The East River Medical Imaging data breach settlement is an $1.85 million class action resolution covering roughly 606,000 patients and employees whose personal and medical information was exposed in a 2023 cyberattack on the New York radiology practice. A New York state court granted final approval on May 13, 2025, in Guarnaschelli et al. v. East River Medical Imaging, P.C., Index No. 656099/2023. The claims deadline has passed and the case is closed.1Justia. Guarnaschelli v East River Medical Imaging, P.C.
Who Was Covered
The class included U.S. residents whose personal information was compromised in the breach and who received a notification letter from East River Medical Imaging.2Shub & Johns. East River Medical Imaging Data Breach Final Approval of $1.85 Million Settlement3Healthcare Facilities Today. East River Medical Imaging Falls Victim to Cyberattack4MedicalRecords.com. East River Medical Imaging PC
The exposed data varied by person. Patient files could contain names, contact information, insurance details, exam and procedure information, referring physician data, imaging results, and Social Security numbers. Employee files could contain names, contact details, financial account information, Social Security numbers, and driver’s license numbers.3Healthcare Facilities Today. East River Medical Imaging Falls Victim to Cyberattack
What Class Members Could Claim
Claimants chose between two cash options. The first reimbursed documented out-of-pocket losses tied to the breach, up to $7,500 per person, covering things like bank fees, credit monitoring costs, identity theft losses, and time spent dealing with fraud; supporting records such as receipts or bank statements were required. The second was a pro rata cash payment, a flat share of whatever remained in the fund after fees, administrative costs, and documented loss claims were paid, with no documentation needed.5ClassAction.org. East River Medical Imaging Data Breach Lawsuit Resolved With $1.85M Settlement
Every class member was also entitled, at no cost, to one year of three-bureau credit monitoring and $1 million in identity theft insurance coverage. As part of the settlement, East River Medical Imaging agreed to implement enhanced cybersecurity measures. Angeion Group served as the claims administrator and ran the official site at EastRiverSettlement.com.5ClassAction.org. East River Medical Imaging Data Breach Lawsuit Resolved With $1.85M Settlement
Where Things Stand
Judge Paul A. Goetz of the New York Supreme Court approved the settlement on May 13, 2025, calling it “fair, adequate, reasonable and in the best interest of class members” and noting the risks the class would face in proving liability and damages at trial. No objections were filed, nine individuals opted out, and 20,403 claim forms were submitted by the time of approval.1Justia. Guarnaschelli v East River Medical Imaging, P.C.
From the $1.85 million fund, the court approved $616,666.66 in attorneys’ fees (one-third of the total), $12,381.77 in litigation costs, and $1,000 service awards for each of the nine named plaintiffs. Administrative expenses were not final at the time of the order, and the court gave the parties twenty days to document them.1Justia. Guarnaschelli v East River Medical Imaging, P.C. The remainder was designated for distribution to the roughly 20,000 claimants, with payments expected later in 2025. The exact per-person amount for the pro rata option has not been publicly disclosed, because it depends on the mix of documented-loss and flat-cash claims.2Shub & Johns. East River Medical Imaging Data Breach Final Approval of $1.85 Million Settlement Co-lead class counsel were Benjamin F. Johns of Shub & Johns and Jean Martin of Morgan & Morgan.6HIPAA Journal. East River Medical Imaging Data Breach Settlement
Why The Case Was Filed
Lawsuits followed within weeks of the breach notices and were eventually consolidated into Guarnaschelli on March 26, 2024. The consolidated complaint alleged that East River Medical Imaging failed to implement reasonable, industry-standard security measures, including encryption of sensitive data, and that the breach could have been prevented with appropriate safeguards. The practice denied any wrongdoing and settled without admitting liability.7Bloomberg Law. East River Medical Imaging Sued Over Breach Affecting 600,0006HIPAA Journal. East River Medical Imaging Data Breach Settlement