Bradenton, Fla.-based Coastal Orthopedics will pay $1.4 million to settle a class action lawsuit regarding a 2023 data breach, according to a May 22 report from The HIPAA Journal.
In July 2024, Coastal Orthopedics confirmed that it faced a patient data breach between June 6-11, 2023, that impacted the data of 203,427 patients.
The unauthorized party accessed patient names, Social Security numbers, medical information, addresses, driver’s license numbers, health insurance information, financial account information and dates of birth.
The practice faced three lawsuits due to the breach, with one voluntarily dismissed and the two others consolidated into one suit.
The suit alleged that Coastal Orthopedics did not take appropriate steps to implement security measures. While the practice denies any wrongdoing, it agreed to pay $1,403,646 to cover claims from the plaintiffs and class members, legal costs, expenses, class representative awards and attorneys’ fees, according to the report.
