Harvard Pilgrim $16 Million Data Breach Settlement

Consumers whose personal information was affected by the Harvard Pilgrim data breach may qualify to claim up to $35,000 from a class action settlement.

Harvard Pilgrim Health Care Inc. and Point32Health Inc. agreed to pay $16,000,000 to settle a class action lawsuit related to a targeted cyberattack that occurred around April 17, 2023. The lawsuit alleges the defendants failed to protect sensitive personal information, which may have included names, addresses, phone numbers, birth dates, health insurance account details, Social Security numbers, taxpayer identification numbers and clinical information, such as medical history and treatment details.

Who is eligible to claim a Harvard Pilgrim payout?

Class members must meet the following criteria:

• They are a U.S. resident whose personal information was impacted by the Harvard Pilgrim data breach.
• Harvard Pilgrim notified them that their information was affected by the breach.

How much is the data breach payout?

• Credit Monitoring Services: All class members can claim three years of credit monitoring, which includes dark web scanning, identity theft insurance, access to fraud resolution agents and real-time monitoring with Equifax, Experian and TransUnion.
• Out-of-Pocket Losses: Class members may claim up to $2,500 for documented out-of-pocket expenses resulting from the data breach.
• Attested Time: Class members who spent time responding to the data breach may claim up to seven hours at $30 per hour (maximum $210). This can be claimed together with out-of-pocket losses, but the combined total cannot exceed $2,500.
• Extraordinary Losses: Those who experienced unreimbursed losses due to identity theft, fraud, falsified tax returns, real estate title fraud, financial fraud or government benefits fraud may claim up to $35,000.
• Extraordinary Attested Time: Class members who spent time addressing extraordinary losses may claim up to 20 hours at $30 per hour (maximum $600). This can be combined with other claims, but the total cannot exceed $35,000.
• Alternative Cash Payment: Class members who do not have out-of-pocket losses or attested time may claim a flat $150 payment.

How to claim a Harvard Pilgrim data breach class action rebate

Class members can file a claim online or download, print and complete a PDF claim form to mail to the settlement administrator.

Settlement administrator's mailing address: Harvard Pilgrim Data Security Incident Settlement, c/o Settlement Administrator, PO Box 25245, Santa Ana, CA 92799

Class members may also request a paper claim form by calling 1-833-296-0892 or emailing info@HarvardPilgrimDataIncidentSettlement.com.

Proof and documentation required

• For online claims, class members must provide their Unique ID and PIN found on the top of their postcard notice.
• For out-of-pocket and extraordinary losses, class members must submit receipts or other documentation to verify their expenses. The losses must be related to breach.
• Eligible expenses include costs for freezing or unfreezing credit reports, notary fees, postage, mileage, credit monitoring or other mitigation costs.

• For attested time claims, claimants must provide a brief description of what they did during the claimed time.

Payout options

• PayPal (online claims only)
• Venmo (only claims only)
• Zelle (online claims only)
• Prepaid card (online claims only)
• Paper check mailed to the provided address

$16 million Harvard Pilgrim settlement fund breakdown

The $16,000,000 settlement fund covers:

• Settlement administration costs: Up to $8,000,000
• Attorneys' fees: Up to $4,800,000
• Attorneys' costs: Up to $50,000
• Service awards to class representatives: $2,000 each
• Credit monitoring costs: To be determined
• Payments to eligible class members: The remainder of the fund

Important dates

• Opt-Out Deadline: June 27, 2025
• Final Approval Hearing: July 28, 2025
• Claim Deadline: Aug. 25, 2025

When is the Harvard Pilgrim data breach payout date?

Payments will be distributed after the court grants final approval of the settlement and any appeals are resolved.

Why is there a class action settlement?

This class action lawsuit alleged a targeted cyberattack on Harvard Pilgrim's systems in April 2023 exposed sensitive personal and health information. The plaintiffs claimed Harvard Pilgrim failed to adequately protect this data.

Harvard Pilgrim denies any wrongdoing but agreed to settle to avoid the costs and risks of ongoing litigation and to provide benefits to those affected.

Sources

1. Settlement Website FAQ
2. Class Notice
3. Settlement Agreement