Credit: Google Maps.
A Willow Grove medical practice, Hypertension Nephrology Associates, has agreed to pay $625,000 to settle a lawsuit after a data breach exposed patient information in early 2024. The lawsuit claimed the practice did not do enough to protect private patient data.
The settlement covers about 39,500 people across the U.S. who were notified that their personal or medical information may have been accessed or stolen during the breach.
If you received a letter or notice about the breach, you are likely included in the settlement. A court has given initial approval to the agreement, but a final decision will be made in February 2026.
People affected by the breach have a few options:
If you spent money because of the data breach—such as paying for credit monitoring, dealing with fraud, or fixing identity theft issues—you can apply to be reimbursed for those costs, up to $5,000, as long as you can provide proof like receipts or phone records.
If you did not have out-of-pocket expenses, you can still apply for a one-time cash payment. The exact amount is not set yet and will depend on how many people apply. The more people who file claims, the smaller each payment will be.
In addition, everyone affected by the breach is eligible for two years of free credit monitoring and identity theft insurance, even if they do not file a claim for money.
To receive money or services, affected individuals must submit a claim form—either online or by mail—by January 20, 2026. Instructions and details are available on the official settlement website at HNADataSettlement.com, using the claim ID included in the notice sent to patients.
The lawsuit alleged that hackers were able to access the medical practice’s computer network and that the breach was only discovered after employees found a ransom note on their system. It also claimed the practice took too long to notify patients and did not do enough to help them after the breach.
If the court gives final approval in February 2026 and there are no appeals, payments and benefits will be sent out afterward.
