Des Moines Orthopaedic Surgeons 25 to 5500 Data Breach Settlement for Exposed Patient Information

In February 2023, Des Moines Orthopaedic Surgeons experienced a data breach that potentially exposed patients’ personal and health information, triggering a class action that has now reached a proposed settlement offering $25 to $5,500 per claimant. The suit alleges the provider failed to adequately safeguard protected health information (PHI) and seeks compensation and remedial measures for affected patients; the settlement portal notes no proof of damages is required to file a claim and sets a deadline of March 23, 2026. This kind of litigation is common after healthcare breaches because HIPAA-covered entities are required by the federal Breach Notification Rule to report breaches affecting 500+ individuals and face oversight and possible enforcement from the HHS Office for Civil Rights (OCR), as well as state data-breach and consumer-protection laws that can influence damages and remediation. Beyond the immediate payouts, the case underscores broader industry pressure on hospitals and clinics to strengthen cybersecurity, adopt robust access controls and encryption under the HIPAA Security Rule, and to implement prompt incident response plans. Similar high‑profile healthcare breaches over the past decade have resulted in multi‑million dollar settlements and OCR corrective actions, signaling that regulators and plaintiffs’ lawyers will continue to hold providers accountable when safeguards fail. For patients the settlement represents both a potential avenue for modest compensation and a reminder to monitor financial and medical records after a breach.