Allwell Behavioral Health has agreed to pay $650,000 to settle a class action lawsuit filed by victims of the company's March 2022 data breach, HIPAA Journal reported Sept. 7.
The breach occurred March 3, 2022, with unauthorized individuals accessing the names, dates of birth, Social Security numbers, phone numbers, treatment activity, treatment provider, treatment date, treatment location and payer information of nearly 30,000 patients.
The lawsuit alleges Allwell was negligent for not adequately securing patient data, which the company denies, the report said.