When it occurred in July 2015, it was the fourth-biggest healthcare data breach to date – and nearly four years of regular cyberattacks later, it’s still in the top five.
According to the settlement agreement, in addition to the usual credit monitoring, identity theft protection and insurance (two years’ worth), UCLA Heath will create a $2 million fund to help reimburse claimants for any preventive or remedial measures related to identity theft.
The breach took place in September 2014 but it wasn’t until nearly a year later that patients were told about it. The incident saw sensitive clinical and financial data such as medical diagnoses and diseases, clinical procedures, test results, Social Security numbers, addresses and dates of birth compromised by hackers who’d gained access to the health system’s IT network.