Discovery Practice Management Data Breach Settlement

Consumers who received a mailed notice in 2021 informing them a data incident involving Discovery Practice Management Inc. may have compromised their personal information could qualify to claim up to $1,250 from a class action settlement.

Discovery Practice Management Inc. agreed to resolve a lawsuit alleging it failed to properly safeguard patient data, resulting in a June 2020 data breach. The incident allegedly exposed sensitive information, including names, dates of birth, addresses, medical and insurance details, email addresses, telephone numbers and Social Security numbers.

Who are the class members?

Class members must meet the following criteria:

• They received a notice by mail from DPM in 2021 regarding the June 2020 data incident.
• They resided in the United States at the time of the incident.
• The data breach potentially compromised their personally identifiable information.

How much can class members receive?

• Ordinary expense reimbursement: Up to $250 for documented, unreimbursed out-of-pocket expenses directly related to the data incident. Eligible expenses include:
• Costs to obtain credit reports
• Fees for credit freezes
• Card replacement fees
• Late fees, over-limit fees and other bank or credit card fees
• Interest on payday loans taken as a result of the incident
• Postage, mileage and other incidental expenses due to lack of account access
• Costs for credit monitoring or identity theft insurance purchased primarily because of the data incident
• Up to four hours of lost time at $15 per hour (minimum of one hour required) for activities such as monitoring accounts or reversing fraudulent charges

• Extraordinary expense reimbursement: Up to $1,000 for unreimbursed monetary losses or fraudulent charges as a direct result of the data incident. To qualify, the loss must:
• Be actual, documented and unreimbursed
• Be directly caused by the data incident
• Have occurred between June 22, 2020, and Nov. 24, 2025
• Not be covered by the ordinary expense category or reimbursed by any other source (such as insurance)
• Be accompanied by a reasonable effort to avoid or recover the loss

• Credit monitoring: Three years of free access to CyEx’s Identity Defense Total Service (credit monitoring and identity theft protection), which is available to all class members regardless of whether they submit a claim

How to claim a class action payment

Class members can file a claim online or download, print, complete and mail the PDF claim form to the settlement administrator. The claim deadline is Nov. 24, 2025.

Settlement administrator's mailing address: Discovery Practice Management Settlement Administrator, PO Box 1108, Baton Rouge, LA 70821

Is proof or documentation necessary to submit a claim?

Claimants must provide:

• The unique identifier from their mailed notice (to verify class membership)
• Documentation for each claimed expense (such as receipts, statements or other proof of payment)
• Descriptions and supporting documents for lost time or extraordinary losses

Payout options

The settlement administrator will mail paper checks to the address class members provide on the claim form.

Settlement fund breakdown

The settlement fund includes:

• Settlement administration costs: Up to $50,000
• Attorneys' fees and costs: Up to $130,000
• Incentive awards to representative plaintiffs: $5,000 each
• Credit monitoring costs: Determined by number of valid claims
• Payments to eligible class members: Not affected by other costs

Important dates

• Deadline to file a claim: Nov. 24, 2025
• Exclusion deadline: Nov. 24, 2025
• Fairness hearing: Feb. 5, 2026

When is the Discovery Practice Management Inc. settlement payout date?

The settlement administrator will mail paper checks to eligible claimants approximately 30 days after the settlement administrator approves the claim or 60 days after the court grants final approval and the settlement administrator resolves any appeals, whichever is later.

Why did this class action settlement happen?

The class action lawsuit alleged DPM failed to adequately protect patient information, resulting in unauthorized access to employee email accounts containing sensitive data. The plaintiffs claimed this violated several California privacy and consumer protection laws, including the Confidentiality of Medical Information Act, the Unfair Competition Law and the Customer Records Act.

DPM denies all allegations of wrongdoing. By settling, both sides avoid the costs and risks of trial, and affected individuals can receive compensation for their losses.

Sources

1. Class notice
2. Claim form
3. Settlement agreement
4. Settlement FAQ