Excellus Health Plan Settles Data Breach Suit With Policyholders

Excellus Health Plan Inc. will settle a data breach lawsuit with a certified class over a 2013 hacking incident that compromised the personal data of approximately 10 million policyholders.

Matthew Fero, who filed the suit against Excellus and several associated healthcare companies in 2015, claims that customers’ personal identifying information, Social Security numbers, and medical and financial data was compromised.

Judge Elizabeth A. Wolford of the U.S. District Court for the Western District of New York granted final approval of the settlement on April 29.

The deal requires Excellus to implement information security measures and comprehensively address security risks.

The ...