On October 26, 2020, Kalispell Regional Healthcare agreed to a proposed settlement of $4.2 million in the data breach matter of William Henderson, et al., v. Kalispell Regional Healthcare.
The lawsuit began in December 2019, after hackers gained access to several Kalispell employee accounts through a phishing attack in the summer of 2019 that exposed the protected health information (PHI) and other personal data of nearly 130,000 patients. The $4.2 million settlement fund will cover patient financial loses, and Kalispell will offer three years of credit monitoring and five years of identity restoration services for the patients whose social security numbers were stolen as a result of the breach.
