Hypertension Nephrology Associates, P.C. Data Breach Settlement

Current and former patients who received a notice that their personal and protected health information may have been compromised in the January 2024 Hypertension-Nephrology Associates P.C. data breach, may be eligible to submit a claim for a cash payment and credit monitoring from a class action settlement.

Hypertension Nephrology Associates P.C. (HNA), in Pennsylvania, has agreed to pay $625,000 to settle a class action lawsuit alleging it failed to adequately protect patient data during a ransomware attack that potentially exposed sensitive personal and health information. The cybersecurity incident impacted 39,491 patients.

Who can file a claim for a data breach payout?

Class members are residents of the United States who received a notice from Hypertension Nephrology Associates P.C. that their private information may have been accessed, stolen, or compromised as a result of the January 2024 data breach.

How much will the class action settlement payment be?

Class members have the following options:

• Documented loss payment: Class members can claim up to $5,000 for for actual, documented unreimbursed monetary losses related to the data incident.
• Cash award: Class members that do not submit a documented loss payment claim can submit to receive a pro rata cash payment from the remaining settlement fund after all other claims, costs and fees are paid. Final payment amount will be determined by the total number of claims filed.
• Credit monitoring and insurance services: All class members may elect to receive two years of IDX single-bureau credit monitoring and insurance services.

How to claim a class action rebate

To receive a settlement payment, class members must submit a valid claim form by Jan. 20, 2026. Claims can be submitted in two ways:

• Complete the online claim form
• Download and print the PDF claim form to mail to the settlement administrator

Settlement administrator's mailing address: HNA Data Incident Settlement Administrator, PO Box 1348, Baton Rouge, LA 70821

Required proof and claim information

• Claim ID from settlement notice required to submit an online claim.
• Documented loss claims require supporting documentation showing actual, unreimbursed monetary loss traceable to the data breach. This may include receipts, emails, letters or third-party records.

Payout options

Claimants can select from the following payment options:

• PayPal
• Venmo
• Zelle
• Paper check mailed to the address provided

$625,000 data breach settlement fund

The settlement fund of $625,000 will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $208,333.33
• Attorneys' expenses and costs: To be submitted to the court for approval at a later date
• Service award to class representative: Not to exceed $2,500
• Credit monitoring and insurance services: Cost determined by the number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Deadline to file a claim: Jan. 20, 2026
• Opt-out deadline: Dec. 8, 2025
• Fairness hearing: Feb. 18, 2026

When is the Hypertension-Nephrology Associates P.C. settlement payout date?

Payments and credit monitoring codes will be issued to eligible class members approximately 60 days after the court grants final approval of the settlement.

Why was this class action settlement reached?

This class action lawsuit was filed after Hypertension Nephrology Associates P.C. experienced a ransomware attack on Jan. 20, 2024, which allegedly allowed a criminal group to access and potentially compromise the personally identifiable and health information of current and former patients. Plaintiffs claimed that HNA failed to adequately protect this data.

Hypertension Nephrology Associates P.C. denies the allegations, but both sides agreed to settle to avoid the risks, expense, and time associated with continued litigation.

Sources

1. Official class notice
2. Settlement website FAQ page
3. Official claim form