Harvard Pilgrim Health Care Data Breach Settlement: $16M

Individuals whose personal information was compromised in the Harvard Pilgrim Health Care data breach on or around April 17, 2023, including anyone who received a breach notice.

Required for reimbursement claims. Acceptable documentation includes receipts, financial statements, billing records, and other evidence of related expenses. Self-prepared documents are not accepted unless submitted alongside official documentation.

Harvard Pilgrim Health Care has agreed to a $16 million class action settlement to resolve claims that it failed to prevent a 2023 data breach that exposed highly sensitive personal data.

The breach, which occurred on April 17, 2023, allegedly compromised information including Social Security numbers, health insurance details, and medical histories. The class action lawsuit accuses Harvard Pilgrim of neglecting to implement reasonable cybersecurity protections that could have prevented the breach.

Harvard Pilgrim, now part of Point32Health, has not admitted wrongdoing but chose to settle to resolve the claims and move forward.

Under the Terms of the Settlement

Class members can choose from three types of compensation:

• Documented Expenses:

  • Up to $2,500 for out-of-pocket costs such as bank fees, credit monitoring, travel, and communications.

  • Up to 7 hours of lost time reimbursed at $30/hour.

• Extraordinary Losses:

  • Up to $35,000 for verified cases of identity theft or other serious financial harm.

  • Up to 20 hours of lost time at $30/hour.

• Alternative Payment:

  • A $150 cash payment for class members who do not submit reimbursement documentation.

Additional Benefits:
All eligible individuals will receive three years of free credit monitoring, including identity theft insurance, dark web scanning, and access to fraud resolution services.