Oglethorpe Pays $350,000 to Resolve Data Breach Lawsuit
Oglethorpe has agreed to settle consolidated litigation related to a June 2025 hacking incident that affected 92,000 current and former patients and employees, and the settlement includes a $350,000 fund for class member benefits.
Data Breach and Litigation
Mental health and addiction recovery treatment network, Oglethorpe in Tampa, Florida, faced a lawsuit because of a hacking incident discovered in June 2025 that resulted in the theft of personal information and protected health information (PHI) belonging to current and former patients and employees.
The forensic investigation determined that the compromised information included names, driver’s license or state ID numbers, Social Security numbers, and medical information. In compliance with HIPAA laws, Oglethorpe sent notifications to affected individuals about the incident on October 31, 2025.
Oglethorpe faced multiple class action lawsuits following the breach. The lawsuits alleged that the incident could have been prevented if reasonable and appropriate cybersecurity measures had been implemented. The lawsuits were later consolidated in the Circuit Court for Broward County, Florida, under the case Scott, et al. v. Oglethorpe, Inc. based on similar facts and overlapping allegations.
The consolidated lawsuit asserted claims of unjust enrichment, negligence, negligence per se, and breach of implied contract. The plaintiffs also requested declaratory and injunctive relief. Oglethorpe denied wrongdoing, fault, and liability.
Settlement Terms
The parties pursued an early resolution process to avoid more legal expenses and uncertainty of trial proceedings and appeals. The settlement followed several weeks of arm ’s-length negotiations.
Under the settlement terms, Oglethorpe agreed to pay $350,000 for attorneys’ fees and expenses, settlement administration and notification fees, class representatives’ service awards, and benefits to eligible class members.
Class members may enroll in one year of medical data monitoring services. The services include a $1 million medical identity theft insurance policy.
Eligible class members may also select one of two cash benefit options. One option allows reimbursement claims for documented and unreimbursed losses connected to the data breach, with reimbursement capped at $2,500 per class member. The second option allows a one-time cash payment of $75.
The settlement terms state that the $75 payment may be reduced on a pro rata basis if total claims exceed the available settlement fund.
Court Approval and Deadlines
The settlement has received preliminary approval from the court. A final fairness hearing is scheduled for June 22, 2026.
Class members must submit claims by August 8, 2026. Individuals who intend to object to the settlement or request exclusion from the settlement class must do so by June 8, 2026.