Loading story…
Memorial Hospital and Manor, a small community hospital in Georgia, has agreed to settle a class action lawsuit following a 2024 ransomware attack allegedly perpetrated by the Embargo cybercrime gang. The attackers claimed to have stolen 1.15 terabytes of sensitive data, which was subsequently leaked on the dark web. The breach affected approximately 105,170 current and former patients, and the hospital is offering settlement options, including payments of up to $5,000 for documented losses such as identity theft, fraud, and related expenses.
The hospital, which includes both an 80-bed facility and a 107-bed long-term care center, is owned by the Hospital Authority of the City of Bainbridge and Decatur County. The settlement provides compensation for out-of-pocket expenses incurred as a result of the breach, including costs for credit monitoring, credit report fees, and replacement of identification documents. This resolution follows significant concern over the impact of the data leak on the affected community and highlights the ongoing risks posed by ransomware attacks on healthcare institutions.
See the actors and campaigns active against you right now.
4 events from the most recent confirmed update back to the earliest known activity.
A final approval hearing for the proposed class action settlement was scheduled for January 20, 2026. The hearing is intended to determine whether the settlement will receive final court approval.
Memorial Hospital and Manor agreed to settle a class action lawsuit over the 2024 breach. The proposed settlement includes up to $5,000 for documented losses, up to $100 for lost time, a $40 alternative cash payment, one year of medical data monitoring, and up to $500,000 in attorney fees and service awards.
Following the attack in 2024, the hospital reported the incident to the FBI, hired a cybersecurity firm, and implemented enhanced security measures. The breach affected about 105,170 current and former patients and exposed names, dates of birth, Social Security numbers, and health information.
In 2024, Memorial Hospital and Manor in Georgia was hit by a ransomware attack allegedly carried out by the Embargo cybercrime gang. The attackers claimed to have stolen 1.15 terabytes of data, which was later leaked on the dark web.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Heritage Provider Network, one of the largest physician-owned healthcare networks in the United States, and nine of its affiliated physician practices have agreed to pay nearly $50 million to settle consolidated class action lawsuits stemming from a major ransomware and data theft incident in December 2022. The breach affected more than 3.4 million current and former patients, whose sensitive personal and medical information was compromised. The impacted practices include Regal Medical Group, Lakeside Medical Organization, Greater Covina Medical Group, Affiliated Doctors of Orange County Medical Group, Arizona Health Advantage, AZPC Clinics, Community Surgery Center of Glendale, Pacific Family Hospice, and Valley’s Best Hospice. Plaintiffs in the lawsuits alleged that the compromised data, which included names, Social Security numbers, addresses, dates of birth, and medical information, was leaked on the dark web. Notices about the breach were sent to affected individuals in early 2023, alerting them to the exposure of their information. The $49.9 million settlement provides each class member with three years of complimentary identity and theft monitoring services. Eligible class members who submit valid claims can receive cash payments of up to $10,000 for documented fraud or out-of-pocket expenses related to the breach. The settlement aims to address the alleged failure of Heritage Provider Network and its affiliates to adequately protect patient data, as detailed in the class action complaints. The legal resolution covers an estimated 3,413,000 individuals who received notification of the breach. The settlement was reached after plaintiffs claimed that the defendants’ security measures were insufficient to prevent the ransomware attack and subsequent data theft. The incident has highlighted the ongoing risks faced by healthcare organizations in protecting sensitive patient information from cybercriminals. The settlement also underscores the significant financial and reputational consequences that can result from large-scale healthcare data breaches. Heritage Provider Network and its affiliates have not admitted wrongdoing but agreed to the settlement to resolve the litigation. The case serves as a reminder for healthcare providers to continually assess and strengthen their cybersecurity posture to mitigate the risk of future incidents. The settlement is one of the largest in recent years for a healthcare data breach, reflecting the scale and impact of the incident. Affected patients are encouraged to review the settlement terms and submit claims if eligible.
Jun 29, 2026
**Norton Healthcare** agreed to pay **$11 million** to settle a class-action lawsuit tied to a 2023 **ALPHV/BlackCat** ransomware-related data theft that reportedly involved **4.7 TB** of stolen data and impacted nearly **2.5 million** people. The preliminary settlement provides for reimbursement claims (up to **$2,500** for unreimbursed expenses), compensation for time spent responding to the incident (up to **$80**), and **three years of medical identity monitoring**, pending final court approval. Separately, Ohio-based **Kettering Health** began notifying current and former patients and affiliates about a **May 2025** ransomware and data theft incident claimed by the **Interlock** cybercrime group. Reporting indicates Interlock publicly listed Kettering Health on its leak site and claimed roughly **941–950 GB** of data, and Kettering previously warned patients about **scam calls** from fraudsters impersonating medical bill collectors seeking credit card payments—activity consistent with post-breach social engineering and fraud attempts.
Jun 29, 2026
Bayhealth Medical Center in Delaware has agreed to a preliminary settlement in a class action lawsuit following a 2024 ransomware attack by the Rhysida gang. The breach affected nearly 500,000 individuals, exposing sensitive personal and health information, and led to allegations of negligence and inadequate security practices. The lawsuit also claims Rhysida demanded a $1.4 million ransom and published stolen data on the dark web.
Jun 29, 2026