On Dec. 6, the U.S. District Court for the Middle District of Tennessee granted preliminary approval of a proposed settlement agreement that requires Advent Health Partners, a HIPAA business associate that provides revenue cycle management services to covered entities, to compensate class members and implement data security enhancements to resolve a class action dispute arising from a data breach.^[1]

The lawsuit arises from a hacking incident that occurred in September 2021, affecting a reported 61,072 individuals.^[2] The threat actors hacked Advent Health Partners’ employees’ email accounts, which resulted in the exposure of patient names, Social Security numbers, drivers’ license information, dates of birth, health insurance information, medical treatment information, and financial account information.