Insight Global COVID-19 tracing data breach class action settlement

Insight Global agreed to a data breach class action lawsuit settlement to resolve claims that COVID-19 tracing information may have been publicly available.

The settlement benefits consumers whose personal information may have been compromised in the Insight Global data incident and who received a notice of the event around April 29, 2021.

In April 2021, Insight Global announced some personal information gathered during Pennsylvania COVID-19 contact tracing may have been publicly available for a short time. The information was intended to be visible only to authorized employees and public health professionals.

According to the data breach notification, information may have been made public about individuals with COVID-19, their potential contacts, household information and other data collected between September 2020 and April 2021. Identifiers such as Social Security numbers were not collected for contact tracing and were therefore not affected.

Affected consumers filed a data breach class action lawsuit against Insight Global, arguing that the company failed to sufficiently control how its employees were sharing contact tracing information. As a result, employees allegedly used personal email accounts and cloud services such as Google Sheets to share data. Plaintiffs in the case say these formats caused sensitive health data to be shared without any security controls.

“These documents were widely available to the public through a Google search and did not require a password, log in, or any kind of authentication in order to be viewed,” the Insight Global data breach class action lawsuit contends. 

“Insight was aware that its employees were using unsecured data storage and communications methods as early as November 2020.”

Insight Global hasn’t admitted any wrongdoing but agreed to pay an undisclosed sum to resolve these allegations.

Under the terms of the Insight Global data breach settlement, class members can be reimbursed for expenses resulting from the data breach. 

Class members can claim up to $250 for ordinary out-of-pocket expenses such as bank fees, credit costs, communication expenses, credit monitoring and up to three hours of lost time at a rate of $20 per hour. 

Class members who experienced extraordinary out-of-pocket losses as a result of identity theft or fraud traceable to the data breach can receive reimbursement of up to $5,000 for related monetary losses.

All class members are eligible for two years of free credit-monitoring services, even if they did not experience losses as a result of the data breach.

The deadline for exclusion and objection is Jan. 24, 2023. 

The final approval hearing for the Insight Global data breach settlement is scheduled for April 5, 2023.

In order to receive settlement benefits, class members must submit a valid claim form by Feb. 23, 2023.

Who’s Eligible

Consumers whose personal information may have been compromised in the Insight Global data incident and who received a notice of the event around April 29, 2021

Potential Award

Provide reasonable documentation and an affirmative statement that it was purchased primarily because of the data incident, and with proof of purchase, and provide attestation of at least a narrative description of the activities performed during the time claimed for time lost and their connection to the data incident to receive this benefit.

Proof of Purchase

Documents that show what happened and how much you lost or spent. Including receipts or other documentation.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

02/23/2023

Case Name

Lisa Chapman, et al. v. Insight Global LLC, Case No. 1:21-CV-824-CCC, in the U.S. District Court for the Middle District of Pennsylvania

Final Hearing

04/05/2023

Settlement Website

InsightDataBreach.com

Claims Administrator

Chapman v. Insight Global Claims Administrator
PO Box 3815
Portland, OR 97208-3815
888-279-4405

Class Counsel

Jonathan Shub
Kevin Laukaitis
SHUB LAW FIRM LLC

Defense Counsel

Paul Karlsgodt
BAKERHOSTETLER