Bone & Joint Clinic, S.C. Data Incident Settlement Website

A settlement has been reached in a class action lawsuit against Bone & Joint Clinic, S.C. (“Bone & Joint” or “Defendant”). The lawsuit concerns a ransomware cyberattack discovered on January 16, 2023 (the “Data Incident”) involving Bone & Joint Clinic, S.C. (“Bone & Joint”) in which it was determined that an unauthorized third party gained access to Bone & Joint’s systems which potentially impacted the personally identifiable information (“PII”) and personal health information (“PHI”) of approximately 105,094 individuals, including, for patients: name, date of birth, Social Security number, driver’s license, home address, phone number, health insurance information, diagnosis and treatment information; and for employees: name, address, phone number, date of birth, Social Security number and other PII, which might include drivers’ license number, State ID number and/or passport number, along with employees’ spouses, dependents and beneficiaries’ PII (collectively referred to in this Settlement Agreement as “Private Information”). Bone & Joint denies any wrongdoing and denies that it has any liability but has agreed to settle the lawsuit on a classwide basis to avoid the burden and expense of litigation without in any way acknowledging fault or liability. The settlement in no way should be construed as an admission of any liability, wrongdoing, or fault by Bone & Joint.

You are a “Settlement Class Member” if you reside in the United States and your Private Information was potentially impacted by the Data Incident, including if you were mailed a notification by or on behalf of Bone & Joint regarding the Data Incident.

If you are a Settlement Class Member, you may be able to receive the following Settlement benefits:

Eligible claimants under the Settlement Agreement will be eligible to receive one or both of the following Settlement benefits:

• Out-of-Pocket Expenses: Reimbursement for the actual amount of unreimbursed out-of-pocket losses or expenses up to $5,000.00, with supporting documentation of the monetary losses or expenses; and/or
• Pro Rata Cash Payment: $75.00 cash payment from the Settlement Fund that will be increased or decreased pro rata depending on the amount remaining in the Settlement Fund after allocation of the Settlement Fund for reimbursement of documented Out-of-Pocket Expenses, attorneys’ fees and expenses, service awards, and Notice and Administrative Expenses. By submitting this claim form, you must attest that you believe that you have suffered any harm associated with the Data Incident. You do not have to include documentation.

Your Legal Rights and Options in This Lawsuit

Summary of Legal Rights		Deadline(s)
Submit a Claim Form	The only way to receive payment.	Submitted or Postmarked on or Before October 15, 2025
Exclude Yourself By Opting Out of the Class	Receive no payment. This is the only option that allows you to keep your right to bring any other lawsuit against Defendant for the same claims if you are a Class Member.	Submitted or Postmarked on or Before September 15, 2025
Object to the Settlement and/or Attend the Fairness Hearing	You can write the Court about why you agree or disagree with the Settlement. The Court cannot order a different Settlement. You can also ask to speak to the Court at the Final Approval Hearing on January 7, 2026 about the fairness of the Settlement, with or without your own attorney.	Received on or Before September 15, 2025
Do Nothing	Receive no payment. Give up rights if you are a Class Member.	No Deadline.

These rights and options—and the deadlines to exercise them—are explained in the Notice and on the Frequently Asked Questions (FAQs) page of this website.