The District of Columbia Health Benefit Exchange Authority (DCHBEA), the agency responsible for operating health programs including DC Health Link, has agreed to settle a $1.45 million class action lawsuit. This case arises from the agency's alleged failure to prevent a data breach in March 2023, which is said to have compromised the personal information, including Social Security numbers and contact details, of around 170,000 individuals. The lawsuit claimed that the DCHBEA failed to enforce reasonable cybersecurity measures which might have warded off the breach. While the authority has not admitted any wrongdoing, it has agreed to the settlement to resolve the lawsuit. The settlement benefits those who received a notification from the agency indicating that their private information was or might have been compromised. The settlement class is divided into two groups based on the extent of the information compromise: Group 1, whose information was definitively compromised, and Group 2, who were potentially impacted. Group 1 members can claim up to $10,000 for extraordinary losses such as identity theft, fraud, false tax returns and other misuse of their personal information, as well as ordinary losses such as credit monitoring costs, bank fees, and travel expenses. Both Group 1 and 2 members can claim up to $2,500 for documented ordinary losses, or opt to receive an alternative cash payment. Additionally, all class members are eligible for a year of free credit monitoring and identity restoration services, which includes three-bureau credit monitoring and $1 million in identity theft insurance.