A data breach affecting two women’s health clinics has resulted in a class action settlement nearing $1 million.
Physicians to Women, Inc. and Mid-Atlantic Women’s Care have agreed to a $918,510 settlement to resolve a class action lawsuit stemming from an April 2023 data breach. Hackers accessed sensitive patient data, including names, birth dates, Social Security numbers, and medical information. The breach led to multiple lawsuits, which were later consolidated into a single case.
The lawsuit alleged that the clinics failed to implement reasonable security measures, allowing attackers to steal protected health information. The defendants denied all wrongdoing but chose to settle to avoid ongoing legal expenses and litigation risks.
The original lawsuit was filed in February 2024 by Latoya Johnson, shortly after affected patients began receiving data breach notifications. Two other individuals, Janet Hall and Virginia Trupia-Lash, filed similar lawsuits, all of which were consolidated into Johnson et al. v. Physicians to Women, Inc. and Mid-Atlantic Women’s Care, PLC.
Under the settlement terms, a fund will be created to cover claims from those affected. After deducting legal fees, costs, and service awards, eligible class members can submit claims for reimbursement. Individuals may request up to $10,000 for documented out-of-pocket expenses related to the breach, though the final payout may be adjusted based on the number of valid claims submitted.
The defendants continue to deny any liability or fault, but agreed to the settlement to bring closure to the matter. The settlement has received preliminary court approval, and a final hearing is scheduled for September 2, 2025.
Class members who want to object to the settlement or opt-out must do so by August 11, 2025. All claims must be submitted by September 9, 2025.
The settlement is part of a broader trend in which healthcare providers address data breach claims through structured compensation instead of extended litigation. These cases continue to point to the need for stronger cybersecurity measures, especially among smaller providers with limited resources. With breaches occurring more often, class action lawsuits are becoming a more common option for individuals seeking resolution.
Individuals who received a data breach notification from Physicians to Women, Inc. or Mid-Atlantic Women’s Care in relation to the April 2023 incident are likely eligible. Claim instructions are usually included in the notice or posted on the settlement website.
Eligible expenses include documented costs like credit monitoring, identity theft resolution services, bank fees, legal expenses, or other breach-related financial losses.
Not necessarily. The $10,000 amount is a maximum cap. Final amounts may be lower and are subject to proration based on the number of approved claims and available funds after deductions.
They will still be bound by the settlement terms and forfeit the right to pursue separate legal action related to this breach.
Yes. Claims can be submitted while the settlement is pending final approval, but payments won’t be issued until after the court formally approves the agreement.