INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

CPAP Medical Supplies Agrees to Pay Up to $500K

| 2026-10-01 10:00 CRITICAL LOW
JSON
Executive Summary
AI-generated
A cybersecurity incident was identified in late December 2024, and a forensic investigation determined that an unauthorized third party accessed the network of CPAP Medical Supplies and Services between December 13, 2024, and December 21, 2024. The HHS’ Office for Civil Rights notified that the electronic protected health information of 90,133 individuals was compromised in the incident. This attack works by exploiting vulnerabilities in the organization's cybersecurity measures, allowing an unauthorized third party to access sensitive data. As a result of the breach, CPAP Medical Supplies and Services has agreed to pay up to $500,000 in benefits to affected individuals, including two years of medical data monitoring services and reimbursement for documented losses due to the breach.
Technical Mitigations AI-generated
• Implement robust network segmentation and monitoring to detect unauthorized access between December 13, 2024, and December 21, 2024. • Use multi-factor authentication for all users and ensure that employees are trained on cybersecurity best practices. • Conduct regular vulnerability assessments and penetration testing to identify weaknesses in the system.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎late December 2024
An unauthorized third party accessed CPAP Medical Supplies and Services' network between December 13, 2024, and December 21, 2024.
industry Health
The cybersecurity incident was identified in late December 2024, and the forensic investigation determined that an unauthorized third party accessed its network between December 13, 2024, and December 21, 2024, and potentially obtained the personal and protected health information of current and former patients and employees.
‎December 2024
CPAP Medical Supplies and Services agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack.
tactic Data Breach
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
financial $500 Stolen / Extorted Funds
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
organisation Resolve Data Breach Lawsuit Posted
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
organisation CPAP Medical Supplies and Services
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
‎between December 13, 2024
An unauthorized third party accessed CPAP Medical Supplies and Services' network between December 13, 2024, and December 21, 2024.
industry Health
The cybersecurity incident was identified in late December 2024, and the forensic investigation determined that an unauthorized third party accessed its network between December 13, 2024, and December 21, 2024, and potentially obtained the personal and protected health information of current and former patients and employees.
‎December 13, 2024
CPAP Medical Supplies and Services agreed to pay up to $500,000 to resolve a data breach lawsuit.
‎December 21, 2024
An unauthorized third party accessed CPAP Medical Supplies and Services' network between December 13, 2024, and December 21, 2024.
industry Health
The cybersecurity incident was identified in late December 2024, and the forensic investigation determined that an unauthorized third party accessed its network between December 13, 2024, and December 21, 2024, and potentially obtained the personal and protected health information of current and former patients and employees.
organisation The HHS’ Office for Civil Rights
The HHS’ Office for Civil Rights was notified that the electronic protected health information of 90,133 individuals was compromised in the incident.
‎August 15, 2025
Four class action complaints were filed in the District Court for the Middle District of Florida against CPAP Medical Supplies and Services.
organisation the District Court
Four class action complaints were filed in response to the data breach in the District Court for the Middle District of Florida.
‎around August 15, 2025
The individuals affected by the data breach were notified around August 15, 2025.
‎September 4, 2026
CPAP Medical Supplies and Services has agreed to pay up to $500,000 in benefits to class members affected by a data breach.
organisation HIPAA Journal
Get The FREE HIPAA Compliance Checklist Immediate Delivery of Checklist Link To Your Email Address Please Enter Correct Email Address Your Privacy Respected HIPAA Journal Privacy Policy The benefits are two years of medical data monitoring services, and claims may also be submitted for up to $5,000 as reimbursement for documented, unreimbursed losses due to the data breach.
financial $500 Stolen / Extorted Funds
The defendant has agreed to pay attorneys’ fees and expenses, settlement administration costs, service awards for the class representatives, and up to $500,000 in benefits for the class members.
organisation the Circuit Court
The federal complaint was dropped, and the consolidated lawsuit – Brett Conner v. CPAP Medical Supplies and Services, Inc. – was refiled and is pending in the Circuit Court for Broward County, Florida.
‎Oct 1, 2026
CPAP Medical Supplies and Services agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack.
tactic Data Breach
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
financial $500 Stolen / Extorted Funds
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
organisation Resolve Data Breach Lawsuit Posted
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
organisation CPAP Medical Supplies and Services
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
‎2026/10/01
Threat actors stole and extorted $500 from CPAP Medical Supplies and Services, leading to a data breach lawsuit that the company agreed to resolve for up to $500,000.
organisation CPAP Medical Supplies and Services Agrees
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit.
organisation Resolve Data Breach Lawsuit
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit.
financial $500 Stolen / Extorted Funds
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit.
‎October 30, 2026
The deadline for opting out and objecting to the $500,000 settlement of CPAP Medical Supplies and Services' data breach lawsuit is October 30, 2026.
‎November 26, 2026
CPAP Medical Supplies and Services agreed to pay up to $500,000 to resolve a data breach lawsuit.
‎December 1, 2026
CPAP Medical Supplies and Services agreed to pay up to $500,000 to resolve a data breach lawsuit.
Tactical Metrics
Metrics
financial
500,000
Stolen / Extorted Funds
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit.
CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit Posted By Steve Alder on Oct 1, 2026 CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment for treating sleep apnea, has agreed to pay up to $500,000 in benefits to individuals affected by a December 2024 cyberattack and data breach.
The defendant has agreed to pay attorneys’ fees and expenses, settlement administration costs, service awards for the class representatives, and up to $500,000 in benefits for the class members.
Intelligence Sources
HIPAA Journal 2026-10-01