On Jan. 10, 2023, the Supreme Court of the State of New York, County of Kings, granted preliminary approval of a settlement agreement for a class-action lawsuit against AssistCare related to a January 2021 ransomware attack.^[1] AssistCare is a HIPAA covered entity that provides home health services. The breach reportedly affected 92,283 individuals.^[2]

The ransomware attack resulted in access to and exfiltration of personal data.^[3] The protected health information that was affected included names; addresses; email addresses; phone numbers; demographic information; Social Security numbers; dates of birth; financial information, such as bank account numbers; Medicaid numbers; and medical information, such as dates of service and vaccination records.