Healthcare Data Breach Settlement: $3.3M for 340,184 Patients

Two healthcare firms are preparing to pay $3.3 million to settle a class action lawsuit over a ransomware attack that exposed the personal and medical data of hundreds of thousands of people. Mt. Baker Imaging and Northwest Radiologists agreed to the settlement, according to the official settlement website.

The data security incident occurred between January 20 and January 25, 2025. Cybercriminals accessed and exfiltrated confidential personally identifiable information and protected health information belonging to approximately 340,184 class members, the lawsuit alleges.

Plaintiffs claim the defendants failed to implement and maintain necessary data security safeguards. Mt. Baker Imaging and Northwest Radiologists deny wrongdoing but agreed to settle to avoid the uncertainty and expense of continued litigation.

The settlement establishes a $3,300,000 non-reversionary fund. Class members can claim reimbursement for documented out-of-pocket losses up to $5,000 and two years of Medical Shield Complete medical identity-theft protection through CyEx. A pro rata cash fund payment is also available.

The settlement class includes all living U.S. residents whose private information was potentially or actually compromised in the incident. The deadline to submit a claim is August 19, 2026.

The $3.3 million fund works out to roughly $9.70 per class member before legal fees and monitoring costs. For healthcare firms, the case underscores the financial exposure from ransomware attacks even when the target is a small imaging center or radiology group. The per-person cap of $5,000 for out-of-pocket losses sets a benchmark for future claims in similar breaches.