Automated Summary
Key Facts
The United States District Court for the Western District of Kentucky preliminarily approved a $5,275,000 settlement in a class action lawsuit against PharMerica Corporation following a 2023 data breach that exfiltrated 4.7 terabytes of personal information. The settlement includes a non-reversionary fund, reimbursement for documented out-of-pocket expenses up to $10,000 per class member, and one year of Kroll Complete Monitoring. The class comprises all living U.S. persons notified of the data incident, excluding directors/officers, governmental entities, and those who opt out. The court directed Kroll Settlement Administration to manage the notice program and claims process, with a final approval hearing scheduled for May 12, 2026.
Issues
- The court evaluated whether the Settlement Agreement arose from non-collusive, arm's-length negotiations by experienced counsel, a key procedural requirement under Rule 23(e)(2)(A)-(B).
- The court determined if the proposal equitably allocates benefits to all class members, ensuring uniform eligibility for claims, monitoring services, and equitable distribution mechanisms under Rule 23(e)(2)(D).
- The court reviewed the likelihood of certifying the nationwide class under Rule 23(a) (numerosity, commonality, typicality, adequacy of representation) and Rule 23(b)(3) (predominance and superiority), addressing challenges like commonality and typicality in data breach contexts.
- The court verified if the Notice Program, including postcard notices, a settlement website, and toll-free support, complies with the 'best notice practicable' standard, ensuring due process for class members under Rule 23(c)(2)(B).
- The court assessed the adequacy of the relief provided, including pro rata cash payments, up to $10,000 in out-of-pocket expense reimbursement, and Kroll Complete Monitoring, considering litigation risks and distribution methods under Rule 23(e)(2)(C).
Holdings
The court grants preliminary approval of the nationwide class action settlement with PharMerica Corporation, finding it fair enough to proceed with the class-notice process. The settlement includes a $5,275,000 Settlement Fund and a Claims-Made Fund offering up to $10,000 in documented out-of-pocket expenses and one year of credit monitoring per class member.
Remedies
- All Class Members who do not opt out will release PharMerica from all past, present, and future claims related to the Data Incident.
- PharMerica has adopted and will maintain Business Practice Changes to improve information security, as outlined in the Settlement Agreement.
- The Claims-Made Fund provides up to $10,000 in documented out-of-pocket expense reimbursement per Class Member and one year of Kroll Complete Monitoring, which includes credit monitoring, dark web monitoring, fraud consultation, identity theft restoration, insurance coverage, and real-time inquiry alerts.
- The Settlement Fund includes $5,275,000.00 paid by PharMerica, from which pro rata cash payments will be distributed to Class Members after deducting administration costs, data mining expenses, service awards, and attorneys' fees.
- Each of the named Plaintiffs will receive a $3,500 service award as part of the Settlement Agreement.
Monetary Damages
5275000.00
Legal Principles
The court applied Rule 23(e) of the Federal Rules of Civil Procedure to evaluate the class action settlement. This included assessing whether the settlement was 'fair, reasonable, and adequate' under Rule 23(e)(2), as well as considering the Sixth Circuit's traditional factors (e.g., risk of fraud, complexity, likelihood of success on the merits, opinions of counsel, and public interest). The analysis also addressed the procedural requirements for preliminary approval, notice to class members, and the likelihood of class certification under Rule 23(a)-(b).
Precedent Name
- Bowling v. Pfizer
- Calloway v. Caraco Pharm. Lab'ys, Ltd.
- Whitlock v. FSL Mgmt., LLC
- Speerly v. Gen. Motors, LLC
- Beattie v. CenturyTel, Inc.
- Strano v. Kiplinger Washington Eds., Inc.
- In re Countrywide Fin. Corp. Customer Data Sec. Breach Litig.
- McKnight v. Erico Int'l Corp.
- UAW v. GMC
- Senter v. Gen. Motors Corp.
- In re Cinfed Fed. Credit Union Data Breach Litig.
Cited Statute
Federal Rules of Civil Procedure
Judge Name
Rebecca Grady Jennings
Passage Text
- In light of those risks, the Court finds the relief proposed is sufficiently adequate at this stage. Any Class Member who submits a valid claim will receive reimbursement for documented losses up to $10,000, in addition to a pro rata disbursement. Perhaps most importantly, "[a]ll Settlement Class Members will automatically, without having to file a Claim, receive Credit Monitoring, through Kroll Complete Monitoring."
- Plaintiffs have established that the proposed class action likely satisfies the requirements of predominance and superiority under Rule 23(b)(3)... Class action litigation is therefore superior in light of the size of the proposed class and the relatively small amount in dispute per class member.
- The Settlement Class is defined as "all living persons in the United States who were provided notice of the Data Incident." Excluded from the Settlement Class are: [A]ll persons who are directors and officers of Defendant... and the judge(s) assigned to the Action, the Judge's immediate family, and Court staff.