Scripps Health to pay $3.57 million after ransomware data breach

Nearly 1.2 million current and former patients at Scripps had their information compromised in the March 2021 ransomware attack.

SAN DIEGO — Scripps Health has agreed to pay more than $3.5 million dollars to victims of a massive data breach last year that compromised the personal information of more than one million patients.

CBS 8 obtained a copy of the settlement agreement, which still needs the judge’s approval.

The May 1, 2021 ransomware attack crippled the healthcare company’s computer system. In the breach, hackers obtained customers’ health information and personal financial data and placed more than one million people at risk of identity theft.

Scripps’ computer system was impacted for nearly a month as the company scrambled to prevent additional data breaches from occurring.

Since the May 1 breach, Scripps’ customers whose information was obtained began filing class action lawsuits against the healthcare provider.

In recent months, Scripps and attorneys for the patients have agreed to end the lawsuit.

As part of the agreement, Scripps Health has agreed to pay $3.57 million in “minimum cash settlements” of $100 for each plaintiff. In addition, the healthcare company will pay up to $7,500 to those whose identities were stolen and who qualify for, according to the settlement, “extraordinary out-of-pocket expenses.”

In addition, Scripps has also agreed to provide credit monitoring and identity theft protection to the nearly 1.2 million people who joined the lawsuit.

In a statement to CBS 8, a spokesperson for Scripps stated, “Since the incident, Scripps has notified impacted parties, conducted a full investigation, and implemented a variety of additional safeguards to help reduce the likelihood of a similar incident occurring again. reminder, there was no unauthorized access to MyScripps (MyChart) patient portal or Scripps’s electronic medical records application.”

As for the settlement, the spokesperson told CBS 8, “We are pleased to have reached a settlement that Scripps believes is beneficial to those who may have been affected. The parties have not yet received final approval from the court, but preliminary approval has been granted and the parties will complete mailing notification postcards within 30 days of the approval order to the settlement class members. Settlement class members can go to or call the settlement administrator’s helpline at 800-708-8796 to ask questions or file a claim. If final approval of the settlement is granted, Scripps will compensate settlement class members for the benefits they are entitled to receive and validly claimed under the settlement, including eligible monetary losses.”

According to the settlement website, those who feel they were included in the breach still have time to file a claim. The deadline for filing new claims is no later than March 23, 2023.

Click here for more information on how to file a claim.

Leave a Comment