In re OnePoint Patient Care, LLC Data Breach Litigation

Summary

The United States District Court for the Western District of Kentucky preliminarily approved a proposed class action settlement arising from a data breach involving OnePoint Patient Care, LLC. The court certified a settlement class for settlement purposes, appointed class representatives and counsel, approved the notice program, and scheduled a final approval hearing. The settlement provides for a $2,115,000 non-reversionary common fund and releases claims relating to the data incident.

Holdings

1. Preliminary approval was warranted because the parties showed that the court would likely be able to approve the settlement as fair, reasonable, and adequate and certify the settlement class for purposes of judgment.
2. For settlement purposes, the proposed class was likely to satisfy Rule 23(a)'s commonality requirement and Rule 23(b)(3)'s predominance requirement because material elements of each pleaded cause of action could be resolved through common answers.
3. The court would apply Kentucky law to the plaintiffs' tort- and contract-based claims at the preliminary-approval stage.
4. The proposed notice program was approved because notice was justified and satisfied the applicable Rule 23 requirements.

Questions Presented

1. Whether the proposed data-breach class action settlement should receive preliminary approval under Federal Rule of Civil Procedure 23(e).
2. Whether the proposed settlement class was likely to satisfy Rule 23(a) and Rule 23(b)(3), including the commonality and predominance requirements.
3. Whether the proposed notice program satisfied Rule 23(c)(2)(B) and Rule 23(e).
4. Whether Kentucky law should govern the plaintiffs' tort- and contract-based claims at the preliminary-approval stage.
5. Whether the proposed settlement was sufficiently fair, reasonable, and adequate to permit notice and continued settlement proceedings.

Disposition

other