ECL Privacy Breach Litigation

Payments in this matter were sent on December 13, 2024. Individuals eligible for payments will have received a notification email providing further information on how to claim their payment.

If you received an email from noreply@epiqpay.com, it is because you were determined to be eligible for a payment in a class action settlement. By default, individuals eligible for payments will receive a prepayment notification email a few days before they receive an email containing a link to claim their payment. This is normal. If you claim a payment, you will also receive one or more follow up emails from our payment partner, Tremendous, confirming where your payment is at in the process. Upon making your selection the payment portal will inform you when you should expect to receive your payment confirmation email from Tremendous. You should rely on the follow up email you receive from Tremendous to inform you of the timing of your payment. If you do not immediately claim your payment, you may also receive one or more reminder emails.

All EpiqPay payment and reminder emails contain a ‘Claim Payment’ link. As long as you click the ‘Claim Payment’ link before the payment expiry date listed in your email, the link will take you to a payment dashboard where you can choose your preferred method of payment. Then click your preferred payment method. Depending on the method of payment you choose, you may be asked to confirm your selection or provide one or two pieces of information so your payment can be processed. After that, you will receive a small number of interim notifications from our payment partner rewards@tremendous.com letting you know your payment is ‘in process’, and eventually you will receive a link to your payment card, if you chose that as your option. Contact information for our payment partner is available on these notifications, in case you experience any issues using your card.

Valid Claims were paid as follows:

Patient Settlement Class. At the conclusion of the claims period, the Patient Settlement Fund (after deducting its share of Administration Expenses, Class Service Awards, and Attorneys’ Fees) was paid to members of the Patient Settlement Class who submitted a Valid Claim for out-of-pocket expenses up to $5,000 with the remainder divided equally between all valid claimants of the Patient Settlement Class. The Claims Administrator made the final determination about the validity of any claim.

Physician Settlement Class. At the conclusion of the Claims Period, the Physician Settlement Fund (after deducting its share of Administration Expenses, Class Service Awards, and Attorneys’ Fees) was divided equally between all valid claimants of the Physician Settlement Class. The Claims Administrator made the final determination about the validity of any claim.

The digital payment options presented to you when you click ‘Claim Payment’ in your EpiqPay email are the only options available to you under this settlement. If none of the options presented to you on the selection screen are of interest to you, a paper check option may be available for this settlement. Please note that the deadline to request a paper check reissue is February 11, 2025, and the process can take 4-6 weeks to complete.

To request your payment as a paper check by mail please mail your request to:

ECL Settlement Administrator
P.O. Box 2630
Portland, OR 97208-2630

Include your name, your email addresses, your current mailing address information, and a signed request to reissue your payment as a paper check. Reissue requests can take up to 6 weeks to process after receiving your written request, so please be patient while we complete the reissue process.

Please note that it is possible you may receive an EpiqPay reminder email to claim your payment even after submitting your reissue request. You are free to disregard this email. You are of course welcome to contact us any time to confirm the status of your reissue request.

All reissue requests must be sent in writing to the Claims Administrator by February 11, 2025.

To request your check be reissued please mail your request to:

ECL Settlement Administrator
P.O. Box 2630
Portland, OR 97208-2630

Your request should include your name, your email addresses, your current mailing address information, and a signed request to reissue your check. If possible, please also include the check you are requesting be reissued.

If the name of the Class Member on the check should be changed, please send in documentation, as applicable, according to the following checklist:

• Name Change – If your name has changed, please provide documentation showing this to be the case, which can include documents such as a marriage certificate or court papers indicative of a name change.
• Name Removal – In order to have a name removed from a check reissue, either have both parties on the check sign a letter and return the check or return the check with documentation that shows that one party is unable to negotiate the check (i.e. death certificate).
• Deceased Class Member – If the Class Member indicated on the check is deceased, please submit acceptable documentation showing that you are the beneficiary of his or her Estate. Acceptable documentation may be a death certificate, together with the pertinent portion of the Will, or Court Order/Letters Testamentary naming you as Personal Representative, Administrator, Executor, or Executrix.
• Incapacitated Class Member– If the claimant cannot act on his or her own behalf, acceptable documentation is a Power of Attorney, or guardianship or custodial paperwork.
• Closed Business – If business is no longer active, please provide documentation of the business closure or asset sale.

For reasons of security, a check reissue cannot take place until either the original check is received back by us, a mailing has been returned to us as undeliverable, or until the original stale date of the check has passed or expired.

Because one of these events must occur before we can act on your request, it is not possible for us to provide an estimated date for the reissue to take place. We thank you for your patience.

The Honorable Catherine Eagles of the United States District Court for the Middle District of North Carolina is presiding over this class action. The cases settled are known as:

• Alliance Ophthalmology, PLLC v. ECL Group, LLC, Case No. 1:22-CV-00296; and
• Farley v. Eye Care Leaders Holdings, LLC, Case No. 1:22-CV-00468; Jeanne Byers v. ECL Group LLC, Case No. 22-cv-607; Detrina Solomon v. ECL Group LLC, Case No. 22-cv-526; Forrester v. Eye Care Leaders Holdings LLC, Case No. 22-cv-503; and Sandvig v. Eye Care Leaders Holdings LLC, Case No. 22-cv-502.

The cases are combined into a single Settlement (also sometimes referred to in the Notice and on this website as the “ECL Litigation”). The persons who filed the lawsuits are together called the “Settlement Classes,” which include the “Patient Settlement Class” and the “Physician Settlement Class.” The companies sued (ECL Group, LLC, ECL Holdings, LLC, Eye Care Leaders Holdings, LLC, Eye Care Leaders Portfolio Holdings, LLC, Integrity EMR, LLC, Integrity Holdings, LLC, Alta Billing, LLC, and Alta Billing Holdings, LLC) are called the “Defendants” or, as defined herein, “ECL.”

The Patient Settlement Class claims that the Data Breach potentially exposed patients’ health information, including their names, birth dates, medical record numbers, health insurance information, Social Security numbers, and medical care information. The Patient Settlement Class alleges, among other things, that Defendants were negligent in the maintenance of data, which resulted in the Data Breach that potentially exposed the Patient Settlement Class’s personal health information and invaded their privacy. The Patient Settlement Class also alleges that ECL concealed the Data Breach from the public, including its customers and their patients. The Patient Settlement Class claims that it incurred damages as a result of Defendants’ actions.

The Physician Settlement Class claims that ECL concealed the Data Breach for weeks, misrepresented what truly happened, misrepresented when service would be restored (to encourage members of the Physician Settlement Class to not move to new service providers), overcharged them under their contracts, and refused to provide patient data after repeated demands. The Physician Settlement Class also alleges that Defendants breached their contracts, were negligent in the maintenance of data, committed fraud, defamed Physician Plaintiffs, and engaged in unfair and deceptive trade practices stemming from the Data Breach, which impacted the Physician Settlement Class’s practices and potentially exposed patient data. The Physician Settlement Class claims that it incurred damages as a result of Defendants’ actions.

The Patient Settlement Class’s and Physician Settlement Class’s operative complaints are both available on the Documents page of this website.

Defendants deny all claims asserted in the ECL Litigation, deny all allegations of wrongdoing and liability, and deny all other material allegations. By entering into the Settlement, the Defendants are not admitting any wrongdoing.

In a class action, plaintiffs (here, Alliance, DRC, TEC, and Hofacre for the Physician Settlement Class; and Kimberly Farley, Chad Forrester, Kimberly Sandvig, Detrina Solomon, and Jeanne Byers for the Patient Settlement Class) sue on behalf of all people who have similar claims. Together, all these people are called a Settlement Class or Settlement Class Members. One court resolves the issues for all Settlement Class Members.

The Settlement Classes and Defendants do not agree about the legal claims asserted in the ECL Litigation. The Court has not decided in favor of the Settlement Classes or the Defendants. Instead, the Settlement Classes and Defendants have agreed to settle the ECL Litigation. The Settlement Classes and their attorneys (“Class Counsel”) believe the Settlement is in the best interests of the members of the Settlement Classes because of the benefits of the Settlement and the risks and uncertainty associated with continued litigation.

You are included in the Settlement if you fall within the following definitions:

The “Patient Settlement Class” means all individuals residing in the United States whose Personally Identifiable Information or Protected Health Information was compromised in the Data Breach affecting one or more Defendants, including all persons who received notice about the Data Breach.

The “Physician Settlement Class” includes the iMedicWare Class, myCare Integrity Class, MVE Class, and Revenue Cycle Management Class. They are each described as follows:

1. “iMedicWare Class” means all persons and entities who contracted with one or more Defendants for EMR management services using the iMedicWare software, and who have suffered Outages for any period of time since January 1, 2019, due to ransomware attacks or any other reasons.
2. “myCare Integrity Class” means all persons and entities who contracted with one or more Defendants—and received services from Integrity EMR, LLC and Integrity Holdings, LLC—for EMR management services using the myCare Integrity software, and who have suffered Outages for any period of time since January 1, 2019, due to ransomware attacks or any other reasons.
3. “MVE Class” means all persons and entities who contracted with one or more Defendants for EMR management services using the MyVisionExpress software, and who have suffered Outages for any period of time since January 1, 2019, due to ransomware attacks or any other reasons.
4. “Revenue Cycle Management Class” means all persons and entities who contracted with one or more Defendants—and received services from Alta Billing, LLC and Alta Billing Holdings, LLC—for revenue cycle management services who have received delinquent revenue cycle services for any period of time since January 1, 2019 and/or whose transaction information was potentially compromised from ransomware attacks or any other reasons.

If you are still not sure whether you are a member of the Settlement Classes, you may call the Settlement Administrator’s toll-free telephone number at 1-877-328-5803. You may also contact Class Counsel listed in FAQ 17 below.

As final approval of the settlement has been granted, two settlement funds have been created, both funded by the Defendants’ insurance policies.

Patient Settlement Class - A “Patient Settlement Fund” of at least $2,616,783 has been funded. Members of the Patient Settlement Class will be able to file claims for documented out-of-pocket expenses incurred because of the Data Breach up to $5,000. Members of the Patient Settlement Class may also file a Claim for a pro rata (equal share) cash payment, with the amount to be paid depending on the number of Valid Claims received.

Physician Settlement – Patient Class Members have agreed to release any potential claims against members of the Physician Settlement Class related to the Data Breach.

A “Physician Settlement Fund” of $1,460,449.50 has also been funded and, after deducting costs of the settlement administrator and attorneys’ fees approved by the court, distributed evenly to valid claimants of the Physician Settlement Class. Defendants will deposit any additional funds that become available through insurance coverage into the Physician Settlement Fund, up to $9,500,000, inclusive of the initial payments.

In addition to the Settlement Funds, Defendants will provide billing credits with a total potential value of $5,739,500 to eligible members of the Physician Settlement Class, as described in the next section.

Along with these benefits, Defendants have agreed to not collect, and cease all collection efforts related to, any unpaid invoice for a month in which there was a service outage as alleged in the Physician Settlement Class’s Second Amended Complaint.

Moreover, as a result of the settlement, members of the Physician Settlement Class may terminate their contracts with Defendants without penalty and Defendants shall help provide them with data and provide reasonable efforts to assist with transition to a new provider.

Billing credits are available as follows:

myCare Integrity Class: Defendants will provide a $3,500 credit for each member of the myCare Integrity Class who 1) did not previously receive a credit of equal or greater value, and 2) held a full-time physician license with Defendants at any point in April and May 2023. Defendants will further provide a $1,750 credit to each member of the myCare Integrity class who 1) did not previously receive a credit of equal or greater value, and 2) held a part-time physician license with Defendants at any point in April and May 2023. The amount of credit owed to each member will be offset, dollar-for-dollar, by any credits that have already been provided in connection with the Data Breach. The potential value of these credits is $3,006,500. Defendants will provide these credits to each Claimant within one year of the date the Settlement Administrator determines that it has a Valid Claim.

iMedicWare Class: Defendants will provide a $1,000 credit for each member of the iMedicWare Class who 1) did not previously receive a credit of equal or greater value, and 2) held a full-time physician license with Defendants at any point in April and May 2023. Defendants will further provide a $500 credit to each member of the iMedicWare class who 1) did not previously receive a credit of equal or greater value, and 2) held a part-time physician license with Defendants at any point in April and May 2023. The amount of credit owed to each member will be offset, dollar-for-dollar, by any credits that have already been provided in connection with the Data Breach. The potential value of these credits is $1,714,500. Defendants will provide these credits to each Claimant within one year of the date the Settlement Administrator determines that it has a Valid Claim.

MyVisionExpress Class: Defendants will provide a $350 credit for each member of the MyVisionExpress Class who 1) did not previously receive a credit of equal or greater value, and 2) held a full-time physician license with Defendants at any point in April and May 2023. Defendants will further provide a $175 credit to each member of the MyVisionExpress class who 1) did not previously receive a credit of equal or greater value, and 2) held a part-time physician license with Defendants at any point in April and May 2023, at an amount proportional to that of the full-time physician licensees. The amount of credit owed to each member will be offset, dollar-for-dollar, by any credits that have already been provided in connection with the Data Breach. The potential value of these credits is $1,018,500. Defendants will provide these credits to each Claimant within one year of the date the Settlement Administrator determines that it has a Valid Claim.

The billing credits are not available if:

• you are a Patient Class Member;
• you are exclusively a member of the Revenue Cycle Management Class;
• your contract(s) with one of the Defendants was terminated before April 2023; or
• Defendants have already provided you a billing credit in an amount that exceeds the amount of the available credit under the Settlement, as described above.

In short, (1) members of the Patient Settlement Class release any potential claim against Defendants or members of the Physician Settlement Class related to the Data Breach, and (2) members of the Physician Settlement Class release any potential claim against Defendants related to the Data Breach. The Patient Settlement Class and Physician Settlement Class do not release any claims unrelated to the Data Breach or ECL Litigation.

The Settlement Agreement in Sections 2.30, 2.31, 2.32, and 7.1-7.6 describes the Release, Released Claims, and Released Parties in necessary legal terminology, so please read these sections carefully. The Settlement Agreement is available here on this website or in the public Court records on file in the ECL Litigation. For questions regarding the Releases or Released Class Claims and what the language in the Settlement Agreement means, you can also contact one of the lawyers listed in Question 17 of the Notice (and FAQ 17 below) for free, or you can talk to your own lawyer at your own expense.

The claim filing deadline has passed.

Your Claim Form was required to have been filed with the Settlement Administrator, postmarked or Submitted online on or before 11:59 pm on July 24, 2024.

If you change your mailing address or email address after you submit a Claim Form, it is your responsibility to inform the Settlement Administrator of your updated information. You may notify the Settlement Administrator of any changes through this website, here, or by email to Address-Update@ECLSettlement.com.

Yes, the Court has appointed Russ Ferguson, Matthew Tilley, and Patrick Spaugh of Womble Bond Dickinson (US) LLP as counsel for the Physician Settlement Class (“Physician Class Counsel”). The Court has appointed Gary M. Klinger of Milberg Coleman Bryson Phillips Grossman, PLLC, Jean S. Martin of Morgan & Morgan Complex Litigation Group and Gary E. Mason of Mason LLP as counsel for the Patient Settlement Class (“Patient Class Counsel”). The Physician Class Counsel and Patient Class Counsel (together, “Class Counsel”) represent you and the Settlement Classes for the purposes of this Settlement. You may hire your own lawyer at your own cost and expense if you want someone other than Class Counsel to represent you in the ECL Litigation.

The Court has awarded Physician Class Counsel a Fee Award of approximately 33% of the Physician Settlement Fund. The Court has awarded Patient Class Counsel a Fee Award of approximately 33% of the Patient Settlement Fund.

The Court has also approved “Class Service Awards,” which are Court-approved awards to specific members of the Settlement Classes, including the named plaintiffs, for their efforts in bringing the claims at issue in the ECL Litigation and achieving the benefits of this Settlement on behalf of the Settlement Classes. For the Physician Settlement Class, the service awards are $40,000 each to Alliance, DRC, and TEC, $20,000 to Hofacre, and $10,000 each to Shulkin Eye Associates, Gorden Eye Associates PA, Regional Eye Associates, Inc., Eye Associates, LLC, and SurgiCenter of Vineland Holdings, LLC, paid from the Physician Class Settlement Fund. For the Patient Settlement Class, the service award is $1,000 each to Plaintiffs Kimberly Farley, Chad Forrester, Kimberly Sandvig, Detrina Solomon, and Jeanne Byers.

No. Because insurance proceeds are Defendants’ only assets available to satisfy the claims of all the members of the Settlement Classes and the alleged damages exceed the available insurance proceeds, the Court certified the Settlement Classes under Rule 23(b)(1)(B). That rule allows for certification of a class when there is a limited fund available to satisfy all claims. As a result, under Rule 23(b)(1)(B), class members cannot “opt out” or request exclusion from the Settlement Classes because doing so would jeopardize the fair and equitable distribution of the limited fund available.

Practically, this means that the Settlement and the Release of claims applies to everyone who is a member of the Settlement Classes, and you cannot request to be excluded to maintain your right to file a lawsuit or bring action against Defendants for claims related to the Data Breach.

The Court held a Final Approval Hearing on June 24, 2024, at 10:00 a.m. EST, before the Honorable Catherine Eagles, at the L. Richardson Preyer Courthouse for the United States District Court for the Middle District of North Carolina, located at 324 W. Market Street, Greensboro, NC 27401-2544.

At this hearing, the Court considered whether the Settlement was fair, reasonable, and adequate, and decided to approve the Settlement, Class Counsel’s application for attorneys’ fees and costs and expenses, and the Service Awards.

If you are a member of the Patient Settlement Class who did nothing, you will not receive a settlement benefit.

If you are a member of the Physician Settlement Class who did nothing, you will receive the benefit of the release by the Patient Settlement Class, the cessation of collection efforts by Defendants as outlined above, and the ability to terminate contracts with Defendants without any penalty and to receive assistance in transitioning to a new vendor.

Whether you have done anything or not, the Settlement still will resolve all of the allegations in the Complaints and release all claims you may have against the Released Persons (including the Defendants) regarding the Released Class Claims in the ECL Litigation.

This website summarizes the Settlement. Complete details are provided in the Settlement Agreement. The Settlement Agreement and other related documents are available on this site here or by calling 1-877-328-5803 or by writing to:

ECL Settlement Administrator
P.O. Box 2630
Portland, OR 97208-2630

PLEASE DO NOT TELEPHONE THE COURT OR THE COURT’S CLERK OFFICE REGARDING THIS SETTLEMENT.