Insurance Brokerage Firm Keenan & Associates Hit with Class Action Over Cyberattack Affecting 1.5M [UPDATE]
Last Updated on August 11, 2025
Rutledge v. Keenan & Associates
Filed: February 2, 2024 ◆§ 5:24-cv-00263
Keenan & Associates faces a class action over an August 2023 cyberattack that compromised the personal and medical data of more than 1,500,000 people.
California Unfair Competition Law California Confidentiality Of Medical Information Act California Consumers Legal Remedies Act California Consumer Privacy Act
California
August 11, 2025 – Keenan & Associates Data Breach Lawsuit Settled for $14M
A $14 million settlement has been reached to resolve a similar case against Keenan & Associates over an August 2023 data breach. According to court documents, the proposed class action lawsuit detailed on this page has been paused pending final approval of the settlement.
Learn more about the Keenan & Associates data breach settlement.
Looking for current class action lawsuits to join? Check out ClassAction.org’s class action lawsuit list.
Keenan & Associates faces a proposed class action over an August 2023 cyberattack that compromised the personal and medical data of more than 1,500,000 people.
Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.
The 49-page Keenan data breach lawsuit says the insurance consulting and brokerage firm detected “disruptions” on certain network servers on August 27, 2023. According to the amended complaint, a subsequent investigation revealed that an unauthorized third party had gained access to Keenan’s computer systems at various times between roughly August 21 and August 27 and exfiltrated certain data from the network.
Per the suit, the sensitive information compromised in the breach included individuals’ names, dates of birth, Social Security numbers, passport numbers, general health data, driver’s license numbers and health insurance details.
The data breach lawsuit claims the incident stemmed directly from Keenan’s failure to implement and follow “even the most basic” cybersecurity protocols to protect the private information in its care.
To make matters worse, although the company purports to have discovered the cyberattack in August of last year, it waited until late January 2024 to begin notifying victims, the case points out.
As the filing tells it, Keenan’s allegedly negligent actions will have lifelong consequences on affected individuals.
“[The plaintiff] and Class Members face an increased risk of identity theft, phishing attacks, and related cybercrimes because of the Data Breach,” the complaint asserts. “Those impacted are under heightened and prolonged anxiety and fear, as they will be at risk for falling victim to cybercrimes for years to come.”
The lawsuit looks to represent anyone in the United States whose private information was compromised as a result of the Keenan & Associates data breach, including those who were sent notice of the incident on or around January 26, 2024.
Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.
Video Game Addiction Lawsuits
If your child suffers from video game addiction — including Fortnite addiction or Roblox addiction — you may be able to take legal action. Gamers 18 to 22 may also qualify.
Learn more:Video Game Addiction Lawsuit
Kratom 7-OH Lawsuits
Anyone who has used 7-OH kratom products and suffered a serious injury, such as overdose, heart attack or addiction, may be able to take legal action.
Read more: Kratom 7-OH Lawsuits
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.