Loading story…
Integris Health, the largest nonprofit healthcare network in Oklahoma, agreed to pay $30 million to settle class action lawsuits stemming from a 2023 data breach that compromised the personal information of approximately 2.4 million individuals. The breach involved cybercriminals who not only stole sensitive data but also directly contacted some affected patients, including minors, with ransom and blackmail demands. These demands threatened to sell the stolen data on the dark web if payments were not made. The settlement provides for class members to claim up to $25,000 for documented losses, which explicitly includes reimbursement for any ransom payments made to the attackers. In addition to compensation for direct financial losses, affected individuals can opt for a pro-rated cash payment of about $100. The settlement also offers three years of credit monitoring services, which include up to $1 million in identity theft insurance coverage for each class member. Class representatives are set to receive $5,000 service awards for their roles in the litigation. The legal counsel representing the class will seek court approval for attorney fees as part of the settlement process. Integris Health operates more than 15 hospitals and dozens of clinics across Oklahoma, making the scale of the breach significant in terms of both the number of affected individuals and the potential impact on healthcare operations. The incident highlights the evolving tactics of cybercriminals, who are increasingly targeting patients directly in addition to attacking healthcare organizations. The direct ransom demands to patients represent a particularly aggressive form of extortion, raising concerns about the psychological and financial impact on victims, especially minors. The breach and subsequent legal action underscore the critical importance of robust cybersecurity measures and incident response planning in the healthcare sector. The settlement aims to provide financial relief and monitoring services to those affected, while also serving as a warning to other healthcare providers about the risks of inadequate data protection. The case has drawn attention to the need for improved security practices and greater support for victims of healthcare data breaches. The outcome of the settlement may influence how future cases involving direct patient extortion are handled in the legal system. Integris Health's response, including the settlement and support services, is intended to mitigate the long-term consequences for patients whose data was compromised. The incident is a stark reminder of the high stakes involved in protecting sensitive health information from increasingly sophisticated cyber threats.
See the actors and campaigns active against you right now.
2 events from the most recent confirmed update back to the earliest known activity.
Integris Health agreed to pay $30 million to settle lawsuits arising from the 2023 data breach. The settlement was reported in mid-October 2025 by multiple outlets covering the same development.
Integris Health experienced a data breach in 2023 that later prompted multiple lawsuits and regulatory scrutiny. The incident exposed patient information and became the basis for subsequent legal claims against the Oklahoma health system.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
3 references tracked. Mallory keeps watching after this page renders.
databreaches.net
Open sourcegovinfosecurity.com
Open sourcebankinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Integris Health and Yale New Haven Health agreed to major class-action settlements tied to separate healthcare data breaches that exposed sensitive patient information and triggered litigation over alleged cybersecurity failures. Yale New Haven Health received preliminary approval for an **$18 million** settlement after a 2025 breach affected up to **5,556,702 individuals**; the incident was detected on March 8, 2025 and involved unauthorized network access and file exfiltration. Exposed data reportedly included names, contact details, dates of birth, race and ethnicity, patient types, medical record numbers, and Social Security numbers, though the electronic medical record system was not accessed. Integris Health separately agreed to a **$30 million** settlement to resolve class-action claims stemming from its breach, which had already drawn attention after patients reported receiving extortion emails following the cyberattack. In both cases, plaintiffs alleged the healthcare organizations failed to implement reasonable safeguards to protect patient data, while the settlements provide financial compensation and support services for affected individuals and include commitments to strengthen security controls.
Jun 29, 2026
Heritage Provider Network, one of the largest physician-owned healthcare networks in the United States, and nine of its affiliated physician practices have agreed to pay nearly $50 million to settle consolidated class action lawsuits stemming from a major ransomware and data theft incident in December 2022. The breach affected more than 3.4 million current and former patients, whose sensitive personal and medical information was compromised. The impacted practices include Regal Medical Group, Lakeside Medical Organization, Greater Covina Medical Group, Affiliated Doctors of Orange County Medical Group, Arizona Health Advantage, AZPC Clinics, Community Surgery Center of Glendale, Pacific Family Hospice, and Valley’s Best Hospice. Plaintiffs in the lawsuits alleged that the compromised data, which included names, Social Security numbers, addresses, dates of birth, and medical information, was leaked on the dark web. Notices about the breach were sent to affected individuals in early 2023, alerting them to the exposure of their information. The $49.9 million settlement provides each class member with three years of complimentary identity and theft monitoring services. Eligible class members who submit valid claims can receive cash payments of up to $10,000 for documented fraud or out-of-pocket expenses related to the breach. The settlement aims to address the alleged failure of Heritage Provider Network and its affiliates to adequately protect patient data, as detailed in the class action complaints. The legal resolution covers an estimated 3,413,000 individuals who received notification of the breach. The settlement was reached after plaintiffs claimed that the defendants’ security measures were insufficient to prevent the ransomware attack and subsequent data theft. The incident has highlighted the ongoing risks faced by healthcare organizations in protecting sensitive patient information from cybercriminals. The settlement also underscores the significant financial and reputational consequences that can result from large-scale healthcare data breaches. Heritage Provider Network and its affiliates have not admitted wrongdoing but agreed to the settlement to resolve the litigation. The case serves as a reminder for healthcare providers to continually assess and strengthen their cybersecurity posture to mitigate the risk of future incidents. The settlement is one of the largest in recent years for a healthcare data breach, reflecting the scale and impact of the incident. Affected patients are encouraged to review the settlement terms and submit claims if eligible.
Jun 29, 2026
Hospital Sisters Health System (HSHS), a network comprising 13 Catholic hospitals, community health centers, and clinics in the Midwest, has agreed to a $7.6 million settlement to resolve consolidated class action litigation stemming from a significant cyberattack in August 2023. The targeted attack compromised the personally identifiable information (PII) and protected health information (PHI) of approximately 882,782 individuals. The breach exposed sensitive patient data, raising concerns about identity theft and medical fraud among those affected. As part of the settlement, HSHS will offer up to $5,000 in compensation to each eligible class member who can demonstrate out-of-pocket losses directly linked to the incident. Alternatively, affected individuals may opt for a pro-rated cash payment, the amount of which will be determined after accounting for all valid claims and the costs of additional services. The settlement also includes the provision of 24 months of complimentary credit and identity monitoring services to help mitigate the risk of further harm. HSHS has committed to enhancing its data security practices as a condition of the settlement, aiming to prevent similar incidents in the future. The breach and subsequent litigation highlight the growing financial and reputational risks healthcare organizations face from cyberattacks. The incident underscores the critical importance of robust cybersecurity measures in the healthcare sector, where the value of patient data makes organizations prime targets for threat actors. The settlement reflects the increasing trend of legal and financial accountability for healthcare providers following major data breaches. The attack on HSHS is part of a broader pattern of escalating cyber threats against healthcare institutions, which often result in significant costs for detection, response, and recovery. The litigation and settlement process has drawn attention to the need for proactive risk management and incident response planning in healthcare. The case also demonstrates the legal recourse available to victims of healthcare data breaches, including compensation for direct financial losses. HSHS's response, including the settlement and security improvements, may serve as a model for other organizations facing similar incidents. The breach has prompted renewed calls for industry-wide adoption of stronger cybersecurity frameworks and regular security assessments. The incident has also contributed to ongoing discussions about regulatory requirements and best practices for protecting sensitive health information. Overall, the HSHS breach and its aftermath illustrate the complex challenges and high stakes involved in safeguarding healthcare data in an increasingly hostile cyber threat landscape.
Jun 29, 2026