HCF Management Data Breach Class Action Settlement
HCF Management Data Breach Class Action Settlement

Current and former residents, patients and employees who received a notice that a data breach involving HCF Management in September 2024 compromised their personal information may qualify to submit a claim for up to $4,480 from a class action settlement. The cybersecurity incident impacted at least 57,000 individuals.

HCF Management Inc. agreed to settle a class action lawsuit alleging HCF failed to adequately protect the personal information of employees and customers during a cyberattack detected on or about Sept. 17, 2024. The plaintiffs claimed the incident exposed both personal data and protected health information.

Who can file a claim for a data breach payout?

Class members are individuals whose personal information the September 2024 HCF Management data breach compromised, including those who received a notice of the breach because HCF's systems stored their personal data.

How much are settlement payments

Class members have the following benefit options:

  • Extraordinary losses: Class members can claim up to $4,000 for documented extraordinary losses traceable to the data breach. This includes professional fees for an accountant or attorney hired to assist with identity theft issues, interest on payday loans and other unreimbursed charges related to unavailability of funds due to fraud.
  • Documented out-of-pocket losses: Class members can claim up to $400 for documented losses related to the data breach. Eligible losses and expenses include costs of purchasing credit reports, identity theft insurance products or credit monitoring on or after Sept. 17, 2024, unreimbursed bank or credit card fees, overdraft fees and postage for contacting financial institutions.
  • Lost time: Class members can claim up to four hours at $20 per hour ($80 maximum) for time spent dealing with issues related to the data breach.
  • Alternative cash payment: Class members who do not submit a lost-time, out-of-pocket losses or extraordinary losses claim can submit a claim to receive a $35 cash payment.
  • Credit monitoring: All class members can elect to receive three years of credit monitoring services, which includes $1 million in identity theft insurance.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: HCF Management Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

The claim deadline is Sept. 29, 2026.

Required proof and claim information

  • To submit a claim by mail, class members must provide the unique identifier from the settlement notice they received. To submit a claim online, class members must provide the login ID and PIN from the same notice.
  • Out-of-pocket or extraordinary losses claims require supporting documentation, which may include receipts, bank statements showing unreimbursed fees or fraudulent charges, invoices for services and other proof of fraud or identity theft.

Payout options

  • Electronic payment
  • Paper check mailed to the address provided

Settlement fund breakdown

The settlement fund will include:

  • Settlement administration costs: To be determined
  • Attorneys' fees and expenses: Up to $210,000
  • Service awards to class representatives: $1,500 each ($4,500 total)
  • Credit monitoring: Cost determined by number of claims filed
  • Payments to approved claimants: Total determined by number of claims filed

Important dates

  • Opt-out deadline: Sept. 13, 2026
  • Claim deadline: Sept. 29, 2026
  • Final approval hearing: Nov. 30, 2026

When is the HCF Management settlement payout date?

The settlement administrator will issue payments to approved claimants after the court grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit claimed HCF Management experienced a cybersecurity incident in September 2024 that exposed personal information of employees and customers. The plaintiffs alleged HCF failed to adequately protect this information, asserting claims such as negligence, negligence per se, breach of implied contract and unjust enrichment.

HCF Management denies the allegations but agreed to settle to avoid the cost and uncertainty of further litigation.

Sources

  1. Class notice
  2. Settlement website FAQ
  3. Claim form
Settlement Open for Claims
Award:
Up to $4,480 plus credit monitoring
Deadline:
September 29, 2026
SUBMIT CLAIM