Keenan & Associates settles 2023 data breach litigation for $14M

Keenan & Associates experienced an unauthorized access incident in August 2023 that exposed names, dates of birth, Social Security numbers, driver’s license and passport numbers, health insurance and medical information for roughly 1.5 million individuals; one customer reported a ransomware incident. Multiple class-action suits followed, culminating in a settlement of up to $14M (including fees) and a two-year commitment by Keenan to implement additional cybersecurity and privacy measures.