
Under the proposed settlement, UCLA Health admits no wrongdoing. It maintains that it was not liable for the cyber attack and that, following an extensive investigation, there continues to be no evidence that the cyber attackers actually accessed or acquired personal or medical information.
Full Answer
Are You a settlement class member at UCLA Health?
UCLA Health System Auxiliary, et al. The case concerns a cyberattack on the UCLA Health computer network, which was disclosed on July 17, 2015 (the “Incident”). If you received notice of this settlement by an email or postcard, according to The Regents’ records you are a Settlement Class Member.
What is the Adlouni v UCLA case?
A class action settlement has been reached in Adlouni v. UCLA Health System Auxiliary, et al. The case concerns a cyberattack on the UCLA Health computer network, which was disclosed on July 17, 2015 (the “Incident”).
Are there any settlements with the University of California Regents?
If You Are a Current or Former Patient at UCLA Health, a Settlement with The Regents of the University of California Has Been Reached that May Affect Your Rights A class action settlement has been reached in Adlouni v. UCLA Health System Auxiliary, et al.

When did the University of California disclose the cyber intrusion?
The lawsuit alleges that on July 17, 2015, The Regents of the University of California (“The Regents”) publicly disclosed a cyber-intrusion incident involving UCLA Health’s computer network (referred to in this document as the “Incident”). UCLA Health is overseen by The Regents.
Who is responsible for tax treatment of settlement awards?
The tax treatment of the settlement awards is the responsibility of each Settlement Class Member. You should consult your tax advisor to determine the tax consequences, if any, of your settlement award.
How much can you get for a preventive measure?
If you incurred any costs to protect your personal information because of the Incident, you can receive reimbursement up to a maximum of $5,000.00 by submitting a Claim Form. The total awards for Preventive Measures claims will be no more than $300,000.00, and your award will be reduced pro rata if total valid claims exceed that amount. You must have taken the preventive measures between July 17, 2015, and March 20, 2019. Types of preventive measures costs that may be reimbursed include, without limitation, card cancellation or replacement fees, credit monitoring or reports, the purchase of identity theft protection, costs to place a freeze, alert, or unfreeze credit reports, and costs to replace driver’s license, state identification card, or Social Security number. Documents supporting your claim must be provided if the documents are reasonably available to you.
What happens in return for settlement benefits?
In return for settlement benefits, you will release (give up) all claims, demands, rights, lawsuits, and causes of action of whatever kind or nature, known or unknown, against The Regents that arise from or relate to the factual allegations and claims asserted in this case.
How much does the ID Experts package cost?
The retail cost of the ID Experts package for each Class Member who enrolls is over $239.00. The deadline to enroll in and receive the ID Experts Package was September 16, 2019, and it is no longer possible to enroll. Reimbursement of any Preventive Measures.
When is the deadline to file an unreimbursed loss claim?
The deadline to submit an Unreimbursed Loss Claim Form was June 28, 2021, and it is no longer possible to do so.
When will the ID Experts form be released?
The parties have agreed to settle the lawsuit and provide free credit monitoring, identity theft protection, and insurance if you filled out and returned the free, two-year ID Experts Enrollment Form prior to September 16, 2019. Other relief available also required a timely claim submission.
When is UCLA Health's next settlement?
UCLA Health also agreed to update its cybersecurity practices and policies. Patients who wish to claim or object to the settlement must do so by May 20, 2019. Those who need to submit a claim for preventive measures or unreimbursed losses have until June 18, 2019. Tagged.
What lawsuit did UCLA Health file in 2015?
As a result, the impacted patients launched a class-action lawsuit in July 2015. The plaintiffs argued UCLA Health was negligent in its security efforts to protect patient data, which put patients at risk of identity theft.
What was the health system accused of?
At the time, the health system faced other accusations of invasion of privacy, breach of contract, negligence, and a violation of several California privacy laws.
What information was affected by the 2015 cyberattack?
In May 2015, officials said the cyberattack was confirmed to have impacted those systems with patient information, including names, dates of birth, Social Security numbers, Medicaid or health plan identification numbers, and some medical data.
How long does it take to report a HIPAA breach?
They claimed the health system failed to report the breach in a timely fashion. Under HIPAA, providers are required to notify patients within 60-days upon breach discovery. Further, they argued the health system should have foreseen the potential for a cyberattack given the prevalence of other security incidents among other “big players” in the health sector.
How much was the UCLA Health settlement?
How the UCLA Health settlement compares with a $115 million settlement last year in a consolidated class action lawsuit against health insurer Anthem over a 2014 cyberattack that impacted nearly 79 million individuals;
Is UCLA Health's settlement confidential?
Many details about the steps UCLA Health must take to improve its cybersecurity under the settlement are redacted in a settlement exhibit document labeled "highly confidential" on the website of the claims administrator handling the case.
