EHR Vendor Veradigm to Pay $10.5M to Settle Hack Lawsuit

Breach Affected More Than a Dozen Healthcare Clients, 2.5M Patients Marianne Kolbasuk McGee (HealthInfoSec) • January 21, 2026

Electronic health records vendor Veradigm - formerly AllScripts - agreed to a $10.5 million settlement ending consolidated class action litigation involving a December 2024 hacking incident that affected more than a dozen healthcare provider clients and about 2.5 million of their patients.

See Also: Demonstrating HIPAA Compliance

The litigation against Veradigm alleged negligence, breach of implied contract and unjust enrichment, among other claims.

Veradigm in a breach notice said it discovered on July 1, 2025, that some clients' data had been accessed by an unauthorized actor exploiting a compromised credential to gain access to a Veradigm "storage unit" (see: Vendors Veradigm, ApolloMD Report Health Data ...