Centrelake Medical Group Data Breach Class Action Settlement

Patients of Centrelake Medical Group Inc. who received a data breach notification letter on or about April 16, 2019, may qualify to submit a claim for up to $4,050 in cash payments plus two years of free credit monitoring and identity theft protection from a class action settlement.

Centrelake Medical Group agreed to settle a class action lawsuit alleging it failed to adequately protect patient data during a ransomware attack. The data breach occurred in early 2019 when cybercriminals allegedly bypassed Centrelake's cybersecurity systems and potentially accessed sensitive personal information, including names, dates of birth and Social Security numbers.

Who can file a claim?

Class members must meet the following criteria:

• They are or were patients of Centrelake Medical Group Inc.
• Centrelake sent them a data incident notification letter on or about April 16, 2019, by email or mailed postcard.

How much is the class action settlement payout?

Class members can claim one or more of the following benefits:

• Out-of-pocket expenses: Class members can claim reimbursement for documented expenses up to $500. Under this cap, they can claim up to three hours of lost time spent dealing with the data incident at $20 per hour ($60 total). The expenses must have occurred between April 16, 2019, and Oct. 30, 2025.
• Extraordinary losses: Class members can claim up to $3,500 for documented, unreimbursed losses the data incident most likely caused. Eligible losses include unreimbursed identity theft losses and costs to repurchase medical services Centrelake originally provided by within 12 months prior to the data incident. The losses must have occurred between April 16, 2019, and Oct. 30, 2025.
• California residents with proof of medical information viewing: California residents can receive an additional $50 payment if they can provide documentation of identity theft or misuse of their information.
• Credit monitoring: All class members can enroll in two years of CyEx Medical Shield Complete credit monitoring and identity theft protection at no cost. The service includes real-time credit file monitoring, dark web scanning and comprehensive public records monitoring.

How to claim a Centrelake Medical Group class action settlement payment

To claim settlement benefits, class members can file a claim online or download, print and complete a PDF claim form to mail to the settlement administrator. The claim deadline is June 12, 2026.

Settlement administrator's mailing address: Centrelake Data Incident Settlement, c/o Claims Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

Required proof and claim information

• For all claims, class members must provide their notice ID and contact information on the claim form.
• For out-of-pocket expenses and extraordinary losses claims, class members must provide supporting documentation, which may include receipts, account statements or other proof showing the data incident caused the expense or loss. Self-prepared documents alone are not sufficient but may supplement other documentation.
• For lost time claims, class members must provide a written description of activities performed, which may include monitoring accounts, speaking with financial or medical institutions or other related tasks.
• For the $50 California resident payment, class members must provide proof of identity theft or misuse of medical information related to the data incident.

Payout options

• Physical check
• Electronic payment

Centrelake Medical Group settlement breakdown

• Settlement administration costs: To be determined
• Attorneys' fees and costs: Up to $525,000
• Service awards to class representatives: $7,500 total
• Credit monitoring costs: Determined by number of claims filed
• Payments to eligible class members: Determined by number of claims filed

Important dates

• Opt-out deadline: Jan. 28, 2026
• Deadline to file a claim: June 12, 2026
• Final approval hearing: July 14, 2026

When is the Centrelake Medical Group settlement payout date?

The settlement administrator will mail checks approximately 21 days after the court resolves any appeals and grant final approval to the settlement or within 30 days of claim approval, whichever is later. It will activate credit monitoring services approximately 30 days after the court resolves any appeals and grant final approval to the settlement.

Why did this class action settlement happen?

The class action lawsuit alleged Centrelake Medical Group failed to adequately protect patient data during a ransomware attack in early 2019. Plaintiffs claim cybercriminals bypassed Centrelake's cybersecurity systems and potentially accessed sensitive personal information, including names, dates of birth and Social Security numbers.

Centrelake Medical Group denies any wrongdoing but agreed to settle to avoid the costs, risks and uncertainties of continued litigation and to provide benefits to those affected.

Sources

1. Class notice
2. Claim form
3. Settlement FAQ