17,000 Montanans’ Medical Records Stolen in Planned Parenthood Cyberattack, Settlement Pays Up to $5,000

HELENA — Over 17,000 Montanans affected by a major cyberattack on Planned Parenthood of Montana can now claim settlement benefits worth up to $5,000, but they must act before key deadlines next year.

The RansomHub ransomware group stole sensitive medical records from 17,309 Montana residents during an August 2024 attack on the healthcare organization’s computer systems, according to the Montana Department of Justice. The breach compromised patients’ names, addresses, medical record numbers, health insurance information, diagnosis details, treatment records, and prescription information.

A proposed class action settlement now offers affected Montanans compensation for documented losses, reimbursement for time spent responding to the breach, and two years of medical data monitoring services.

“We deeply regret that this incident occurred and any concern it may cause you,” Martha Fuller, CEO of Planned Parenthood of Montana, wrote in patient notification letters sent in November.

The Attack

The cyberattack began on August 24, 2024, when the RansomHub ransomware group gained unauthorized access to Planned Parenthood of Montana’s network systems. The organization discovered the intrusion on August 28 and immediately took portions of its network offline to contain the damage.

RansomHub, an organized crime group that emerged in February 2024, claimed responsibility for the attack and threatened to release 93 gigabytes of stolen patient data unless a ransom was paid. The FBI was notified and launched an investigation into the breach.

The ransomware group is known for following through on threats to publish stolen data when ransoms go unpaid. Since its emergence, RansomHub has targeted at least 17 organizations, making it one of the more active ransomware operations currently operating.

Planned Parenthood of Montana completed its investigation on September 6, 2024, confirming that patient files had been accessed and copied during the four-day intrusion. The organization worked with cybersecurity partners throughout the investigation and has since implemented additional security safeguards.

Settlement Benefits

The proposed settlement, which requires court approval, offers three types of compensation to affected individuals:

Medical Data Monitoring: All affected patients can enroll in two years of comprehensive medical data monitoring through CyEx Medical Shield Pro at no cost.

Documented Losses: Patients who can prove they suffered out-of-pocket expenses because of the breach can receive reimbursement up to $5,000. This includes costs for credit monitoring, identity theft recovery, or other documented financial losses.

Lost Time Compensation: Affected individuals can claim up to four hours of their time at $20 per hour, totaling up to $80, for time spent responding to the data breach.

The settlement does not require Planned Parenthood of Montana to admit wrongdoing. The organization “denies all claims and allegations of wrongdoing, and denies all liability,” according to court documents.

Key Deadlines

Affected Montanans face several important deadlines:

• Claims must be filed by January 12, 2026 either online at www.PPMTSettlement.com or by mail
• Objections or requests to exclude from the settlement must be submitted by December 13, 2025
• Court approval hearing scheduled for December 15, 2025 at Yellowstone County District Courthouse

The court will also consider attorneys’ fees of up to $400,000 and $2,500 payments to the lead plaintiffs during the December hearing.

How to File Claims

Affected patients can file claims online at www.PPMTSettlement.com using their Notice ID and PIN numbers provided in settlement notification letters. Those who prefer to file by mail can request paper forms by calling 1-833-417-4890 or emailing [email protected].

The settlement website provides detailed instructions for documenting losses and claiming reimbursement. Patients who did not receive notification letters but believe they may have been affected can contact the settlement administrator for assistance.

Broader Impact

The Planned Parenthood breach represents one of the largest healthcare data security incidents affecting Montana residents in recent years. Healthcare organizations have become frequent targets for ransomware groups because of the sensitive nature of medical records and the critical need to restore systems quickly.

The incident highlights ongoing cybersecurity challenges facing healthcare providers nationwide. Ransomware attacks on healthcare systems increased significantly in 2024, with organized crime groups specifically targeting medical records for their high value on dark web markets.

For affected patients with questions about the settlement, additional information is available at www.PPMTSettlement.com or by calling 1-833-417-4890.