Compensation, Monitoring and Caps
Class members may seek reimbursement of up to $500 for documented, unreimbursed out-of-pocket expenses linked to the breach. This includes compensation for up to two hours of lost time, calculated at $25 per hour. Claims for lost time are subject to an aggregate cap of $200,000 and will be distributed on a pro rata basis if claims exceed that amount.
In addition, eligible individuals may claim two years of credit monitoring and identity theft protection services, which include an identity theft insurance policy valued at $1 million.
Security Changes Beyond the Settlement
Separate from monetary relief, Murfreesboro Medical Clinic & SurgiCenter has agreed to strengthen its cybersecurity posture. The clinic committed to maintaining a comprehensive information security program for at least three years, training staff on data protection and how to spot suspicious emails, enhancing firewall and data segregation protocols, and enforcing record deletion procedures.
The agreement also requires the clinic to maintain a formal policy for responding to future data security incidents.
