Montefiore Medical Center paid $4.75 million to resolve an HHS Office for Civil Rights HIPAA investigation and agreed to a corrective action plan. There is no consumer claim form or individual payout under this resolution.
Montefiore Medical Center paid $4.75 million to resolve an HHS Office for Civil Rights HIPAA investigation and agreed to a corrective action plan. There is no consumer claim form or individual payout under this resolution.
StatusRegulatory Resolution CompletedThis was an HHS enforcement resolution, not a consumer claims settlement.
Claim ProcessNo consumer claim deadlineNo individual claims were available.
Resolution Amount$4.75 millionSee the official documents for allocation terms.
HHS investigated after Montefiore reported that an employee had improperly accessed the electronic protected health information of 12,517 patients and sold certain information to an identity-theft ring. HHS identified potential HIPAA Security Rule violations. Montefiore reserved its rights to dispute HHS’s determination and entered the resolution agreement to avoid formal proceedings.
Who Were the Parties?
This agreement was between Montefiore Medical Center and the U.S. Department of Health and Human Services Office for Civil Rights. It did not create a consumer settlement class.
What Relief Was Available?
Montefiore paid HHS $4.75 million and agreed to a corrective action plan addressing risk analysis, risk management, audit controls, policies, workforce training, and reporting. No individual cash claims were offered.
Why There Was No Claim Form
This HHS enforcement resolution did not establish a settlement class or claims process. The payment went to HHS, and the corrective action plan governed Montefiore’s compliance obligations.
• Consumer claim deadline: No consumer claim deadline
• Final approval or resolution: Agreement signed November 2023
• Payment status: Resolution amount paid to HHS
Resolution Amount and Compliance Terms
The resolution amount was paid to HHS. The corrective action plan, monitoring, and reporting requirements are governed by the official agreement.
Case Information
The matter is HHS OCR Resolution Agreement with Montefiore Medical Center, OCR Transaction No. 15-216248, before the U.S. Department of Health and Human Services, Office for Civil Rights.