by Tracy Bagdonas
St. Andrew’s Resources for Seniors System has agreed to settle a class action lawsuit that alleged the senior and elder care services provider failed to protect the sensitive information of its current and former employees and patients from a February 2024 data breach.
The St. Andrew’s class action settlement received preliminary approval from the court on January 21, 2026 and covers all living individuals in the United States who received notice, including notice of this settlement, informing them that their private information may have been impacted by the February 2024 data breach.
Court documents estimate that the private information of approximately 12,304 living individuals was potentially impacted by the breach.
The court-approved website for the St. Andrew’s data breach settlement can be found at StAndrewsDataSettlement.com.
According to the website, St. Andrew’s settlement class members who file a timely, valid claim form have multiple options for reimbursement.
Class members who submit with their claim form documented proof of out-of-pocket losses stemming from the data breach are eligible to receive a one-time cash payment of up to $5,000.
The settlement agreement states that class members must submit documentation prepared by a third party to receive reimbursement for out-of-pocket losses but may not receive compensation for expenses that have already been reimbursed by another source, including the credit monitoring and identity theft protection offered by St. Andrew’s as part of the data breach notice.
Class members may also receive reimbursement for up to four hours of lost time spent responding to the data breach, at a rate of $20 per hour, subject to the $5,000 out-of-pocket losses cap.
In lieu of these benefits, St. Andrew’s settlement class members may instead file a claim form with no proof or explanation required to receive a one-time alternative cash payment of $50.
Class members may receive their payout via check or credit monitoring, the agreement notes, and all checks must be cashed within 90 days of issuance before expiration.
In addition to any monetary benefits, all St. Andrew’s settlement class members may also file a claim to receive an enrollment code for two free years of CyEx Medical Shield Complete, which includes one-bureau credit monitoring, per the agreement.
To file a St. Andrew’s data breach claim form online, class members can head to this page and log in using the unique ID and PIN found on their received copy of the settlement notice. Alternatively, class members may download a PDF of the claim form from the site to print, fill out and return by mail to the settlement administrator.
All St. Andrew’s settlement claim forms must be submitted online or by mail by May 21, 2026.
Finally, St. Andrew’s has agreed to make certain changes to its information security practices; all enhancements will be funded separately from other settlement benefits, court documents state.
The court will determine whether to grant final approval to the St. Andrew’s data breach settlement following a hearing on June 8, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals are resolved.
The St. Andrew’s class action lawsuit alleged that the Missouri-based elder care organization failed to implement reasonable cybersecurity measures to protect the patient and employee information stored on its systems, which led to a data breach starting on or around February 8, 2024. According to the settlement site, private information that may have been compromised during the breach includes current and former patient and employee names, addresses, Social Security numbers, driver’s license and state identification numbers, passport numbers, military identification numbers, financial account information, payment card information, health insurance information and medical information.
Full Article & Source:
St. Andrew’s Resources for Seniors System Settlement Ends Class Action Over Feb. 2024 Data Breach
No comments:
Post a Comment