CarePro Health Services $1.3M Data Breach Settlement

Consumers who received a notice stating the 2023 CarePro data incident may have compromised their personal information could be eligible to claim up to $5,000 and/or credit monitoring from a class action settlement.

C.R. Pharmacy Services Inc., doing business as CarePro Health Services, agreed to pay $1.3 million to resolve a class action lawsuit alleging it failed to adequately safeguard sensitive personal and health information, resulting in unauthorized access to patient data.

Who can file a claim?

The settlement class includes all individuals whose personal information the CarePro data incident that occurred on or about Nov. 16, 2023, potentially compromised. The impacted information may include:

• Full names
• Contact information
• Dates of birth
• State-issued identification numbers
• Social Security numbers
• Driver’s license numbers
• Financial account information
• Medical and health insurance information

To be eligible, an individual must have received a notice stating the breach impacted their information.

How much can class members get?

Class members can claim one or more of the following:

• Reimbursement for documented monetary losses: Up to $5,000 per person for out-of-pocket expenses related to the data incident. This can include costs for credit monitoring, unreimbursed losses from fraud or identity theft, bank fees, postage or travel expenses related to mitigating the breach.
• Pro rata cash payment: An estimated $100 per claimant calculated by dividing the remaining settlement funds (after paying administration fees, attorneys’ fees, expenses and documented loss claims) by the number of valid claims
• Credit monitoring and identity theft restoration services: Two years of free three-bureau credit monitoring, dark web monitoring, up to $1 million in identity theft insurance and fully managed identity recovery services.

The settlement fund is non-reversionary, meaning the settlement administrator will distribute any unclaimed funds to claimants or as otherwise directed by the court.

How to claim a class action payment

Eligible class members can submit the online claim form or download, print and complete the PDF claim form and mail it to the settlement administrator. The claim deadline is Dec. 3, 2025.

Settlement administrator's mailing address: CarePro Data Incident Claims Administrator, P.O. Box 1188, Baton Rouge, LA 70821

What proof or documentation is required to submit a claim?

• All claimants must provide the settlement claim ID located on their notice to submit a claim.
• To claim reimbursement for documented monetary losses, class members must provide reasonable documentation supporting their claim. This may include receipts, bank statements or other evidence of out-of-pocket expenses related to the data incident.
• To claim the pro rata cash payment and/or credit monitoring, class members need only select the appropriate option.

Payout options

• Venmo
• Zelle
• Paper check
• Credit monitoring activation code

$1.3 million settlement fund breakdown

The $1,300,000 settlement fund covers:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $433,333.33
• Attorneys' expenses: To be determined
• Service awards to class representatives: Up to $2,500 each
• Payments to eligible class members: Remainder of the fund

Important dates

• Deadline to file a claim: Dec. 3, 2025
• Exclusion deadline: Dec. 3, 2025
• Fairness hearing: Jan. 23, 2026

When is the CarePro settlement payout date?

The settlement administrator will distribute payments approximately 30 days after it approves claims and the court grants final approval to the settlement or 21 days after it approves the claim, whichever is later. 

Why is there a class action settlement?

The class action lawsuit alleged unauthorized individuals accessed CarePro’s computer systems in November 2023, potentially compromising the sensitive personal and health information of approximately 151,499 individuals. The plaintiffs claimed CarePro failed to adequately protect this information, leading to claims of negligence, breach of contract, violation of Iowa consumer protection and data breach laws, and more.

CarePro denies any wrongdoing but agreed to settle to avoid the risks and costs of continued litigation.

Sources

1. Class notice
2. Claim form
3. Settlement agreement
4. Settlement FAQ