Integris Health Agrees to $30 Million Settlement Over 2023 Data Breach

Integris Health, an Oklahoma health system, has agreed to a $30 million settlement in a data breach class action that impacted over two million people. The filing describes a breach that occurred in November 2023, exposing Social Security Numbers, dates of birth, addresses, phone numbers, insurance information and employer details.

Victims began receiving emails from a cybercriminal in December 2023, using the email address that was protected in the article, and the perpetrator, referred to as DataLeakege, threatened to sell the stolen data on the darknet unless data owners paid up. The emails warned recipients that their data had been compromised and gave until 5 January 2024 to pay $50 for their data or risk further sale to data brokers, according to the filing.

The settlement, reported by DataBreaches[.]Net, is framed as a resolution of the class action filed in the U.S. District Court for the Western District of Oklahoma, with the article noting the agreement was reached after the breach and its aftermath. Read more at Newsweek.