Kidney care company pays $900,000 over 2024 patient data theft

Innovative Renal Care, a kidney care company with more than 200 locations in 28 states, has agreed to pay $900,000 to settle lawsuits over a 2024 cyberattack. Hackers copied patient files, including Social Security numbers. If you received a breach letter from the company, you may be able to claim money, but the deadline is December 21, 2026.

What happened

The company, legally named American Renal Management LLC, found the attack on February 29, 2024. Its investigation showed an unauthorized person was inside its network between February 21 and March 1, 2024. Files with patient information were copied during that time.

What was taken

The stolen files held a wide range of personal and health details. The list in the case includes:

• Names, contact information and birth dates
• Social Security and driver's license numbers
• Financial account and health insurance information
• Billing, claims and medical information

Why people sued

Several lawsuits were combined into one case in federal court in Tennessee. Five people are named as plaintiffs. They say the company did not use reasonable security. They also say it waited too long to tell people. Letters began going out on February 14, 2025, almost a year after the intrusion was found. According to the lawsuit, 59,400 living people were notified.

Innovative Renal Care denies all claims and any wrongdoing. Mediation worked, and both sides reached a settlement.

What you can claim

The $900,000 fund pays for attorneys' fees and expenses, the cost of running the settlement, and awards for the people who represented the group. What is left goes to class members. Class members are the people covered by the settlement. Those affected can choose one or both of these:

• Up to $5,000 for documented losses from the breach that were not reimbursed
• A share of the fund, estimated at $100 per person

The $100 figure is only an estimate. It could be higher or lower depending on how many people file claims.

Key dates

• November 20, 2026: last day to opt out or object
• December 21, 2026: deadline to submit a claim
• February 1, 2027: final fairness hearing

The fairness hearing is when the court decides whether to approve the deal. The material does not say where to file a claim or exactly who qualifies, so check your breach letter and any settlement notice you received. People who opt out keep the right to sue on their own but cannot claim a payment.