Bone & Joint Clinic $575,000 Data Breach Settlement

Patients and employees who received a notice stating their private information may have been compromised in the January 2023 Bone & Joint Clinic data incident may qualify to claim documented losses or a pro rata payment from a class action settlement.

Bone & Joint Clinic S.C. agreed to pay $575,000 to resolve a class action lawsuit alleging it failed to adequately protect patient and employee data, resulting in a ransomware cyberattack that exposed sensitive personal and health information.

Who can file a Bone & Joint Clinic claim?

Class members must meet all of the following criteria:

• They reside in the United States.
• Their private information was potentially impacted by the January 2023 Bone & Joint Clinic data breach.
• They received a notification via mail by or on behalf of Bone & Joint Clinic regarding the incident.

The private information potentially exposed in the incident includes:

• For patients: names, dates of birth, Social Security numbers, driver’s license numbers, home addresses, phone numbers, health insurance information and diagnosis and treatment information
• For employees: names, addresses, phone numbers, dates of birth and Social Security numbers and potentially driver’s license numbers, state ID numbers or passport numbers, as well as information about spouses, dependents and beneficiaries

How much can class members get?

• Out-of-pocket losses: Class members can claim reimbursement for documented expenses or losses that are most likely traceable to the data incident up to a maximum of $5,000 per person. Eligible expenses include but are not limited to:
• Costs for credit monitoring or credit reports
• Late fees, declined payment fees, overdraft fees, returned check fees, customer service fees and card cancellation or replacement fees
• Fees from transactions delayed due to fraud or card replacement
• Unauthorized and unreimbursed charges on payment cards
• Transportation expenses for trips to financial institutions to address fraudulent charges or obtain replacement cards
• Costs incurred for credit freezes
• Other unreimbursed expenses reasonably attributable to the data incident

• Pro rata cash payment: After all valid out-of-pocket loss claims, attorneys’ fees, litigation expenses, service awards and administrative costs are paid from the $575,000 settlement fund, the remaining funds will be divided equally among all class members who submit a claim for the pro rata cash payment. The estimated payment is $75, but this amount may be higher or lower depending on the total number of claims and the amount remaining in the fund.

How to claim a class action payment

Class members can submit the online claim form or download, print and complete the PDF claim form and mail it to the settlement administrator. The deadline to submit a claim is Oct. 15, 2025.

Settlement administrator's mailing address: Bone & Joint S.C. Settlement Administrator, P.O. Box 2568, Portland, OR 97208-2568

What information is needed to submit a claim?

• Online claimants must provide the unique ID and PIN from the postcard notice they received in the mail. Those who did not receive a postcard notice or lost it should contact the settlement administrator at info@bonejointsettlement.com for assistance.
• For out-of-pocket losses, claimants must provide documentation, such as receipts, account statements or official correspondence, to support their claimed losses. Self-prepared documents are not sufficient by themselves but can be included as clarification.
• For the pro rata cash payment, claimants need to select the appropriate box.

Payout options

Class members who provide a valid email address will receive instructions to select their payment method, which includes Venmo, ACH, PayPal or paper check. Those who do not provide a valid email will receive a paper check.

$575,000 settlement fund breakdown

The $575,000 settlement fund includes:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $191,475
• Attorneys' expenses: Up to $20,000
• Service awards to class representatives: Up to $2,000 each
• Payments to eligible class members: Remainder of the fund

Important dates

• Deadline to opt out: Sept. 15, 2025
• Deadline to file a claim: Oct. 15, 2025
• Final approval hearing: Jan. 7, 2026

When is the Bone & Joint Clinic settlement payout date?

Payments will be distributed after the court grants final approval of the settlement and any appeals are resolved.

Why was there a class action settlement?

The class action lawsuit alleged Bone & Joint Clinic S.C. failed to adequately protect private information, leading to a ransomware cyberattack in January 2023. The plaintiffs claimed the company was responsible for the breach and sought compensation for negligence, breach of fiduciary duty, violations of Wisconsin statutes regarding patient records and data breach notification and other claims.

Bone & Joint Clinic denies any wrongdoing but agreed to settle to avoid the burden and expense of litigation.

Sources

1. Class notice
2. Settlement agreement
3. Settlement FAQ