The Aspen Group has agreed to settle a class-action lawsuit, filed in response to an April 2023 data breach, for $4.4 million, according to a May 26 report from The HIPAA Journal.
The breach affected TAG’s brands including Aspen Dental, Aspen Dental Management, WellNow Urgent Care, Physicians Immediate Care and Physicians Immediate Care Chicago.
Ransomware was used to encrypt files during the cyberattack, which was detected on or around April 25, 2023. Patient data that was obtained includes names, dates of birth, Social Security numbers, state ID and driver’s license information, health and insurance information, banking information and biometric data.
The data of nearly 600,000 individuals was compromised in the attack, the report said.
The Aspen Group provided the following statement to Becker’s:
“This settlement will resolve class action litigation arising from a data security incident that The Aspen Group experienced in April 2023 that may have impacted certain members of the class. Since the incident, we have significantly strengthened cybersecurity defenses across the healthcare brands that we support. As an organization that supports individual healthcare practices, we understand the sensitive nature of personal and healthcare information and safeguarding this information remains our highest priority.”
