Summary

  • A California-based health insurance company whose customer data was posted on the now infamous Breachforums cybercrime community has agreed to settle a related civil lawsuit by paying out $1.5m.
  • The administrator of the site, Conor Brian Fitzpatrick, was arrested and charged with a number of criminal offences in March 2023, shortly after the site appeared.
  • He was sentenced to time served in January 2024, although this was subsequently overturned by a federal appeals court, which has scheduled a new hearing and sentencing for June this year.
  • In the meantime, Fitzpatrick has agreed to settle a related civil lawsuit by forfeiting nearly $700,000.
  • This is believed to be a novel legal outcome, with the former prosecutor in the case saying civil plaintiffs rarely succeed in seizing money from criminal cyber actors.

By BrianKrebs

Original Article