RIPTA, UnitedHealthcare propose $350,000 settlement for 2021 data breach

A proposed settlement has been announced in a class-action lawsuit against the Rhode Island Public Transit Authority (RIPTA) and UnitedHealthcare New England following a 2021 data breach that compromised the personal information of over 19,000 individuals, including Social Security numbers. The settlement, which will be reviewed by a state Superior Court on March 31, includes a $350,000 fund for affected individuals, with potential additional funds if claims exceed the initial amount. Affected individuals can claim up to $1,000 for out-of-pocket expenses, $15 per hour for lost time addressing the breach, and up to $7,500 for extraordinary losses due to identity theft. The settlement also provides five years of free credit monitoring for all affected individuals. The ACLU of Rhode Island initiated the lawsuit in 2022, accusing RIPTA and UnitedHealthcare of failing to adequately secure personal information. RIPTA stated it is committed to enhancing its data security measures in light of the breach.