St Andrews Resources for Seniors System $50 to $5,080 Settlement for February 2024 Data Breach

In February 2024, St. Andrew’s Resources for Seniors System announced a data breach that exposed personal information of residents and others connected to its care network, prompting a class action that settled for individual payments ranging from $50 to $5,080. Plaintiffs allege the organization failed to safeguard sensitive data—such as names, contact details, medical or financial information—leading to risk of identity theft and financial harm; the settlement is significant because it offers cash compensation without requiring proof of additional losses, and it streamlines relief for affected people with a claims deadline of May 21, 2026. Beyond the immediate payouts, the case highlights a broader trend of litigation and regulatory scrutiny in the healthcare and senior-care sectors, which are frequent targets of cyberattacks and face strict obligations under laws like HIPAA and state data-breach notification statutes. Regulators such as the HHS Office for Civil Rights and the FTC have pursued enforcement and settlements when safeguards fall short, and similar lawsuits against hospitals and long-term care providers have produced multi-million-dollar outcomes—underscoring the industry need for stronger encryption, incident response planning, and transparency to protect vulnerable populations.