Final Approval was granted on December 29, 2021.


A settlement has been proposed to resolve a lawsuit against UPMC d/b/a the University of Pittsburgh Medical Center and UPMC McKeesport (collectively, “UPMC”) brought by employees impacted by a third‑party criminal cyberattack, which was announced by UPMC in February 2014 and which potentially compromised data relating to roughly 66,000 current and former employees (the “Data Breach”). The lawsuit, referred to as Dittman et al. v. UPMC et al., Case No. GD 14-003285 (Allegheny Cty. Ct. Com. Pl.), asserts claims on behalf of a class of current and former employees of UPMC entities. The employees allege that UPMC was negligent in its handling of sensitive employee data. UPMC denies these allegations, denies any wrongdoing, and denies that it would be found liable in any amount to employees.

Under the Settlement, UPMC will pay $1,679,000 into an escrow account, out of which the Settlement Administrator will make payments to Settlement Class Members. The methods that will be used to distribute these funds to Settlement Class Members are described in detail in this Notice.

In addition, UPMC will pay up to $200,000 to cover the costs of notice and settlement administration. Further, if approved by the Court, UPMC will pay up to $750,000 in fees, costs, and expenses to attorneys for the Settlement Class, and service awards of $3,000 to each of the seven Class Representatives.

Your legal rights are affected whether you act or don’t act. Read this website and the Notice carefully.


Your Legal Rights and Options in This Settlement
Submit a Claim Form and Documentation for Reimbursement of Fraud-Related Losses or Fraud-Related Inconveniences If you experienced fraud or identity theft related to the 2014 UPMC Data Breach, you may file a Claim Form and seek reimbursement of out-of-pocket losses up to a maximum of $5,000, and up to $250 for fraud-related inconveniences you experienced. You must provide documentation to support your claims. The amount you receive will be subject to pro rata reduction if the value of claims made exceeds available funds.
Do Nothing, and Receive Automatic Payment If you are a Settlement Class Member and do nothing, you will receive a cash payment from the Unclaimed Distributions Fund in an amount likely to be between $10 and $20. You will also forfeit your right to sue or bring any claim against UPMC and/or Defendants’ Released Persons related to the 2014 Data Breach.
Exclude Yourself If you ask to be excluded, you will not receive a cash payment, but you may be able to file your own lawsuit against UPMC for the same claims. This is the only option that leaves you the right to file your own lawsuit against UPMC and/or Defendants’ Released Persons for the claims that are being resolved by the Settlement. In order to be effective, a request to be excluded from the Settlement must include all information required by the Settlement.
Object You can remain in the Settlement Class and file an objection telling the Court why you believe the Settlement should not be approved. If your objections are overruled, you will be bound by the Settlement.

These rights and options—and the deadlines to exercise them—are explained on this Website.