All closed settlements

Closed

East River Medical Imaging Data Breach Settlement

The claim window closed on October 22, 2024. The court granted final approval on May 13, 2025, and payments followed in the second half of 2025.

Case record

Case
Guarnaschelli, et al. v. East River Medical Imaging, P.C.
Case no.
Index No. 656099/2023
Court
Supreme Court of the State of New York, County of New York
Defendant
East River Medical Imaging, P.C.
Administrator
Angeion Group
Settlement fund
$1.85 million

The case

What this settlement was about

East River Medical Imaging, a Manhattan-based radiology practice, was breached by an unauthorized actor who had access to its computer systems from August 31 to September 20, 2023. Files copied from the practice's systems included names, contact and insurance information, exam and procedure information, referring physician names, imaging results, financial account information, driver's license numbers, and Social Security numbers.

The consolidated class action, filed in New York state court only weeks after breach notices went out, alleged that the practice's negligent cybersecurity allowed the three-week intrusion to go undetected. About 605,809 patients and employees were affected, making it one of the larger New York healthcare breaches of 2023.

Unusually for a data breach settlement, the claim form allowed reimbursement for emotional-distress-related expenses, for example, bills for treatment of anxiety reasonably related to the breach, alongside conventional out-of-pocket losses.

The class

Who was covered

Individuals in the United States who were notified by East River Medical Imaging that their personal information was or may have been compromised in the data security incident between August 31 and September 20, 2023, approximately 605,809 people.

  • What class members could receiveEither reimbursement of documented losses traceable to the breach up to $7,500, or a pro rata cash payment requiring no documentation. All class members could also claim one year of three-bureau credit monitoring with up to $1 million in identity theft insurance.
  • Proof requirementMost class members could file without proof of purchase.
  • Claim deadlinePassed on Oct 22, 2024. New claims are no longer accepted.

Docket timeline

How the settlement unfolded

  1. Aug 31 – Sep 20, 2023
    Network intrusion

    An unauthorized actor spent three weeks inside the practice's systems before detection.

  2. December 5, 2023
    First lawsuit filed

    Litigation began only weeks after breach notices were mailed; cases were later consolidated in New York state court.

  3. June 24, 2024
    Preliminary approval

    The court preliminarily approved the $1.85 million settlement.

  4. October 22, 2024
    Claim deadline

    About 20,000 claims were submitted, roughly a 3% claim rate.

  5. May 13, 2025
    Final approval

    The court granted final approval of the settlement.

  6. Second half of 2025
    Payments distributed

    Cash payments and credit monitoring enrollment codes went out after the effective date.

Questions people still ask

Frequently asked questions

Can I still file an East River Medical Imaging claim?

No. The deadline to file was October 22, 2024, and the settlement received final approval on May 13, 2025. The claims process is closed.

How much did the East River settlement pay?

Class members could choose either documented reimbursement up to $7,500 or a pro rata cash payment with no documentation. Everyone could also claim a year of three-bureau credit monitoring with $1 million in identity theft insurance.

What data was exposed in the East River breach?

Copied files included names, contact and insurance information, exam and imaging information, referring physician names, financial account details, driver's license numbers, and Social Security numbers for about 605,809 patients and employees.

Could class members claim emotional-distress expenses?

Yes, unusually for a data breach settlement, the claim form allowed reimbursement of documented emotional-distress-related expenses, such as bills for treatment of anxiety reasonably related to the breach.

Who administered the settlement?

Angeion Group administered the settlement. The official website at eastriversettlement.com was retired after the settlement wound down; this page preserves its record.

Sources for this record

Official site eastriversettlement.com has been retired. Record preserved by TapClaim.