Cascade Surgicenter Settlement Offers Cash, Data Monitoring to End Class Action Over 2023 Data Breach
by Chloe Gocher
Hakkila et al. v. Neuromusculoskeletal Center of the Cascades, PC et al.
Filed: September 25, 2024 ◆§ 25CV4659
A Cascade Surgicenter data breach settlement offers reimbursements, data monitoring services and cash to patients affected by the 2023 cyberattack.
Oregon
The Neuromusculoskeletal Center of the Cascades and the Cascade Surgicenter will offer time and expense reimbursement, medical data monitoring and cash payments to settle a class action lawsuit over an October 2023 data breach.
Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.
The Cascades class action settlement received preliminary court approval on August 26, 2025 and covers anyone who received notice from the Neuromusculoskeletal Center of the Cascades or Cascade Surgicenter that their personal information was compromised in the data breach, which occurred between October 2 and October 3, 2023.
The court-approved website for the Cascades data incident settlement can be found at CascadeSurgicenterSettlement.com.
According to the website, Cascade Surgicenter settlement class members who submit a timely, valid claim form will be able to receive medical data monitoring services, up to $500 in reimbursement for documented, out-of-pocket expenses related to the data breach, up to $2,500 in reimbursement for money lost to identity theft or fraud stemming from the data breach, and payment for up to four hours spent dealing with the effects of the data breach, at a rate of $25 per hour.
In lieu of all of those benefits, class members may instead choose to submit a claim for a one-time cash payment of $80.
The medical data monitoring offered by the settlement allows class members to enroll in two years of CyEx Medical Shield Total, which includes $1 million of identity theft insurance and monitoring for unauthorized health savings account spending, healthcare insurance ID exposure and medical record number exposure.
Per the settlement website, any out-of-pocket expenses that class members seek to claim must have occurred between October 2, 2023 and December 26, 2025, and may include:
- Costs to replace IDs;
- Fees for credit reports, credit monitoring or freezing and unfreezing credit; and
- Postage to contact banks by mail.
Similarly, any identity theft- or fraud-related losses must have occurred between October 2, 2023 and December 26, 2025 and have been caused by instances of fraud or identity theft that are reasonably traceable to the Cascades Surgicenter data breach.
For either reimbursement option, class members must submit documented proof, such as receipts, of each loss or expense they seek to claim, the class action settlement website specifies.
To receive payment for time spent dealing with the effects of the data breach—which may include time spent changing passwords, researching the data breach or investigating suspicious account activity—class members must submit descriptions of how their claimed time was spent in relation to the data breach.
To submit a claim form online, class members can visit this page of the settlement website and log in with the unique ID and PIN found in their copy of the settlement notice.
Alternatively, a PDF of the claim form is available to print, fill out and mail back to the address listed on the third page of the form.
Claim forms for the Cascades Surgicenter and the Neuromusculoskeletal Center of the Cascades class action settlement must be submitted online or postmarked by December 26, 2025.
Cascades Surgicenter and the Neuromusculoskeletal Center of the Cascades have also, as part of the settlement, agreed to improve their information security systems, court documents report.
A hearing is scheduled for January 9, 2026 to determine whether the settlement will receive final approval from the court. Settlement benefits will begin to be distributed to class members only after final approval is granted and any appeals are resolved.
The Cascades Surgicenter and Neuromusculoskeletal Center of the Cascades class action lawsuit alleged that the defendants were negligent in their cybersecurity measures, enabling unauthorized third parties to access the sensitive personal and health data of approximately 22,796 patients.
Did you know that some class action settlements require no proof to submit a claim? Check out the latest class action settlements.
Video Game Addiction Lawsuits
If your child suffers from video game addiction — including Fortnite addiction or Roblox addiction — you may be able to take legal action. Gamers 18 to 22 may also qualify.
Learn more:Video Game Addiction Lawsuit
Depo-Provera Lawsuits
Anyone who received Depo-Provera or Depo-Provera SubQ injections and has been diagnosed with meningioma, a type of brain tumor, may be able to take legal action.
Read more: Depo-Provera Lawsuit
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.