Closed
Mednax / American Anesthesiology Data Breach Settlement
The claim window closed on September 9, 2024. The court granted final approval on October 4, 2024, and benefits were distributed after the settlement became final.
Case record
- Case
- In re: Mednax Services, Inc., Customer Data Security Breach Litigation
- Case no.
- 21-MD-02994-RAR (MDL No. 2994)
- Court
- U.S. District Court for the Southern District of Florida
- Defendant
- Mednax, Inc., Pediatrix Medical Group, and American Anesthesiology
- Administrator
- KCC Class Action Services
- Settlement fund
- $6 million (claims-made cap)
The case
What this settlement was about
In June 2020, hackers gained access to Mednax's Microsoft Office 365 email accounts through a phishing attack. The intrusion, between roughly June 17 and June 22, 2020, exposed data for 1,290,670 people, including 1,269,074 American Anesthesiology patients, making it one of the largest healthcare breaches reported to federal regulators that year.
Compromised data included names, dates of birth, Social Security numbers, health insurance details, medical and treatment information, and billing and claims information. Affected individuals were notified in December 2020 and January 2021, and the resulting lawsuits were consolidated into a multidistrict litigation in the Southern District of Florida.
The defendants denied wrongdoing but agreed to a claims-made settlement with total payments, claims, notice, administration, and attorneys' fees, capped at $6 million. Class members could claim compensation for lost time, documented expenses, and three years of medical fraud monitoring.
The class
Who was covered
All U.S. residents who were notified in or around December 2020 and January 2021, by written or substitute notice, that their protected health information and personally identifiable information may have been involved in the cybersecurity incident, including minors whose parents were notified.
- What class members could receiveUp to $120 for lost time on attestation alone (4 hours at $30/hour), up to $420 total for lost time with documentation, reimbursement of documented out-of-pocket expenses up to $5,000, and three years of medical fraud monitoring.
- Proof requirementClaims required supporting documentation.
- Claim deadlinePassed on Sep 9, 2024. New claims are no longer accepted.
Docket timeline
How the settlement unfolded
- June 17–22, 2020Phishing attack
Hackers accessed Mednax's Microsoft Office 365 email accounts, exposing data for nearly 1.3 million people.
- December 2020 – January 2021Breach notices mailed
Affected patients were notified by letter or substitute notice.
- 2021MDL consolidation
Lawsuits nationwide were consolidated before Judge Rodolfo A. Ruiz II in the Southern District of Florida (MDL No. 2994).
- September 9, 2024Claim deadline
Claims required the unique class member ID from the mailed postcard notice.
- October 4, 2024Final approval
The court granted final approval at the fairness hearing.
- Late 2024 onwardBenefits distributed
Payments and medical fraud monitoring enrollment followed the settlement's effective date.
Questions people still ask
Frequently asked questions
Can I still file a Mednax settlement claim?
No. The deadline to file was September 9, 2024, and the settlement received final approval on October 4, 2024. The claims process is closed.
How much did the Mednax settlement pay?
Class members could claim up to $120 for lost time with a simple attestation, up to $420 total for lost time with documentation, and up to $5,000 in documented out-of-pocket expenses. Everyone in the class could also enroll in three years of medical fraud monitoring.
What was the Mednax data breach?
A phishing attack in June 2020 gave hackers access to Mednax's Office 365 email accounts. Data for 1,290,670 people was exposed, including Social Security numbers, medical information, and insurance details, most of them American Anesthesiology patients.
Why did some claimants need extra documentation?
People who received only substitute notice, no mailed letter, had to submit independent documentation showing they or their child received services from a Mednax-affiliated physician or American Anesthesiology before June 17, 2020.
Is mednaxaasettlement.com still the official settlement site?
No. The official settlement website was retired after the settlement wound down, and the domain registration lapsed. This page preserves the settlement's record; the administrator was KCC Class Action Services.
Sources for this record
Official site mednaxaasettlement.com has been retired. Record preserved by TapClaim.
