$7.5M Enzo Biochem Settlement Aims to Resolve Data Breach Lawsuit Over April 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Enzo Biochem, Inc. and Enzo Clinical Labs, Inc. have agreed to pay a $7.5 million settlement that, if approved by the court, will resolve a consolidated class action lawsuit over an April 2023 cyberattack.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

If approved, the proposed Enzo Biochem data breach settlement will cover a class of approximately 2,069,627 United States residents whose personal information was potentially compromised in the incident and who received notice from Enzo Biochem informing them that their data may have been exposed.

According to the lawsuit against Enzo Biochem, negligent data security on the part of the biotechnology company was to blame for the cyberattack, during which a threat actor gained unauthorized access to Enzo’s network and exfiltrated sensitive patient information including names, medical records and Social Security numbers.

Related Reading: Enzo Clinical Labs Facing Class Action Over 2023 Data Breach Impacting 2.5M Patients

The plaintiffs filed an unopposed motion and memo outlining the terms of the $7,500,000 deal with Enzo Biochem on January 14, 2025. It is now up to the court to decide whether to grant preliminary approval to the settlement agreement.

If the deal is initially approved, only class members who submit a timely, valid claim form by mail or online through the settlement website will be eligible to receive benefits, the agreement says.

ClassAction.org will update this page if and when the official Enzo Biochem settlement website is launched.

Per the settlement agreement, class members who file a valid claim form may be entitled to receive up to $10,000 per person for out-of-pocket expenses that are reasonably related to the data breach and supported by documentation.

Consumers may also submit a claim for a pro-rated cash payout, the document shares. Individual payment amounts will depend on the total number of valid claims that are filed, the agreement adds.

In addition to reimbursement for out-of-pocket losses or a cash payout, all class members are entitled to receive two years of credit monitoring and insurance services, the document states.

As part of the deal, Enzo Biochem has also agreed to significantly enhance its cybersecurity to prevent future incidents and better protect consumers’ personal information, the agreement relays.

Per the document, notice of the Enzo Biochem class action settlement will be issued to eligible class members within 45 days following preliminary approval of the deal. Consumers will then have 90 days from the date of mailing to submit a claim for Enzo settlement benefits, the agreement says.

In August 2024, Enzo Biochem paid $4.5 million to New York, New Jersey and Connecticut over the April 2023 data breach.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.