The Premera Blue Cross data breach lawsuit, which alleges that due to Premera's practices, cyberattackers were able to gain access to the personal information of 10.6 million individuals, including names, addresses, dates of birth, Social Security numbers, protected health information, telephone numbers, and the names of employers, has been settled.

In July, the Honorable Michael H. Simon, of United States District Court for the District of Oregon, granted preliminary approval of the settlement agreement signed. Premera has agreed to pay $74 million to resolve the litigation; $42 million to improve data security and $32 million to pay for an additional two years of premium credit monitoring and identity protection services, out-of-pocket losses, cash payments to all class members who make a claim, administrative and notice costs related to the settlement, and attorneys’ fees and costs, says the Tousley Brain Stephens law firm.

According to the Tousley Brain Stephens law firm, class members are entitled to:

1. up to $10,000 per Class Member for reimbursement of out-of-pocket loses plausibly traceable to the Data Breach, including up to 20 hours of personal time at $20 per hour
2. payment of approximately $50 for Class Members who do not have out-of-pocket loses
3. payment of an additional $50 for Class Members who resided in California as of March 17, 2015 
4. two years of credit monitoring and insurance services.

The hearing for final approval of the settlement is scheduled for March 2, 2020. Premera is not admitting any wrongdoing or that any individuals were harmed because of the cyberattack, according to a press release.