Serviceaide has agreed to pay $1.8 million to settle a class action lawsuit after a data breach exposed personal information of nearly 480,000 people. The incident took place between September 19 and November 5, 2024, affecting sensitive data including Social Security numbers, medical records, and health insurance details.

Details of the Breach and Settlement Terms

Serviceaide, known for providing AI-driven digital solutions to clients like Catholic Health in New York, faced allegations that it failed to protect user data adequately, allowing unauthorized access. The exposed information put patients at risk for identity theft and fraud.

Under the settlement, those impacted can claim compensation. Individuals with documented expenses related to the breach, such as fraudulent charges, bank fees, or credit monitoring costs, may receive reimbursements up to $5,000. Others without documented losses are eligible for a smaller payout around $50. The final amount depends on how many valid claims are submitted. Claims must be filed by September 1, 2026, while objections or requests to opt out are due by August 17, 2026. A hearing for final approval is set for September 16.

Company’s Response and Next Steps

Serviceaide denies any wrongdoing but chose to settle to avoid prolonged litigation. This move follows growing concerns over data security breaches in tech-driven healthcare solutions. The company’s approach highlights the rising scrutiny AI firms face when handling sensitive information.

This case adds to the ongoing conversation around cybersecurity in healthcare. For instance, Microsoft’s recent warning about infrastructure delays also shows the vulnerabilities in digital systems supporting critical services.