Dignity Health, R1 RCM $675K Data Breach Settlement

Current and former patients of Dignity Health who received a notice about a data incident on or around March 2024, may qualify to submit a claim for up to $2,500 plus additional benefits from a class action settlement.

R1 RCM Inc. and Dignity Health have agreed to pay $675,000 to settle a class action lawsuit regarding claims that an unauthorized third party accessed the personal identifying information (PII) and/or protected health information (PHI) of certain St. Rose Dominican Hospital, Rosa de Lima Campus patients.

Who is eligible for a Dignity Health data breach payout?

Class members must meet the following criteria:

• They were a patient of Dignity Health St. Rose Dominican Hospital, Rosa de Lima Campus.
• They received a written notification by or on behalf of R1 RCM Inc. or Dignity Health indicating that their PII and/or PHI may have been accessed in a data incident
• The notification was sent in or around March 2024
• The data potentially impacted included their name, contact information, date of birth, Social Security number, location of services, clinical or diagnosis information, and patient account or medical record number

How much is the class action settlement payment?

Class members can submit to receive one or more of the following:

• Out-of-pocket expenses: Each class member can submit to receive reimbursement of up to $500 for expenses which may include cost of freezing/unfreezing credit reports, credit monitoring and postage.
• Extraordinary losses: Class members can claim up to $2,500 in monetary losses due to identity theft or fraud caused by the data breach. This may include fraudulent transactions or accounts, falsified tax returns and false claims for government benefits or medical treatment.
• Monetary payment: Each class member can submit to receive a pro rata cash payment of the net settlement fund after all other claims have been paid. Final payment amount will be determined by the number of claims filed and leftover funds.
• Medical identity-theft monitoring: Class members can elect to receive two years three-bureau credit monitoring services and CyEx Medical Shield Total.

How to claim a class action rebate

To claim a settlement payment, class members must submit a claim form by the Nov. 11, 2025 deadline. Claimants can submit the online claim form or print, and mail the PDF claim form to the settlement administrator.

Settlement administrator's mailing address: R1/Dignity Data Incident Settlement c/o Settlement Administrator P.O. Box 25226 Santa Ana, CA 92799

Required proof and claim information

• Notice ID and PIN from settlement notice required to submit a claim online or by mail.
• Out-of-pocket expenses claims require proof such as receipts, bills, or statements show unreimbursed fees and costs.
• Extraordinary losses claims require supporting documentation such as police report, statements showing unreimbursed fraudulent charges, proof of falsified tax returns or medical claims.

Payout options

• PayPal
• Venmo
• Zelle
• Paper check (only option for claims submitted by mail)

$675,000 data breach settlement fund

The settlement fund of $675,000 will include:

• Settlement administration costs: To be determined
• Attorneys' fees and expenses: Amount to be submitted to the court for approval at a later date
• Service award to class representative: Not to exceed $2,500
• Credit and medical monitoring services: Cost determined by number of claims filed
• Payments to class members with approved claims: Remaining settlement funds

Important dates

• Opt out deadline: Oct. 13, 2025
• Claim deadline: Nov. 11, 2025
• Final approval hearing: Nov. 14, 2025

When is the R1 RCM Inc. and Dignity Health settlement payout date?

Payments will be issued to valid claimants approximately 60 days after the court grants final approval of the settlement, or when all claims have been process, whichever date is later.

Why was there a class action settlement?

The class action lawsuit was filed after an alleged data incident in which an unauthorized third party may have accessed the personal and health information of certain Dignity Health patients at St. Rose Dominican Hospital, Rosa de Lima Campus. The plaintiffs claimed that this incident exposed sensitive information, including names, contact details, Social Security numbers, and medical data.

The defendants deny these allegations but agreed to settle to avoid the expense and risk of further litigation.

Sources

1. Official class notice
2. Settlement website FAQ page
3. Settlement claim form