Healthcare Firm Settles Cyberattack Case for $11 Million. Kentucky-based Norton Healthcare has agreed to pay $11 million to settle a class action lawsuit stemming from a May 2023 data breach that exposed patient personal information. The company will reimburse $2,500 to each affected individual. According to court filings, Norton failed to implement adequate security protocols and industry standards for data protection while also neglecting to properly train employees on cybersecurity measures. The healthcare firm discovered the breach in May 2023 but delayed notifying victims, compounding the legal exposure. This settlement underscores the significant financial consequences companies face when cybersecurity failures compromise sensitive patient data and regulatory compliance obligations.
