Anyone who thinks their private data may have been breached in a 2023 cyberattack on Dameron Hospital in Stockton has less than two weeks to apply for compensation, court documents show.
The hospital agreed to a $650,000 settlement following a lawsuit seeking class-action status after a Dec. 5, 2023, computer hack was reported. As a result, 272,475 individuals are mentioned in court documents as possibly having had their private data compromised.
Hackers appear to have gained access not only to names, addresses and birthdates, but possibly also to Social Security numbers, health records, payment data and medical insurance information, the suit says.
Dameron failed to protect private information and made those whose data was exposed vulnerable to identity theft and other cybercrimes, the original suit alleges. But in a settlement reached in December, Dameron agreed to a payout to the plaintiff or any members of the class — although the hospital “denies any and all alleged wrongdoing and denies any liability.”
Dameron and its owner, Modesto-based American Advanced Management, did not return calls requesting comment. AAM took control of the 200-bed hospital from Adventist Health in December.
Potential victims of the cyberattack need to fill out a claim form, which must be postmarked by April 22.
While those whose private data was tapped by hackers are eligible for a settlement of up to $5,000, the form requires documented proof for that payout. As an alternative, an estimated $50 “alternative cash payment” is available. California-based victims can receive $100, although they won’t be able receive free credit monitoring for a year, court documents show.