Avon, Ind.-based Cummins Behavioral Health Systems agreed to pay $2.1 million to settle a class-action lawsuit, Top Class Actions reported Nov. 11.
The lawsuit alleged that Cummins failed to implement adequate cybersecurity measures, leading to a 2023 data breach that exposed the personal information of 157,688 patients. The compromised data included names, addresses, dates of birth, Social Security numbers, driver's license or state ID numbers, financial account information, payment card information, usernames and passwords, health insurance details and medical information, according to The HIPAA Journal.
The settlement was finalized Oct. 7.
Cummins Behavioral Health Systems provides care across several locations in Indiana.