SMITH v. APRIA HEALTHCARE LLC

CourtDistrict Court, S.D. Indiana
DecidedJune 5, 2025
Docket1:23-cv-01003
StatusUnknown

This text of SMITH v. APRIA HEALTHCARE LLC (SMITH v. APRIA HEALTHCARE LLC) is published on Counsel Stack Legal Research, covering District Court, S.D. Indiana primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
SMITH v. APRIA HEALTHCARE LLC, (S.D. Ind. 2025).

Opinion

UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF INDIANA INDIANAPOLIS DIVISION LISA SMITH, ) ELISA STROFFOLINO, ) JOEL KAMISHER, ) DOTTIE NIKOLICH, ) SABRINA MUNOZ, ) HILARY FRENCH, ) AMY CLARK, ) REGINALD REESE, ) SONYA ALBERT, ) COLLEEN RICKARD, ) KRISTINA ACCARDO, ) ROGER WINSTANLEY, ) BONNIE BENNETT, ) ) Plaintiffs, ) ) v. ) No. 1:23-cv-01003-JPH-KMB ) APRIA HEALTHCARE LLC, ) ) Defendant. ) ORDER GRANTING MOTION FOR PRELIMINARY CLASS APPROVAL Plaintiffs allege that Defendant Apria Healthcare LLC was the subject of a data breach in 2023 that affected millions of individuals. Plaintiffs have filed a motion for preliminary approval of the class action settlement and release. Dkt. 134. Plaintiffs seek preliminary approval of a proposed settlement agreement and release (the "Settlement Agreement and Release") with Apria Healthcare, certification of the Settlement Class for settlement purposes, preliminary designation of Plaintiffs as class representatives, preliminary appointment of class counsel, preliminary appointment of a settlement administrator, and notice directed to all class members who would be bound by the Settlement Agreement and Release. Id. Apria Healthcare does not oppose the motion. Id. For the reasons stated below, Plaintiffs' motion for preliminary approval, dkt. [134], is GRANTED.

I. Facts and Background On October 23, 2023, Plaintiffs filed its amended consolidated class action complaint. Dkt. 52. In it, Plaintiffs allege that Apria Healthcare, a home healthcare equipment provider, admitted that it suffered a data breach that affected millions of its patients and customers between April and May of 2019 and August and October of 2021 (the "Illegal Hacking Events"). Id. at 7 ¶ 43, 8 ¶ 46; dkt. 134-2 at 6 (Settlement Agreement and Release § 1.21). The Illegal Hacking Events compromised the private information of over 1.8 million Apria Healthcare patients. Dkt. 52 at 8 ¶ 46. This information included "personal, medical, health insurance, and financial information, as well as Social Security numbers." Id. Plaintiffs allege that Apria Healthcare became aware of the Illegal

Hacking Events in September 2021 but did not disclose the breach to customers until May 2023. Id. at 8–9 ¶ 48. Plaintiffs further allege that Apria Healthcare had a duty to adopt reasonable measures to protect Plaintiffs' protected information from involuntary disclosure to third parties. See id. For relief, "Plaintiffs demand that Apria compensate Settlement Class Members for their losses and protect their identities." Dkt. 134-1 at 8. On March 5, 2025, Plaintiffs filed a motion for preliminary approval of class action settlement.1 Dkt. 134. The proposed Representative Plaintiffs are Lisa Smith, Robert N. Herrera, Suzanne Cuyle, Leonardo DePinto, Joel

Kamisher, Debbie Bobbitt, Dottie Nikolich, Sabrina Munoz, Hilary French, Elisa Stroffolino, Amy Clark, Reginald Reese, Rita May, Tammie Creek, Sonya Albert, Paul Kramer, Chad Hohenbery, Colleen Rickard, Kristinia Accardo, Roger Winstanley, and Bonnie Bennett. Dkt. 134-2 at 9–10 (Settlement Agreement and Release § 1.47). The proposed class (the "Class") includes: [A]ll individuals who received actual or constructive notice and/or were mailed a notice by Apria that their information may have been compromised as a result of the Illegal Hacking Events and/or as a result of prior unauthorized access to or disclosure of Protected Information. Excluded from the Settlement Class are: (1) the judges presiding over the Class Action Lawsuit, members of their staff, and members of their direct families; (2) Defendant and any other Releasee; (3) Settlement Class Members who submit a valid Request for Exclusion prior to the Opt-Out Deadline. Id. at 9 (Settlement Agreement and Release § 1.44). Plaintiffs have submitted to the Court a 53-page Settlement Agreement and Release that would resolve their claims against Apria Healthcare. Dkt. 134-2. Some of the critical provisions are: • Apria Healthcare will pay $6,375,000 in cash to settle the claims of the Class. Id. at 10, 12 (Settlement Agreement and Release §§ 1.48, 2.5). • No portion of the Settlement Fund will revert to Apria Healthcare. Id. at 11 (Settlement Agreement and Release § 2.2). • All Settlement Class Members may submit a claim for up to $2,000 for reimbursement of out-of-pocket monetary losses or expenses that 1 The Order incorporates the defined terms set forth in the Settlement Agreement and Release, dkt. 134-2. are fairly traceable to and reasonably resulting from the Illegal Hacking Event. Id. at 12 (Settlement Agreement and Release § 3.1).

• To receive reimbursement for Out-of-Pocket Losses, Settlement Class Members must submit a valid Claim Form (either in paper form or on the Settlement Website) that includes the following: (i) third-party documentation supporting the loss; and (ii) a brief description of the documentation describing the nature of the costs, if the nature of the costs is not apparent from the documentation alone. Third-party documentation can include receipts or other documentation not "self- prepared" by the Settlement Class Member that documents the costs incurred. Id. at 12–13 (Settlement Agreement and Release § 3.2).

• Out-of-Pocket Losses Claim Forms may be submitted at any time on or before the date that is 90 days after entry of the Final Order Approving Settlement and Judgment. Id. at 13 (Settlement Agreement and Release § 3.2).

• After the distribution of the Fee Award and Costs, Notice and Administrative Expenses, Service Award Payments, and Out-of-Pocket Losses or Expenses, the Settlement Administrator will make pro rata cash settlement payments of the remaining Settlement Fund to each Settlement Class Member who submits a valid claim for this benefit. Id. (Settlement Agreement and Release § 4.1).

• Apria Healthcare agreed to make Business Practice Adjustments in the following areas: (i) enhanced cybersecurity training and awareness program, (ii) enhanced data security policies, (iii) enhanced security measures, (iv) further restricting access to personal information, and (v) enhanced monitoring and response capability. Id. at 15 (Settlement Agreement and Release § 7.1).

• If technological or industry developments, or intervening changes in law or business practices render specific Business Practice Adjustments obsolete or make compliance by Apria Healthcare with them unreasonable or technically impractical, Apria Healthcare may modify its business practices as necessary to ensure appropriate security practices are followed. Id. at 15–16 (Settlement Agreement and Release § 7.2).

• All costs associated with implementing the Business Practice Adjustments will be borne by Apria Healthcare separate and apart from the Settlement Fund. Id. at 16 (Settlement Agreement and Release § 7.2). • Within twenty-eight days after the Court grants Plaintiffs' motion for preliminary class approval, Apria Healthcare will provide the Settlement Class List to the Settlement Administrator. Within twenty- one days2 after receipt of the Settlement Class List, the Settlement Administrator will mail and email notices to the Class members. Id. at 16 (Settlement Agreement and Release § 9.1).

• Class members may opt out of the Class by submitting requests for exclusion to the Settlement Administrator up to 60 days after the Notice Deadline. Id. at 17 (Settlement Agreement and Release § 10.1).

• Class members may object to the Settlement Agreement and Release by submitting written objections to the Settlement Administrator up to 60 days after the Notice Deadline. Id. (Settlement Agreement and Release § 10.2).

• The Settlement Administrator must first use the Net Settlement Fund to make payments for Approved Claims for Out-of-Pocket Losses.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

General Telephone Co. of Southwest v. Falcon
457 U.S. 147 (Supreme Court, 1982)
Amchem Products, Inc. v. Windsor
521 U.S. 591 (Supreme Court, 1997)
Ortiz v. Fibreboard Corp.
527 U.S. 815 (Supreme Court, 1999)
Smith v. Sprint Communications Company
387 F.3d 612 (Seventh Circuit, 2004)
Muro v. Target Corp.
580 F.3d 485 (Seventh Circuit, 2009)
Arreola v. Godinez
546 F.3d 788 (Seventh Circuit, 2008)
James Hayes v. Accretive Health, Incorporated
773 F.3d 859 (Seventh Circuit, 2014)
Bell v. PNC Bank, National Ass'n
800 F.3d 360 (Seventh Circuit, 2015)
Retired Chicago Police Ass'n v. City of Chicago
7 F.3d 584 (Seventh Circuit, 1993)
Mulvania v. Sheriff of Rock Island County
850 F.3d 849 (Seventh Circuit, 2017)
Beaton v. Speedypc Software
907 F.3d 1018 (Seventh Circuit, 2018)

Cite This Page — Counsel Stack

Bluebook (online)
SMITH v. APRIA HEALTHCARE LLC, Counsel Stack Legal Research, https://law.counselstack.com/opinion/smith-v-apria-healthcare-llc-insd-2025.