.png)
Consumers who received a notification from the Rhode Island Public Transit Authority stating their personal information may have been compromised in a ransomware attack may qualify to claim up to $7,500 from a class action settlement.
Rhode Island Public Transit Authority and United Healthcare of New England agreed to pay up to $375,000 to settle a class action lawsuit alleging they failed to adequately protect personal information, leading to a data breach affecting thousands of individuals.
Who can file a Rhode Island Public Transit Authority claim?
Class members must meet the following criteria:
- They reside in the United States.
- They received a RIPTA notification stating their personal information may have been compromised in the ransomware attack discovered on Aug. 5, 2021.
How much is the data breach payout?
- Lost time: $15 per hour for up to four hours (maximum $60) for time spent addressing issues related to the data breach
- Ordinary losses: Up to $1,000 for documented, unreimbursed, out-of-pocket expenses related to to the incident
- Extraordinary losses: Up to $7,500 for documented, unreimbursed losses resulting from identity theft, fraud or other misuse of personal information
- Complimentary credit monitoring: All class members can claim five years of free single-bureau credit monitoring.
How to claim a Rhode Island Public Transit Authority class action rebate
Class members can file a claim online or download, print and complete a PDF claim form to mail to the settlement administrator. The claim deadline is Aug. 25, 2025.
Settlement administrator's mailing address: RIPTA/UHC Claims Administrator, P.O. Box 25226, Santa Ana, CA 92799
Proof and documentation required
- For online claims, class members must log in with the notice ID and PIN located on the top of their notice postcard. Those who misplaced their notice should contact the settlement administrator.
- For ordinary loss claims, class members must provide receipts or third-party documentation (not self-prepared) showing actual costs. Eligible expenses include:
- Bank fees
- Postage
- Gasoline for local travel
- Fees for credit reports, credit monitoring or identity theft insurance purchased between Aug. 5, 2021, and April 25, 2025
- For extraordinary loss claims, class members must provide documentation of the losses, proof of efforts to recover them and evidence the losses are unreimbursed and not already covered by ordinary losses. The losses must have occurred between Aug. 5, 2021, and April 25, 2025.
- For lost time claims, class members must provide a written description of the time spent and actions taken.
Payout options
Eligible class members may choose one of the following payment methods:
- PayPal
- Venmo
- Zelle
- Virtual prepaid card
- Paper check sent to provided mailing address
$375K data breach settlement fund breakdown
The $375,000 settlement fund includes:
- Settlement administration costs: To be determined
- Service awards to class representatives: Up to $1,500 each
- Payments to eligible class members: Remainder of the fund
The following are paid outside the settlement fund:
- Attorneys' fees and expenses: Up to $237,500
- Credit monitoring costs: To be determined
Important dates
- Opt-out deadline: July 25, 2025
- Claim deadline: Aug. 25, 2025
- Final approval hearing: Sept. 23, 2025
When is the settlement payout date?
Payments and credit monitoring instructions will be sent approximately 61 days after the court grants final approval and any appeals are resolved.
Why is there a class action settlement?
The class action lawsuit alleged the Rhode Island Public Transit Authority discovered a ransomware attack in August 2021. The plaintiffs claimed this attack resulted in unauthorized access to files containing personal information.
The Rhode Island Public Transit Authority and United Healthcare of New England deny any wrongdoing but agreed to settle to avoid the expense and uncertainty of litigation.
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.svg)
Comments