DAP Health, a California community healthcare provider, agreed to pay US$1.3 million to settle a class-action data breach lawsuit, resolving claims arising from a previous security incident that exposed patient information. Settlements of this size reinforce the financial exposure of health data controllers beyond regulatory penalties and incident-response costs.