Aspire Health $400,000 Data Breach Class Action Settlement

Current and former patients and other individuals who received a notice from Aspire Health that a September 2023 data breach may have affected their private information could be eligible to submit a claim for up to $2,500 from a class action settlement.

South Shore Mental Health Center Inc., d/b/a Aspire Health Alliance, agreed to pay $400,000 to settle a class action lawsuit related to a cyberattack that potentially exposed sensitive personal and medical information. The data breach impacted more than 17,000 individuals.

Who can file a claim for a data breach payout?

Class members are individuals who received a notice from Aspire Health that the September 2023 data breach may have impacted their personal information.

How much are settlement payments

Class members have the following benefit options:

• Cash payment A – documented losses: Class members can claim up to $2,500 for documented, unreimbursed out-of-pocket losses due to the data breach that occurred between Sept. 13, 2023, and Sept. 16, 2026. Eligible expenses include monetary losses due to identity theft or fraud, costs for freezing and unfreezing credit, credit monitoring costs incurred after receiving the data breach notice, and other expenses, such as mileage and postage for contacting financial institutions.
• Cash payment B – pro rata cash: Class members who do not submit a documented losses claim will receive a pro rata cash payment from the remaining net settlement fund. They do not need to submit a claim form to receive this benefit.
• Medical data monitoring: All class members can elect to receive one year of CyEx Medical Shield. Services include $1 million in medical identity theft insurance and monitoring for health care insurance ID exposure, medical record number exposure and unauthorized health savings account spending. Class members do not need to submit a claim form to receive this benefit.

How to claim a class action rebate

To receive a documented losses settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: Aspire Data Incident Settlement c/o Settlement Administrator P.O. Box 25226 Santa Ana, CA 92799-9958

Class members can submit a payment selection or address update online. Those who select medical data monitoring services can submit an online request to be notified when enrollment codes are available.

The claim deadline is Sept. 16, 2026.

Required proof and claim information

• Class members must provide the login ID and PIN from the settlement notice they received to submit an online claim, address update or payment selection or request medical monitoring enrollment instructions.
• Documented losses claims require supporting documentation, which may include receipts, invoices, bank or credit card statements showing unreimbursed fees or fraudulent charges, and other proof of expenses or identity theft or fraud.

Payout options

• Paper check (only option for mailed claims)
• PayPal
• Venmo
• Zelle

Settlement fund breakdown

The $400,000 settlement fund will include:

• Settlement administration costs: Estimated at $59,272
• Attorneys' fees: Up to $140,000
• Attorneys' expenses: To be presented to the court for approval at a later date
• Service award to class representative: Up to $2,500
• Medical monitoring: Cost determined by the number of enrollments
• Payments to eligible class members: Remaining settlement funds

Important dates

• Opt-out deadline: Sept. 16, 2026
• Deadline to file a claim: Sept. 16, 2026
• Final approval hearing: Oct. 1, 2026

When is the Aspire Health Alliance data breach payout date?

The settlement administrator will issue payments to eligible class members no later than 75 days after the court grants final approval of the settlement.

Why is there a class action settlement?

This class action lawsuit claimed a targeted cyberattack on Aspire Health Alliance's computer systems in September 2023potentially exposed files containing sensitive personal and medical information.

The company denies the allegations but agreed to settle to avoid the expense and risk of further litigation.

Sources

1. Class notice
2. Settlement website FAQ page
3. Settlement claim form
4. Settlement agreement