Marlboro-Chesterfield Pathology Settles Lawsuit Over 2025 Ransomware Attack
Summary
A forensic investigation confirmed that a January 2025 SafePay ransomware attack compromised data belonging to 235,911 people. Marlboro-Chesterfield Pathology has agreed to a class-action settlement that received preliminary court approval.
Key points
- Unauthorized network access was identified on January 16, 2025, following a ransomware attack attributed to the SafePay group.
- The forensic investigation confirmed that 235,911 individuals’ data was compromised, including names, birth dates, Social Security numbers and protected health information.
- Affected individuals were notified around May 7, 2025.
- The plaintiff alleged the attack resulted from the provider’s failure to use reasonable cybersecurity measures. The provider disputes the lawsuit’s claims and denies wrongdoing.
- The settlement provides for reimbursement of documented, unreimbursed losses up to $1,000, or an optional $10 payment for people whose Social Security numbers were compromised. Class members are also entitled to one year of credit monitoring and identity theft protection.
- The settlement received preliminary court approval. The claim, objection and opt-out deadline was August 21, 2026; the final fairness hearing was scheduled for October 12, 2026.
Article Details
- Victim Organization
- Marlboro-Chesterfield Pathology, P.C.
- Incident Type
- Ransomware attack
- Disclosure Date
- 2025-05-07
- Data Types Exposed
- Names
- Dates of birth
- Social Security numbers
- Protected health information
- Affected Records
- 235,911 individuals
- Operational Impact
- Unauthorized network access was identified. A forensic investigation confirmed that individuals’ data was compromised. No other operational impact was reported.
- Ransom Or Extortion
- No ransom demand, payment, or other extortion activity was reported.
- Claim Status
- confirmed