Center for Digestive Health Data Breach Settlement

U.S. residents whose personal information was potentially compromised in the Center for Digestive Health data breach on or around April 11, 2024, may qualify to claim up to $7,500 from a class action settlement.

Gastroenterology Associates of Central Florida PA, doing business as Center for Digestive Health, agreed to settle a class action lawsuit alleging negligence, breach of implied contract, invasion of privacy, unjust enrichment and breach of fiduciary duty after a cyber incident exposed the sensitive information of employees and patients.

Who can file a Center for Digestive Health claim?

The settlement class includes any living individual residing in the United States whose personal information was potentially exposed in the Center for Digestive Health data breach that occurred on or around April 11, 2024

Class members may have received notice about the incident in February 2025. They incident affected approximately 122,000 individuals.

The potentially exposed information includes:

• Names
• Addresses
• Social Security numbers
• Financial account information
• Health information related to care, treatment, diagnosis, appointments, health insurance, billing and other health records

How much is the data breach payout?

• Ordinary losses: Up to $2,000 for expenses or losses related to the incident. Examples include bank fees, postage, gasoline for local travel and fees for credit reports or identity theft insurance purchased between Feb. 21, 2024, and Sept. 29, 2025. As part of the $2,000 cap, class members can claim lost time at $25 per hour for up to three hours ($75 total) as long as they also claim other ordinary losses.
• Extraordinary losses: Up to $7,500 for actual, documented and unreimbursed monetary losses due to fraud or identity theft related to the incident and not covered by ordinary losses
• Credit monitoring: Two years of credit monitoring, including at least $1,000,000 in identity theft protection insurance

Class members can claim both credit monitoring and a cash payment if they qualify.

How to claim a Gastroenterology Associates of Central Florida PA payout

Class members can file a claim online or download, print, complete and mail the PDF claim form to the settlement administrator. The claim deadline is Sept. 29, 2025.

Settlement administrator's mailing address: Cobean v. Gastroenterology Associates of Central Florida P.A., c/o CPT Group Inc., 50 Corporate Park Irvine, CA 92606

Required information and documentation

• All claimants must provide the CPT ID located on the settlement they received. Online claimants must also provide the passcode located on the same notice. Those who do not have a CPT ID and/or passcode should email gacfdatasettlement@cptgroup.com.
• For ordinary loss claims, class members must provide documentation to support their claims, including receipts, bank statements, credit card statements and invoices. Self-prepared documents (such as handwritten receipts) are not sufficient on their own but may be used to clarify other documentation.
• For lost time claims, class members must provide a description of the time spent.
• For extraordinary loss claims, class members must provide proof of actual, unreimbursed monetary loss, causation and efforts to seek reimbursement from other sources.

Payout options

• Electronic payment (online claims only)
• Paper check

Cyber incident settlement fund breakdown

The settlement fund includes:

• Settlement administration costs: To be determined
• Attorneys’ fees and costs: Up to $300,000
• Service awards to class representatives: Up to $2,000 each
• Credit monitoring costs: To be determined
• Payments to eligible class members: Remainder of the fund

Important dates

• Opt-out deadline: Sept. 13, 2025
• Claim deadline: Sept. 29, 2025
• Final fairness approval hearing: Oct. 13, 2025

When is the Center for Digestive Health data breach settlement payout date?

Payments and credit monitoring will be distributed on or about Nov. 28, 2025.

Why did this class action settlement happen?

The class action lawsuit alleged a cyber incident on or around April 11, 2024 allowed unauthorized parties to access files containing the personal and health information of employees and patients. The plaintiffs claimed Gastroenterology Associates of Central Florida PA failed to adequately protect this information.

The defendant denied all allegations but agreed to settle to avoid the risk, cost and time of further litigation.

Sources

1. Settlement notice
2. Settlement agreement
3. Settlement website