On Dec. 5, 2022, the U.S. District Court for the Southern District of Florida, Fort Lauderdale Division, granted preliminary approval of a settlement agreement^[1] of $3 million for a class-action lawsuit against 20/20 Eye Care Network related to a January 2021 data breach.^[2] 20/20 Eye Care Network is a HIPAA business associate that acts as a third-party plan administrator, assisting insurance companies and patients with claims processing, credentialing of professionals and connecting patients and providers within an insurance network. While the lawsuit alleged that the breach affected more than 3.2 million individuals, 20/20 Eye Care Network reported to HHS Office for Civil Rights that more than 4.1 million individuals were affected.^[3]