INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Twin Cities Pain Clinic Settles Data Breach Litigation with Unknown

| 2026-10-14 10:00 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach at Twin Cities Pain Clinic, a Minnesota-based pain management center, occurred in July 2025 when an employee's email account was compromised through a business email compromise attack. The attackers gained access to sensitive patient information including names, dates of birth, addresses, and Social Security numbers, affecting approximately 3,572 patients. As part of the settlement agreement, Twin Cities Pain Clinic will pay cash payments to affected class members with a cap of $385,000; these payments are estimated at around $55 per person or up to $4,500 for extraordinary losses. The deadline for submitting claims is November 9, 2026, and the final fairness hearing has been scheduled for January 20, 2027.
Technical Mitigations AI-generated
• Patch business email compromise (BEC) attacks by implementing multi-factor authentication for employee accounts. • Use a secure password manager to protect sensitive information and prevent phishing attempts. • Regularly monitor system logs for suspicious activity, including login attempts from unknown IP addresses.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth financefinance
Incident Timeline
‎July 9, 2025
The Twin Cities Pain Clinic settled a data breach litigation, with no specific details on the nature of the incident or how it was resolved.
industry Health
General Document Context
industry Finance
General Document Context
‎between July 9, 2025
Class members of the Twin Cities Pain Clinic data breach may submit claims for reimbursement of documented losses incurred between July 9, 2025, and November 9, 2026.
financial $4,500 losses
Class members may choose to submit a claim for reimbursement of documented, unreimbursed losses incurred between July 9, 2025, and November 9, 2026, up to a maximum of $450 for ordinary losses, and up to $4,500 for extraordinary losses.
‎July 2025
Twin Cities Pain Clinic settled class action litigation arising from a July 2025 data breach that exposed patients' personal and protected health information.
tactic Data Breach
Twin Cities Pain Clinic Settles Data Breach Litigation Posted By Steve Alder on Oct 14, 2026 Twin Cities Pain Clinic, an Edina, Minnesota-based pain management center, has settled class action litigation arising from a July 2025 data incident that exposed patients’ personal and protected health information.
organisation Twin Cities Pain Clinic
Twin Cities Pain Clinic Settles Data Breach Litigation Posted By Steve Alder on Oct 14, 2026 Twin Cities Pain Clinic, an Edina, Minnesota-based pain management center, has settled class action litigation arising from a July 2025 data incident that exposed patients’ personal and protected health information.
organisation the HHS’ Office for Civil Rights
The data breach was reported to the HHS’ Office for Civil Rights as affecting 3,572 patients.
organisation Twin Cities Pain Clinic Data Breach Litigation
In re Twin Cities Pain Clinic Data Breach Litigation – in the District Court of Hennepin County, Minnesota.
organisation the District Court of
In re Twin Cities Pain Clinic Data Breach Litigation – in the District Court of Hennepin County, Minnesota.
organisation Social Security
A cybercriminal gained access to an employee’s email account in a business email compromise attack, exposing patient information such as names, dates of birth, addresses, email addresses, phone numbers, financial account information, medical record numbers, treatment notes, provider information, health insurance information, and Social Security numbers.
organisation Minnesota Health Records Act
The consolidated lawsuit asserted claims for negligence, negligence per se , breach of contract, breach of implied contract, unjust enrichment, breach of fiduciary duty, breach of confidence, and violations of the Minnesota Uniform Deceptive Trade Practice Act and Minnesota Health Records Act.
financial $385,000 $ cap
The cash payments are subject to a $385,000 cap and will be paid pro rata if that total is exceeded.
‎Oct 14, 2026
Twin Cities Pain Clinic settled class action litigation over a July 2025 data breach that exposed patients' personal and protected health information.
industry Health
General Document Context
industry Finance
General Document Context
tactic Data Breach
Twin Cities Pain Clinic Settles Data Breach Litigation Posted By Steve Alder on Oct 14, 2026 Twin Cities Pain Clinic, an Edina, Minnesota-based pain management center, has settled class action litigation arising from a July 2025 data incident that exposed patients’ personal and protected health information.
organisation Twin Cities Pain Clinic
Twin Cities Pain Clinic Settles Data Breach Litigation Posted By Steve Alder on Oct 14, 2026 Twin Cities Pain Clinic, an Edina, Minnesota-based pain management center, has settled class action litigation arising from a July 2025 data incident that exposed patients’ personal and protected health information.
‎November 9, 2026
The Twin Cities Pain Clinic agreed to settle a data breach litigation by offering class members the option to submit claims for reimbursement or cash payments.
industry Health
General Document Context
industry Finance
General Document Context
financial $4,500 losses
Class members may choose to submit a claim for reimbursement of documented, unreimbursed losses incurred between July 9, 2025, and November 9, 2026, up to a maximum of $450 for ordinary losses, and up to $4,500 for extraordinary losses.
financial $55 payment
Alternatively, a claim may be submitted for a flat cash payment, estimated to be $55 per class member.
‎January 20, 2027
The Twin Cities Pain Clinic has settled a data breach litigation case.
industry Health
General Document Context
industry Finance
General Document Context
organisation HIPAA Journal
Get The FREE HIPAA Compliance Checklist Immediate Delivery of Checklist Link To Your Email Address Please Enter Correct Email Address Your Privacy Respected HIPAA Journal Privacy Policy
Tactical Metrics
Metrics
financial
4,500
Financial Impact / Stolen Funds
Class members may choose to submit a claim for reimbursement of documented, unreimbursed losses incurred between July 9, 2025, and November 9, 2026, up to a maximum of $450 for ordinary losses, and up to $4,500 for extraordinary losses.
Metrics
financial
385,000
$ Cap
The cash payments are subject to a $385,000 cap and will be paid pro rata if that total is exceeded.
Metrics
financial
55
Financial Impact / Stolen Funds
Alternatively, a claim may be submitted for a flat cash payment, estimated to be $55 per class member.
Intelligence Sources
HIPAA Journal 2026-10-14