Settlements have been reached to resolve class action data breach litigation against Palomar Health Medical Group in California and Summit Medical Group in Tennessee. Palomar has agreed to establish a $3,100,000 settlement fund over a Spring 2024 intrusion affecting the protected health information of 1,140,221 individuals, from which attorneys' fees, administration costs and class representative service awards will be deducted.
| Attribute | Detail |
|---|---|
| Palomar Health | $3.1m settlement fund; 1,140,221 individuals affected |
| Intrusion window | 23 April – 5 May 2024 (identified 5 May 2024) |
| Data categories | Names, contact details, dates of birth, SSNs, driver's licence and state ID numbers, medical histories, health information, health insurance information |
| Claimed causes | Negligence, negligence per se, invasion of privacy, CCPA, California CMIA, California Customer Records Act |
| Reported | 2026-09-10 |
All claims and contentions were denied by Palomar Health Medical Group, but all parties agreed to settle to avoid the costs and risks of continued litigation. The consolidated complaint, Castro et al. v. Arch Health Partners, Inc. d/b/a Palomar Health Medical Group, is pending in the Superior Court for the State of California, County of San Diego. A separate settlement resolves litigation against Summit Medical Group.