Brevard Skin and Cancer Center $350K Data Breach Settlement

Individuals who received a notice from Brevard Skin and Cancer Center that a September 2025 data breach may have compromised their private information could be eligible to claim up to $2,500 in reimbursement plus additional benefits from a class action settlement.

Brevard Skin and Cancer Center agreed to settle a class action lawsuit claiming a targeted cyberattack exposed sensitive personal and medical information. The lawsuit alleged the breach compromised data such as names, dates of birth, addresses, Social Security numbers, billing and claims details, diagnosis and clinical information, phone numbers, email addresses and health conditions included in Family and Medical Leave Act forms.

Who can file a claim?

Class members are individuals living in the United States whose private information the September 2025 data breach involving Brevard Skin and Cancer Center potentially compromised and who received a mailed notice of the data incident.

How much can class members get?

Class members have the following benefit options:

• Cash payment for documented losses: Class members who experienced actual, documented out-of-pocket losses due to the data incident can claim up to $2,500. Eligible expenses include losses from identify theft or fraud; fees for credit reports, credit monitoring, or freezing or unfreezing credit; costs to replace IDs; and postage to contact banks by mail.
• Alternate cash payment: As an alternative to documented losses, class members may claim a one-time $45 cash payment.
• Medical data monitoring: One year of CyEx Medical Shield Complete medical data monitoring, including $1 million in medical identity theft insurance and monitoring for health care insurance ID exposure, medical record number exposure and unauthorized health savings account spending. If the program detects suspicious activity, claimants can consult with a fraud resolution agent.

How to claim a settlement payout

Class members can submit the online claim form or download, print and complete the PDF claim form and mail it to the settlement administrator. They may also request a paper claim form by calling, mailing or emailing the settlement administrator.

Settlement administrator's mailing address: BSCC Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

Settlement administrator's email address: info@BrevardSkinDataSettlement.com

Settlement administrator's phone number: 833-360-6880

The claim deadline is Nov. 16, 2026.

Required claim information and proof

• For reimbursement of documented losses, claimants must provide proof, such as bank statements, receipts or other evidence, showing the data breach caused the out-of-pocket expenses. Self-prepared notes or explanations can supplement other proof but are not sufficient by themselves.
• For alternate cash payment claims, no documentation is required. Claimants only need to attest that they are class members.
• For medical data monitoring, no documentation is required.
• For online claims, class members must provide the login ID and PIN they received in their settlement notice.

Payout options

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Physical check mailed to the address provided on the claim form

$350,000 settlement fund breakdown

The $350,00 settlement fund includes:

• Settlement administrator's fees: Amount not specified
• Attorneys' fees and costs: $350,000
• Service awards to class representatives: $2,500 each ($10,000 total)
• Payments to eligible class members: Total determined by number of valid claims filed

Important dates

• Deadline to opt out: Nov. 2, 2026
• Deadline to file a claim: Nov. 16, 2026
• Final approval hearing: Nov. 30, 2026

When is the Brevard Skin and Cancer Center data breach payout date?

The settlement administrator will issue payments and benefits to approved claimants after the court resolves any appeals and grants final approval of the settlement.

Why is there a class action settlement?

A targeted cyberattack on Brevard Skin and Cancer Center’s computer systems in September 2025 potentially exposed sensitive personal and medical information, including names, dates of birth, addresses, Social Security numbers, billing and claims details, diagnosis and clinical information, phone numbers, email addresses and health conditions included in FMLA forms.

The defendant denies any wrongdoing but agreed to settle to avoid the costs and risks of further litigation.

Sources

1. Claim form
2. Class notice
3. Settlement agreement
4. Settlement FAQ