Arizona cardiology practice paying $3.85M to resolve lawsuit after data breach

April 6, 2026 - 23:25

A prominent Arizona cardiology practice has agreed to pay $3.85 million to resolve a class-action lawsuit stemming from a significant data breach that compromised the sensitive personal information of thousands of patients. The settlement concludes litigation filed after the 2023 cybersecurity incident.

The breach potentially allowed an unauthorized attacker to access a trove of highly confidential patient data. The exposed information is reported to have included full names, physical addresses, and, most critically, Social Security numbers. This type of data is particularly valuable to cybercriminals for identity theft and fraud, leaving affected individuals at long-term financial risk.

The proposed settlement fund is intended to provide compensation to the heart patients impacted by the breach. While the exact number of affected individuals was not disclosed in the settlement announcement, it is believed to encompass thousands. Affected class members may be eligible for reimbursements for documented losses, credit monitoring services, and other relief.

The incident underscores the persistent vulnerabilities within healthcare data systems and the severe consequences when protected health information is not adequately secured. A final approval hearing for the settlement is scheduled for later this year, where a judge will review the terms.