Covid Contact-Tracing Contractor Settles Data Breach Lawsuit

Covid Contact-Tracing Contractor Settles Data Breach Lawsuit
Christopher Brown
Christopher Brown
Staff Correspondent




Print

Email
Victims of breach to receive up to $5,000 each
Court approves $300,000 in fees for class counsel
Insight Global LLC will pay up to $5,000 each to victims of an April 2021 data breach involving Covid-19 contact-tracing data to compensate them for extraordinary out-of-pocket losses, in a settlement given final approval by a federal judge.

Lisa Chapman filed the proposed class action against Insight and the Pennsylvania Department of Health, alleging they negligently failed to protect health information collected during the state’s Covid-19 contact tracing initiative, putting victims at risk of fraud and identity theft.

The health department was later dropped from the amended suit.

Information exposed in the breach may have included names, indications of exposure to Covid-19 and presence of Covid-19 symptoms, information about household size, e-mail and telephone numbers, and social support services needs, according to the plaintiff’s motion to approve the settlement.

More than 76,000 people were affected by the breach, the motion said.

Judge Christopher C. Conner of the US District Court for the Middle District of Pennsylvania gave final approval to the deal in a Thursday order.

Victims of the breach also will be eligible for up to $250 in compensation for ordinary out-of-pocket expenses, including payment for lost time at a rate of $20 per hour, and two years of credit monitoring services.

Class counsel will receive $300,000 for fees and expenses, and Chapman will receive a service award of $2,000, Conner said.

The Shub Law Firm LLC, Schmidt Kramer PC, Haggerty Goldberg Schleifer & Kupersmith PC, Jack Goodrich & Associates PC, and Phil Dilucente & Associates LLC represent Chapman and the proposed class.