Law Firm to Pay $8M to Settle Health Data Hack Lawsuit

Orrick Herrington Cyberattack Compromised Clients' Data, Affected Nearly 638,000 Marianne Kolbasuk McGee (HealthInfoSec) • April 15, 2024

A global law firm that provides data breach legal services has agreed to an $8 million settlement to resolve a proposed class action lawsuit filed against the firm in the aftermath of its cyberattack last year, which affected some health sector clients and nearly 638,000 individuals.

See Also: Take Inventory of Your Medical Device Security Risks

Orrick Herrington & Sutcliffe's proposed agreement with plaintiffs, filed last week in a northern California federal court, settles four proposed consolidated class action lawsuits filed against the San Francisco-based law firm last year in the wake of March 2023 hacking incident.

That incident compromised the personal information of several Orrick clients, including vision benefits plan EyeMed and dental insurance plan Delta Dental of California. Initially, Orrick told regulators the breach affected about 153 ...