Class Actions know when you receive a check in the comments section below or on our Facebook page.

Those potentially affected by a data breach in 2017 and another in 2018 at UnityPoint Health may be able to claim up to $7,000 and receive a year of free credit monitoring and identity theft protection as a part of a class action settlement agreement.

Class Members include individuals who were notified by UnityPoint Health their personal information was exposed in data breaches that occurred in 2017 and 2018. Individuals affected by the data breach received notice from UnityPoint in April and/or July 2018.

UnityPoint, also known as Iowa Health System, was subjected to an ongoing data breach that started in November 2017, according to a class action lawsuit filed against the multi-hospital delivery and health care system.

Lead plaintiffs alleged UnityPoint discovered the breach in February 2018; however, UnityPoint did not inform individuals whose personal information was exposed until April or, in some cases, July of that same year.

Further, UnityPoint offered few resources to consumers affected by the data breach, according to the class action lawsuit, only some suggestions about how to protect themselves from identity theft on the dark web.

Then, the complaint alleges, UnityPoint was hit with another breach between March and May 2018. After this breach, UnityPoint offered a yearlong membership in identity theft protection services; however, this service was provided by Experian, another data broker that had been subject to a massive data breach, the plaintiffs pointed out.

According to the class action lawsuit, more than a million patients’ and consumers’ personal data, including names, addresses, phone numbers, billing information and health information, was exposed in the breaches.

In addition to failing to protect this data, UnityPoint also failed to notify those affected by the breach in a timely manner, the plaintiffs contended.

Further, the plaintiffs alleged UnityPoint made a number of false claims about the extent of the data breaches, including that the plaintiffs’ Social Security numbers and the company’s electronic medical systems had not been affected.

As a result of the data breaches, the plaintiffs said they and others had to cancel credits cards and were victims of fraud and identity theft. In addition, the plaintiffs claimed, they were subject to illegal robocalls and fraudulent applications to federal benefit programs, such as Medicare and Medicaid.

The class action lawsuit accused UnityPoint of using inadequate cybersecurity to protect their personal information. The company’s computer system was allegedly outdated and insecure, making it an easy target for hackers. The plaintiffs say UnityPoint demonstrated a willful and conscious disregard for patient and consumer privacy.

UnityPoint refused to admit any wrongdoing, but agreed to pay $2.8 million to end the class action lawsuit. Under the terms of the settlement, UnityPoint has agreed to provide Class Members identity theft protection through Identity Guard.

In addition, the health care provider has agreed to reimburse Class Members for expenses. Class Members can claim up to $1,000 in “ordinary” expenses, including up to three hours of time valued at $15 per hour and documented out-of-pocket costs related to the data breaches, such as phone and internet charges and postage fees.

Class Members can also claim up to $6,000 in “extraordinary” expenses, including costs related to identity theft or fraud connected to information exposed in the breach, such as false tax returns, medical-identity theft and account fraud. Expenses can also include unreimbursed bank, credit card and other fees, and interest on loans taken out due to card cancellations. Class Members claiming extraordinary expenses can also claim an additional 10 hours of time at the rate of $15 per hour.

To make a claim, Class Members must submit a claim form online or by mail. Claim forms are due by March 2, 2021. Class Members claiming expenses must provide descriptions and/or supporting documentation for those expenses, including receipts, invoices, tax forms or bank forms.

The deadline to opt out of or object to the class action settlement is Jan. 4, 2021. A final fairness hearing is scheduled for Feb. 19, 2021.

Who’s Eligible

Individuals who were notified by UnityPoint Health that their personal information was exposed in data breaches that occurred in 2017 and 2018. Individuals affected by the data breach received notice of the breach from UnityPoint in April and/or July 2018.

Potential Award

Up to $7,000 and a year of free credit monitoring.

• Up to $1,000 in ordinary expenses
• Up to $6,000 in extraordinary expenses

Proof of Purchase

Documentation of expenses, including receipts, bills, tax forms or bank forms.

Claim Form

CLICK HERE TO FILE A CLAIM »

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

03/02/2021

Case Name

Fox v. Iowa Health System Inc., Case No. 3:18-cv-00327, in the U.S. District Court for the Western District of Wisconsin

Final Hearing

02/19/2021

Settlement Website

UPHSettlement.com

Claims Administrator

UnityPoint Health Settlement
c/o Epiq
P.O. Box 4098
Portland, OR 97208-4098
info@UPHSettlement.com
1-855-917-3553

Class Counsel

Cari C. Laufenberg
KELLER ROHRBACK LLP

Ronald A. Marron
Robert L. Teel
LAW OFFICES OF RONALD A. MARRON APLC

Defense Counsel

Casie D. Collignon
BAKER & HOSTETLER LLP

Read About More Class Action Lawsuits & Class Action Settlements:

• Facebook Users Say Platform Misleads on Data Privacy to Dominate the Market
• Kalispell Data Breach Class Action Reaches a $4.2M Settlement
• How Does the Lemon Law in Louisiana Work?
• FDA Investigation into JUUL Pods: Do They Cause Seizures?