AACOM $700,000 Data Breach Class Action Settlement

Consumers whose personally identifiable information or personal health information the September 2024 American Association of Colleges of Osteopathic Medicine data breach potentially compromised may be eligible to claim up to $3,500 from a class action settlement.

AACOM agreed to pay $700,000 to settle a class action lawsuit alleging it failed to adequately safeguard sensitive information following a data breach that exposed the personal and health data of approximately 67,804 individuals.

Who can file a claim?

Class members must meet the following criteria:

• They reside in the United States.
• The AACOM data incident discovered in September 2024 potentially compromised their personal information.
• They received notice of the data incident from AACOM.

How much can class members receive?

Class members may be eligible for one or more of the following benefits:

• Compensation for out-of-pocket losses: Up to $3,500 for documented expenses that are most likely related to the data incident. This includes costs for fraud or identity protection services, professional fees, credit repair services and other reasonable expenses incurred between the date of AACOM’s notice and March 4, 2026.
• Alternative cash payment: Instead of claiming out-of-pocket losses, class members can opt for an estimated $50 cash payment. The settlement administrator will determine the final amount on a pro rata basis, depending on the number of valid claims and the net settlement fund remaining after other payments.
• Credit monitoring: 24 months of three-bureau credit and identity theft monitoring, which includes real-time monitoring at all three major credit bureaus, $1,000,000 in identity theft insurance (with no deductible) and access to fraud resolution agents

If the number of claims is high, the settlement administrator may reduce the cash payment per person. The final amount each claimant receives will depend on the total number of valid claims and the net settlement fund after all other payments.

How to claim a class action payment

Class members must complete the online claim form or download, print and complete the PDF claim form then mail it to the settlement administrator. The claim deadline is March 4, 2026.

Settlement administrator's mailing address: In re AACOM Data Breach Litigation, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391

Required proof and documentation

• All class members must provide the class member ID from the settlement notice they received.
• For out-of-pocket loss claims, class members must provide supporting documentation (such as receipts, bills or other records that are not self-prepared) showing the data incident caused the expense.
• For the alternative cash payment and/or credit monitoring, class members only need to certify that they are a class member.

Payout options

• Electronic payment (online claims only)
• Mailed check (default payment)
• Credit monitoring enrollment instructions

$700,000 settlement fund breakdown

The $700,000 settlement fund includes:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $233,333.33
• Attorneys' costs expenses: To be determined
• Service awards to class representatives: $5,000 each ($20,000 total)
• Credit monitoring costs: Dependent on number of valid claims
• Payments to eligible class members: Remainder of the fund after the above costs

Important dates

• Opt-out deadline: Feb. 2, 2026
• Deadline to file a claim: March 4, 2026
• Final approval hearing: March 25, 2026

When is the AACOM data breach litigation payout date?

The settlement administrator will distribute settlement payments and benefits approximately 30 days after the court resolves any appeals and grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit alleged AACOM experienced a data breach in September 2024 when an unauthorized party accessed an employee's email account and obtained the personal and health information of nearly 68,000 individuals. The plaintiffs claimed AACOM failed to adequately protect sensitive information.

AACOM denies any wrongdoing but agreed to settle to avoid the costs and risks of continued litigation.

Sources

1. Class notice
2. Claim form
3. Settlement agreement
4. Settlement FAQ