Highland Health Systems $650,000 Data Breach Settlement

Danielle Toth

Editor

Published

September 1, 2026 4:07 PM

Updated

September 1, 2026

Who can file a claim?

Class members include anyone residing in the United States whose private information the data breach Highland Health Systems discovered on or about July 3, 2023, exposed to unauthorized third parties.

The potentially compromised information includes:

Full names
Addresses
Telephone numbers
Email addresses
Dates of birth
Social Security numbers
Account numbers
Payment card numbers and PINs
Email addresses and passwords
Medical and health insurance information
Tax ID numbers
Routing numbers
Driver’s license or state ID numbers

How much can class members get?

Class members can claim one or more of the following benefits, depending on their situation:

Reimbursement for documented out-of-pocket losses: Up to $5,000 for those who experienced financial losses due to the data breach, including losses from identity theft or fraud; fees for credit reports, credit monitoring or freezing/unfreezing credit; costs to replace IDs; and postage to contact banks by mail.
Pro rata cash payment: As an alternative to the documented losses payment, a one-time pro rata cash payment estimated at $85 (the final amount may be higher or lower depending on the number of claims filed)
Credit monitoring: Two years of CyEx Medical Shield Total identity protection, including three-bureau credit monitoring and $1 million in medical identity theft insurance. This includes monitoring for health care insurance ID exposure, medical record number exposure and unauthorized health savings account spending. If the program detects suspicious activity, class members can access fraud resolution support.

How to claim a settlement payment

Class members can file a claim online or download, print and complete a PDF claim form and mail or email it to the settlement administrator

Settlement administrator's mailing address: Highland Health Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

Settlement administrator's email address: info@HighlandDataBreachSettlement.com

The claim deadline is Oct. 28, 2026.

Is proof or documentation necessary to submit a claim?

Documented losses: Class members must provide documentation (such as receipts) for losses incurred between July 3, 2023, and Oct. 28, 2026. Personal certifications or affidavits alone are not sufficient, but class members may submit them to clarify or support other documentation.
Pro rata cash payment: No documentation required.
Medical identity protection: No documentation required.

Payout options

Class members can choose from several payment options:

PayPal (provide email address)
Venmo (provide mobile number)
Zelle (provide email or mobile number)
Virtual prepaid card (provide email address)
Physical check (provide mailing address)

$650,000 settlement fund breakdown

The $650,000 settlement fund includes:

Settlement administration costs: Amount not specified
Attorneys' fees: Up to $216,666.67
Attorneys' expenses: Up to $30,000
Service awards to class representatives: $3,500 each (total $7,000)
Payments to approved class members: Remainder of the fund after the above costs are paid

Important dates

Opt-out deadline: Sept. 28, 2026
Claims deadline: Oct. 28, 2026
Final approval hearing: Nov. 30, 2026

When is the Highland Health Systems data breach settlement payout date?

The settlement administrator will distribute payments after the court grants final approval to the settlement and resolves any appeals.

Why is there a class action settlement?

The class action lawsuit alleged Highland Health Systems failed to adequately protect sensitive personal and health information, leading to a data breach in July 2023. The plaintiffs claimed the breach exposed private information to unauthorized third parties.

Highland Health Systems denies any wrongdoing, but both sides agreed to settle to avoid the risks and costs of continued litigation and provide timely benefits to affected individuals.