.png)
Current and former patients who received a notice that the January 2024 Hypertension-Nephrology Associates P.C. data breach may have compromised their personal and protected health information could be eligible to submit a claim for a cash payment and credit monitoring from a class action settlement.
Hypertension Nephrology Associates P.C., located in Pennsylvania, agreed to pay $625,000 to settle a class action lawsuit alleging it failed to adequately protect patient data during a ransomware attack that potentially exposed sensitive personal and health information. The cybersecurity incident impacted 39,491 patients.
Who can file a claim for a data breach payout?
Class members are residents of the United States who received a notice from Hypertension Nephrology Associates P.C. stating the January 2024 data breach may have compromised their private information.
How much will the class action settlement payment be?
Class members have the following options:
- Documented loss payment: Class members can claim up to $5,000 for for actual, documented unreimbursed monetary losses related to the data incident.
- Cash award: Class members who do not submit a documented loss payment claim can submit a claim to receive a pro rata cash payment from the remaining settlement fund after the settlement administrator pays all other claims, costs and fees. The settlement administrator will determine the final payment amount by the total number of valid claims filed.
- Credit monitoring and insurance services: All class members may elect to receive two years of IDX single-bureau credit monitoring and insurance services.
How to claim a class action rebate
To receive a settlement payment, class members must submit a valid claim form by Jan. 20, 2026. They can submit a claim in two ways:
- Complete the online claim form
- Download and print the PDF claim form to mail to the settlement administrator
Settlement administrator's mailing address: HNA Data Incident Settlement Administrator, PO Box 1348, Baton Rouge, LA 70821
Required proof and claim information
- To submit an online claim, class members must provide the claim ID from their settlement notice.
- To submit a documented loss claim, class members must provide supporting documentation showing actual, unreimbursed monetary loss traceable to the data breach. This may include receipts, emails, letters or third-party records.
Payout options
Claimants can select from the following payment options:
- PayPal
- Venmo
- Zelle
- Paper check mailed to the address provided
$625,000 data breach settlement fund
The settlement fund of $625,000 will include:
- Settlement administration costs: To be determined
- Attorneys' fees: Up to $208,333.33
- Attorneys' expenses and costs: To be submitted to the court for approval at a later date
- Service award to class representative: Up to $2,500
- Credit monitoring and insurance services: Cost determined by the number of claims filed
- Payments to approved claimants: Remaining settlement funds
Important dates
- Opt-out deadline: Dec. 8, 2025
- Deadline to file a claim: Jan. 20, 2026
- Fairness hearing: Feb. 18, 2026
When is the Hypertension-Nephrology Associates P.C. settlement payout date?
The settlement administrator will issue payments and credit monitoring codes to eligible class members approximately 60 days after the court grants final approval of the settlement.
Why was this class action settlement reached?
This class action lawsuit alleged Hypertension Nephrology Associates P.C. experienced a ransomware attack on Jan. 20, 2024, which allegedly allowed a criminal group to access and potentially compromise the personally identifiable and health information of current and former patients. The plaintiffs claimed that HNA failed to adequately protect this data.
Hypertension Nephrology Associates P.C. denies the allegations, but both sides agreed to settle to avoid the risks, expense and time associated with continued litigation.
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.svg)
Comments