The security incident occurred around Dec. 27, 2023, and patients were alerted to the breach in April.
According to a class action lawsuit, the surgery center failed to prevent the data breach, which compromised sensitive patient information, including names, Social Security numbers, health insurance information and medical records.
Hapy Bear did not admit any wrongdoing but has agreed to pay an undisclosed sum to resolve the allegations, according to the report.