What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Lehigh Valley Health Network (LVHN) agreed to a $65 million class-action settlement after a 2023 ransomware incident attributed by LVHN to BlackCat/ALPHV. The Lackawanna County Court of Common Pleas approved the settlement on November 15, 2024. The official settlement site says initial payments were mailed March 20, 2025, and supplemental Relief Tier IV checks were mailed April 30, 2026.
This was a private civil settlement—not a government fine—and LVHN denied wrongdoing. The amount was divided among four relief tiers, reduced by approved fees and expenses, and was not an equal payment to every person connected with LVHN.
Who was involved
The defendant was Pennsylvania-based Lehigh Valley Health Network. LVHN said the incident primarily involved systems supporting Lehigh Valley Physician Group—Delta Medix, a Lackawanna County practice; that description does not establish that every LVHN facility or patient was affected. LVHN identified the ransomware group as BlackCat, also called ALPHV, in its February 22, 2023 incident statement.
The lawsuit, Jane Doe v. Lehigh Valley Health Network, Inc., Lackawanna County Court of Common Pleas docket 23-cv-1149, was filed March 13, 2023. Epiq Class Action & Claims Solutions administered the settlement. The court filings describe 134,250 settlement class members; that legal class is not necessarily identical to every person whose data was present in LVHN systems.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →#1 Best Overall
What happened in the ransomware attack
- February 6, 2023: LVHN said it detected unauthorized activity in its information-technology environment.
- February 22, 2023: LVHN publicly announced the ransomware attack and said BlackCat was responsible. LVHN said the attackers demanded a ransom and that the network refused to pay, according to its incident statement.
- March 13, 2023: The class-action complaint was filed.
- March 14, 2023: LVHN began notifying people whose information was involved.
- June 23, 2023: LVHN issued a fuller incident notification describing the information identified during its investigation.
- September 2024: Counsel announced the proposed $65 million settlement.
- November 15, 2024: The court granted final approval.
- March 20, 2025: Initial settlement payments were mailed.
- April 30, 2026: Supplemental checks for Relief Tier IV were mailed, according to the official settlement website.
What information was involved
LVHN’s June 2023 notification said the affected files could contain different combinations of:
- Names, addresses and telephone numbers
- Medical-record numbers
- Treatment and diagnosis information and CPT codes
- Health-insurance information and email addresses
- Banking information
- Social Security numbers and driver’s-license numbers
- Clinical images for a limited number of people
It is important to distinguish between information that was accessed or stolen, information contained in affected files, and information actually published online. Those categories were not identical for everyone. The settlement materials state that BlackCat published some information on the dark web, including image files covered by the settlement’s image-related tiers.
Why the lawsuit was brought
The complaint alleged that LVHN failed to adequately protect patient and employee information and sought relief for people whose data was exposed. LVHN denied wrongdoing and denied that the class had a viable legal claim. The negotiated settlement resolved the litigation without an admission of liability; it did not constitute a court finding that LVHN violated HIPAA.
How the $65 million fund was divided
The $65 million was a settlement fund, not a fine and not money paid entirely to class members. The official settlement FAQ describes four allocations:
| Relief tier | Who it covered | Allocation |
|---|---|---|
| Tier One | All settlement class members | $7.15 million (11%) |
| Tier Two | Class members whose specified sensitive medical or employment information was published | $1.3 million (2%) |
| Tier Three | Covered clinical images published on the dark web that did not meet the settlement’s definition of nude because an opaque covering was present | $4.55 million (7%) |
| Tier Four | Nude images published on the dark web | $52 million (80%) |
Tier amounts were distributed pro rata. The fund also paid administration costs, court-approved attorneys’ fees and litigation expenses, and a $125,000 service award to the class representative. The court approved attorneys’ fees equal to one-third of the fund, plus reimbursement of litigation costs. Consequently, the headline $65 million cannot be divided evenly among 134,250 people to predict an individual payment.
Did every class member have to file a claim?
Automatic relief-tier payments
People placed in one or more of the four relief tiers were scheduled to receive payments automatically after the settlement became effective. They did not need to submit an ordinary claim form for those tier payments.
Out-of-pocket losses
A separate claim was required for documented out-of-pocket losses. The settlement allowed up to $5,000 per eligible claimant, subject to a pro rata reduction if approved out-of-pocket claims exceeded $500,000. The filing deadline was November 3, 2024.
Deadlines and release of claims
The opt-out and objection deadlines were October 21, 2024. Class members who stayed in the settlement and accepted payment released the released parties from claims covered by the agreement. A person who opted out did not receive settlement money but retained the ability to pursue an individual lawsuit, subject to applicable defenses and other legal requirements.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →What happened to payments
The official settlement website reports that initial checks were mailed March 20, 2025. It also reports that supplemental Relief Tier IV checks were mailed April 30, 2026. The ordinary claim, objection and opt-out deadlines have passed.
If a check is missing, was sent to an old address, remains uncashed or appears different from an expected amount, use the contact instructions on the official settlement website or its FAQ. The FAQ says payment amounts cannot be disputed through the ordinary settlement process and that tax withholding could depend on W-9 handling; it also says W-9 submissions are no longer being accepted. Do not provide a Social Security number, bank details or a copy of a check to an unverified third-party site.
What this settlement does—and does not—prove
- It resolves the private class-action litigation in Pennsylvania state court.
- It is not identified in the settlement materials as a HIPAA enforcement penalty or other regulatory fine.
- It does not establish that every person connected with LVHN was affected.
- It does not mean every stolen file was published online, or that every class member’s information included intimate images.
- It does not represent an admission by LVHN that the allegations were true; LVHN denied liability.
Why the case matters for healthcare privacy
Healthcare records combine identity, financial, employment and clinical information. A ransomware event can therefore create two separate harms: disruption or unauthorized access to systems, and threatened publication of highly sensitive files. This case also illustrates why unstructured data, including clinical images, can create distinct privacy exposure rather than being treated like ordinary database fields.
For patients and employees, the practical lesson is to distinguish the legal settlement class from the broader universe of people who may have interacted with a healthcare system. For security teams, the case underscores that refusing a ransom does not eliminate the risk of data disclosure or subsequent civil litigation. Those observations describe the risks illustrated by this incident; they are not findings that LVHN violated a particular security standard.
Where to verify your settlement status
Use only the official administrator’s website for case information, documents and payment questions:
These pages contain the court-approved terms and distribution updates. Avoid websites that promise a new claim opportunity or request sensitive financial information for a closed settlement.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
