Drug and Alcohol Treatment Services Agrees to $549,000 Data Breach Settlement
Summary
Drug and Alcohol Treatment Services agreed to a $549,000 settlement over a 2024 ransomware attack affecting 22,215 patients. Eligible class members may claim reimbursement, a pro rata payment, and 12 months of medical data monitoring.
Key points
- Drug and Alcohol Treatment Services agreed to a $549,000 settlement resolving consolidated class-action litigation over an October 2024 ransomware attack; the organization denies wrongdoing.
- A forensic investigation found unauthorized access to protected health information between October 5 and 6, 2024. HHS was informed that 22,215 patients were affected.
- Information involved included Social Security numbers, insurance and billing details, prescription information, and diagnosis and treatment data.
- The Interlock ransomware group claimed responsibility and said it stole 150 GB of data. The article reports that the group published data after the ransom was not paid; DATS said it knew of no misuse when notifying affected individuals.
- Eligible class members may claim reimbursement for documented losses up to $5,000, a pro rata cash payment, and a free 12-month medical data monitoring membership.
- Objections and opt-outs are due August 25, 2026; claims are due September 24, 2026. The final fairness hearing is scheduled for November 24, 2026.
Article Details
- Victim Organization
- Drug and Alcohol Treatment Services, Inc.
- Incident Type
- Ransomware attack and data breach
- Incident Date
- 2024-10-05
- Disclosure Date
- 2024-12-05
- Data Types Exposed
- Names
- Dates of birth
- Social Security numbers
- Health insurance information
- Medical histories
- Medical billing and claims information
- Patient account numbers
- Prescription and medication information
- Diagnosis and treatment information
- Financial information
- Affected Records
- 22,215 individuals, reported to HHS as affected patients.
- Affected Data Size
- Interlock claimed that 150 GB of data was stolen; this volume is not independently confirmed in the article.
- Operational Impact
- An investigation confirmed unauthorized access to the computer network and protected health information between October 5 and October 6, 2024. DATS confirmed the breach on December 5, 2024, and notification letters were sent on May 2, 2025. DATS said it was unaware of any misuse of the stolen data when it issued the letters. The article reports that data was published on the group’s leak site after the ransom was not paid.
- Ransom Or Extortion
- The Interlock ransomware group claimed responsibility and said it stole 150 GB of data. The ransom was not paid; the article reports that the group then published data on its leak site.
- Claim Status
- confirmed