1 min read
1 min read
Data Breach Settlement: Upstream's $4.3M Patient Protection Plan
A
Anmol Tiwari
January 15, 2025

Hufstetler vs. Upstream Rollco Llc
Case Background
On September 22, 2023, Plaintiff Jeremy Hufstetler, individually, and on behalf of all others similary situated filed a Class action lawsuit in the United States District Court, Alabama Northern (Case number: 2:23cv1265). Magistrate Judge Gray M Borden presided over this case.Cause
In January and February 2023, a data breach at Upstream RollCo LLC exposed sensitive information, including full names, medical diagnoses, health insurance details, and other protected health information (PHI). Unauthorized access to employee email accounts caused the breach. The company publicly acknowledged the incident on September 15, 2023, notifying affected individuals nearly eight months after the breach. This delay hindered victims’ ability to mitigate identity theft risks and protect their information promptly.Injuries
The data breach caused significant harm to affected individuals, including emotional distress, anxiety, and fear of data misuse. Representative Plaintiff Jeremy Hufstetler and others faced an imminent risk of identity theft and fraudulent financial or medical claims. Victims reported a loss of intContinue Reading This Article
Subscribe to access this article and our entire library of legal content.
Unlimited access to all articles
Expert legal analysis and insights
Downloadable resources and templates
Categories
Tags
class action
data breach
Identity theft risk
Protected health information breach
Upstream RollCo
identity theft risk
protected health information breach
upstream rollco