Banner Health agrees to $6M settlement to resolve 2016 data breach lawsuit

The class action lawsuit was filed in August 2016 on behalf of close to 3 million individuals affected by the data breach. Hackers initially attacked Banner’s network through its payment processing system at food and beverage outlets, then ultimately gained access to servers that contained patient data.

According to court documents, plaintiffs in the case allege that “financially-motivated cyber-criminals entered Banner’s network, rummaged through Banner’s information systems, downloaded and installed hacking software, and copied and exfiltrated massive quantities of personally identifiable information belonging to approximately 2.9 million people.”