A University of Pittsburgh Medical Center billing support company agreed to pay $450,000 to resolve claims surrounding a 2020 data breach.

A University of Pittsburgh Medical Center billing support company agreed to pay $450,000 to resolve claims surrounding a 2020 data breach.

The settlement benefits individuals whose information was accessed, stolen or compromised as a result of the 2021 data breach affecting the University of Pittsburgh Medical Center (UPMC).

UPMC is a large medical center that employs over 92,000 people at 40 hospitals and 800 office or outpatient sites. According to the center’s website, UPMC is the largest non-government employer in Pennsylvania and an expansive medical insurer.

However, UPMC may fail to protect its many patients from cyber harm, according to a class action lawsuit.

From April to June 2020, Charles J. Hilton PC (CJH) — legal retainer hired by UPMC for billing-related services — allegedly suffered from a data breach. This breach occurred when several CJH email accounts were accessed by a third party, the plaintiffs explain.



According to the UPMC class action lawsuit, this breach compromised the information of around 36,000 UPMC patients. Information compromised in the breach includes: Social Security numbers, birth dates, financial account numbers, identification numbers, signatures, medical records, insurance information, and more.

Despite learning of the breach in June 2020, CJH and the University of Pittsburgh Medical Center didn’t confirm the data breach until December 2020, the plaintiffs contend. The class action argues UPMC and CJH had a duty to protect consumers’ data but failed to implement reasonable cybersecurity measures to protect sensitive information.

This breach had serious consequences for patients. Shortly after the data breach, the plaintiff in the case allegedly had a fraudulent Amazon credit card opened in his name. According to the UPMC class action lawsuit, he had to spend significant time and effort to mitigate this fraudulent account.

CJH hasn’t admitted any wrongdoing but agreed to pay $450,000 to resolve these allegations.

Under the terms of the settlement, class members can receive a cash payment for documented expenses, lost time, extraordinary losses and other damages. Class members are entitled to up to $250 for documented out-of-pocket expenses and lost time, up to $2,500 for documented identity theft loses or fraudulent charges and up to $30 for undocumented time spent. The maximum payment, with compensation from all categories, is limited to $2,780.



In addition to cash payments, class members can receive a year of free credit monitoring services. These benefits include credit bureau monitoring, credit reports and scores, dark web monitoring, identity protection services, identity resolution services and $1 million in identity theft insurance.

The deadline for exclusion and objection is Sept. 3, 2022.

The final approval hearing for the University of Pittsburgh Medical Center data breach settlement is scheduled for Oct. 6, 2022.

In order to recover a payment from the settlement, Class Members must submit a valid claim form by Sept. 3, 2022.

Who’s Eligible
The settlement benefits individuals whose information was accessed, stolen or compromised as a result of the 2021 data breach affecting the University of Pittsburgh Medical Center (UPMC).



Potential Award
Up to $2,780

Proof of Purchase
Provide supporting documentation such as receipts, invoices, or other payment documents.

Claim Form
CLICK HERE TO FILE A CLAIM »
NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline
09/3/2022

Case Name
Bowen v. UPMC d/b/a The University of Pittsburgh Medical Center et al., Case No. GD-21-002075, in the Court of Common Pleas of Allegheny County

Final Hearing
10/06/2022

Settlement Website
CJHDataSettlement.com

Claims Administrator
Bowen v UPMC Settlement – 7493
PO Box 2599
Faribault, MN 55021-9599
800-871-6167

Class Counsel
Joshua P Ward
JP WARD & ASSOCIATES LLC

Defense Counsel
Charles J Hilton
CHARLES J HILTON PC