Lawsuits Consolidated, Liability Denied
Six class action lawsuits followed the breach. On Sept. 7, 2023, the cases were consolidated into a single action — Krenk et al. v. Murfreesboro Medical Clinic and SurgiCenter and Murfreesboro Medical Clinic — in the 16th Judicial Circuit Court of Rutherford County, Tennessee.
The consolidated complaint alleged the cyberattack stemmed from negligence and failures to meet statutory and common law duties to protect sensitive information. The clinic and its affiliated entities have denied all allegations of wrongdoing and liability.
Why the Parties Chose to Settle
After extensive exchanges of information and mediation, all sides agreed a settlement offered the most practical path forward, citing the costs, delays and uncertainty of prolonged litigation. The agreement was endorsed by all parties and granted preliminary approval by the court.
Under the terms, the settlement provides for attorneys’ fees and expenses of up to $350,000, along with service awards of $3,000 for each class representative, totaling $24,000.
