INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Jefferson-Blount-St Clair Mental Health Authority Pays $700K to Settle Lawsuit

| 2026-10-07 15:44 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A 2025 security incident at the Jefferson-Blount-St. Clair Mental Health Authority affected over 30,000 individuals, with unauthorized network activity identified on November 25, 2025; a ransomware group potentially accessed its network that same day and obtained personal information of employees and protected health information of approximately 30,434 patients. The attackers targeted the mental health authority's data, compromising names, Social Security numbers, health insurance information, dates of birth, medical information, Medicare/Medicaid information, and billing or claims information. The incident was discovered through forensic investigation, which determined that a ransomware group accessed the network on November 25, 2025; as part of a settlement agreement, the mental health authority agreed to pay $700K to affected individuals.
Technical Mitigations AI-generated
• Implement a robust network monitoring system to detect unauthorized activity, such as the one used by Jefferson-Blount-St. Clair Mental Health Authority. • Conduct regular forensic investigations to identify and contain security incidents, like the investigation conducted in response to the 2025 ransomware incident. • Use multi-factor authentication for all employees with access to protected health information (PHI) to prevent unauthorized access, as required by industry-standard best practices.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎November 25, 2025
Unauthorized network activity was detected on November 25, 2025, and a forensic investigation revealed that a ransomware group accessed the Jefferson-Blount-St. Clair Mental Health Authority's network on the same day.
industry Health
General Document Context
tactic Ransomware
Unauthorized network activity was identified on November 25, 2025, and its forensic investigation determined that a ransomware group accessed its network the same day and potentially obtained the personal information of employees and protected health information of 30,434 patients.
general_metric 30,434 patients
Unauthorized network activity was identified on November 25, 2025, and its forensic investigation determined that a ransomware group accessed its network the same day and potentially obtained the personal information of employees and protected health information of 30,434 patients.
financial $700 Stolen / Extorted Funds
Jefferson-Blount-St. Clair Mental Health Authority has agreed to establish a $700,000 settlement fund, from which attorneys’ fees and expenses, settlement administration and notification costs, and service awards for the class representatives will be deducted.
organisation Social Security
Data compromised in the incident included names, Social Security numbers, health insurance information, dates of birth, medical information, Medicare/Medicaid information, and billing or claims information.
organisation Medicare
Data compromised in the incident included names, Social Security numbers, health insurance information, dates of birth, medical information, Medicare/Medicaid information, and billing or claims information.
organisation Medicaid
Data compromised in the incident included names, Social Security numbers, health insurance information, dates of birth, medical information, Medicare/Medicaid information, and billing or claims information.
organisation Meyer
The lawsuits were consolidated into a single action – Meyer, et al. v. Jefferson-Blount-St. Clair Mental Health Authority – which is pending in the Circuit Court of Jefferson County, Alabama, Birmingham Division.
organisation the Circuit Court of
The lawsuits were consolidated into a single action – Meyer, et al. v. Jefferson-Blount-St. Clair Mental Health Authority – which is pending in the Circuit Court of Jefferson County, Alabama, Birmingham Division.
organisation HIPAA Journal
Get The FREE HIPAA Compliance Checklist Immediate Delivery of Checklist Link To Your Email Address Please Enter Correct Email Address Your Privacy Respected HIPAA Journal Privacy Policy Class members are entitled to claim three years of credit monitoring and identity theft protection services.
financial $100 payment
If a reimbursement claim is not submitted, class members may claim an alternative flat cash payment, estimated to be $100 per class member.
‎Oct 7, 2026
Jefferson-Blount-St. Clair Mental Health Authority agreed to pay $700,000 to settle a consolidated class action lawsuit stemming from a 2025 security incident affecting more than 30,000 individuals.
industry Health
General Document Context
tactic Data Breach
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit Posted By Steve Alder on Oct 7, 2026 Jefferson-Blount-St. Clair Mental Health Authority has agreed to settle a consolidated class action lawsuit stemming from a 2025 security incident that affected more than 30,000 individuals.
financial $700 Stolen / Extorted Funds
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit Posted By Steve Alder on Oct 7, 2026 Jefferson-Blount-St. Clair Mental Health Authority has agreed to settle a consolidated class action lawsuit stemming from a 2025 security incident that affected more than 30,000 individuals.
organisation Settle Data Breach Lawsuit Posted
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit Posted By Steve Alder on Oct 7, 2026 Jefferson-Blount-St. Clair Mental Health Authority has agreed to settle a consolidated class action lawsuit stemming from a 2025 security incident that affected more than 30,000 individuals.
general_metric 2025 security incident
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit Posted By Steve Alder on Oct 7, 2026 Jefferson-Blount-St. Clair Mental Health Authority has agreed to settle a consolidated class action lawsuit stemming from a 2025 security incident that affected more than 30,000 individuals.
general_metric 30,000 individuals
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit Posted By Steve Alder on Oct 7, 2026 Jefferson-Blount-St. Clair Mental Health Authority has agreed to settle a consolidated class action lawsuit stemming from a 2025 security incident that affected more than 30,000 individuals.
‎2026/10/07
Threat actors successfully breached the Jefferson-Blount-St. Clair Mental Health Authority's systems, resulting in $700K stolen or extorted funds.
organisation Settle Data Breach Lawsuit
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit.
financial $700 Stolen / Extorted Funds
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit.
‎November 23, 2026
The Jefferson-Blount-St. Clair Mental Health Authority agreed to pay $700,000 as part of a settlement in its data breach lawsuit.
industry Health
General Document Context
‎December 23, 2026
The Jefferson-Blount-St. Clair Mental Health Authority agreed to pay $700,000 as part of a settlement in its data breach lawsuit that must be submitted by December 23, 2026.
industry Health
General Document Context
‎February 16, 2027
The Jefferson-Blount-St. Clair Mental Health Authority agreed to pay $700,000 as part of a settlement in its data breach lawsuit.
industry Health
General Document Context
Tactical Metrics
Metrics
financial
700,000
Stolen / Extorted Funds
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit.
Jefferson-Blount-St. Clair Mental Health Authority Pays $700K to Settle Data Breach Lawsuit Posted By Steve Alder on Oct 7, 2026 Jefferson-Blount-St. Clair Mental Health Authority has agreed to settle a consolidated class action lawsuit stemming from a 2025 security incident that affected more than 30,000 individuals.
Jefferson-Blount-St. Clair Mental Health Authority has agreed to establish a $700,000 settlement fund, from which attorneys’ fees and expenses, settlement administration and notification costs, and service awards for the class representatives will be deducted.
Metrics
financial
100
Financial Impact / Stolen Funds
If a reimbursement claim is not submitted, class members may claim an alternative flat cash payment, estimated to be $100 per class member.
Intelligence Sources
HIPAA Journal 2026-10-07