$4.75M Montefiore Medical Center HIPAA Resolution

This was a regulatory enforcement resolution. No consumer claim form was offered.

View Open Settlements
Data Security · Regulatory Resolution Completed

Montefiore Medical Center HIPAA Resolution

Published September 29, 2024
Updated July 25, 2026

Montefiore Medical Center paid $4.75 million to resolve an HHS Office for Civil Rights HIPAA investigation and agreed to a corrective action plan. There is no consumer claim form or individual payout under this resolution.

Montefiore Medical Center HIPAA Resolution

Current Status

Montefiore Medical Center paid $4.75 million to resolve an HHS Office for Civil Rights HIPAA investigation and agreed to a corrective action plan. There is no consumer claim form or individual payout under this resolution.

StatusRegulatory Resolution CompletedThis was an HHS enforcement resolution, not a consumer claims settlement.
Claim ProcessNo consumer claim deadlineNo individual claims were available.
Resolution Amount$4.75 millionSee the official documents for allocation terms.
Required ReliefCorrective action planThe agreement required compliance measures.

What Happened?

HHS investigated after Montefiore reported that an employee had improperly accessed the electronic protected health information of 12,517 patients and sold certain information to an identity-theft ring. HHS identified potential HIPAA Security Rule violations. Montefiore reserved its rights to dispute HHS’s determination and entered the resolution agreement to avoid formal proceedings.

Who Were the Parties?

This agreement was between Montefiore Medical Center and the U.S. Department of Health and Human Services Office for Civil Rights. It did not create a consumer settlement class.

What Relief Was Available?

Montefiore paid HHS $4.75 million and agreed to a corrective action plan addressing risk analysis, risk management, audit controls, policies, workforce training, and reporting. No individual cash claims were offered.

Why There Was No Claim Form

This HHS enforcement resolution did not establish a settlement class or claims process. The payment went to HHS, and the corrective action plan governed Montefiore’s compliance obligations.

Official information remains available at HHS.gov Montefiore Resolution Agreement.

Important Dates and Status

Consumer claim deadline: No consumer claim deadline
Final approval or resolution: Agreement signed November 2023
Payment status: Resolution amount paid to HHS

Resolution Amount and Compliance Terms

The resolution amount was paid to HHS. The corrective action plan, monitoring, and reporting requirements are governed by the official agreement.

Case Information

The matter is HHS OCR Resolution Agreement with Montefiore Medical Center, OCR Transaction No. 15-216248, before the U.S. Department of Health and Human Services, Office for Civil Rights.

Official Website: HHS.gov Montefiore Resolution Agreement

Sources

• Official website and posted documents: HHS.gov Montefiore Resolution Agreement

For more class actions keep scrolling below.
Resolution Amount $4.75 million
Matter HHS OCR Resolution Agreement with Montefiore Medical Center
Reference Number OCR Transaction No. 15-216248
Court or Authority U.S. Department of Health and Human Services, Office for Civil Rights
Consumer Claim Process None
Status Regulatory Resolution Completed

Open Data Breach Settlements to Check Instead