type: incident · created: 2026-09-09 · updated: 2026-09-09 · tags: [incident, settlement, healthcare, ransomware, breach, hipaa] · confidence: high · affected_sectors: [healthcare] · au_impact: false
OneTouchPoint Agrees to Multi-Million Dollar Data Breach Settlement
Wisconsin mailing and printing vendor OneTouchPoint Corp has agreed to settle consolidated class action litigation (Dusterhoft v. OneTouchPoint, Inc.) over a 2022 ransomware attack that encrypted its network and reportedly exposed the data of 2,651,396 individuals, including diagnoses, medications and other protected health information reported to the HHS Office for Civil Rights.
| Attribute | Detail |
|---|---|
| Settlement | Up to US$1.5M legal fees + administration + credit monitoring and monetary benefits (up to $500 ordinary losses; $75 alternative cash) |
| Security investmen | ~US$2M in enhancements maintained for at least 5 years |
| Claims deadline | 16 November 2026 |
| Final approval | 18 November 2026 |
| Source | HIPAA Journal — Tier 2/4 |
The settlement funds credit monitoring and monetary benefits while implementing ~US$2 million in security enhancements maintained for at least five years.