Highlands Oncology Group Data Breach Class Action Settlement

Current and former patients in the United States whose private information the June 2025 Highlands Oncology Group data breach compromised may be eligible to submit a claim for up to $4,250 from a class action settlement. The cybersecurity incident impacted approximately 131,000 individuals.

Highlands Oncology Group agreed to settle a class action lawsuit alleging it failed to adequately protect sensitive personal and medical information during a targeted cyberattack in June 2025.

Who can file a claim for a data breach payout?

Class members are individuals residing in the United States whose private information the Highlands Oncology Group data breach that occurred on or around June 2025 compromised.

How much are settlement payments?

Class members have the following benefit options:

• Cash payment A - Documented losses: Class members can claim up to $4,250 for documented out-of-pocket losses related to fraud and/or identity theft that occurred between June 2, 2025, and Oct. 22, 2026, and are traceable to the data breach. This includes fees for credit reports, credit monitoring or freezing/unfreezing credit files; costs to replace IDs, postage for contacting financial institutions and monetary losses due to identity theft or fraud.
• Cash payment B - Alternate cash: Class members who do not submit a documented losses claim can submit a claim to receive a one-time cash payment of $50.
• Medical data monitoring: All class members can elect to receive three free years of CyEx Medical Shield Complete, which includes $1 million in medical identity theft insurance, access to a fraud resolution agent (if needed) and monitoring for health care insurance ID and medical record number exposure and unauthorized health savings account spending.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print and complete the PDF claim form and mail it to the settlement administrator.

Settlement administrator's mailing address: Highlands Oncology Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

The claim deadline is Oct. 22, 2026.

Required claim information and proof

• All class members must provide the login ID from the settlement notice they received. Online claimants must also provide the PIN from the same notice.
• Documented losses claims require supporting documentation, which may include receipts, bank or credit card statements and other proof of fraud or identity theft.

Payout options

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Paper check mailed to the address provided

Settlement fund breakdown

The settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees and expenses: $400,000
• Service awards to class representatives: Up to $1,500 each
• Medical monitoring: Cost determined by number of claims filed
• Payments to approved claimants: Total determined by number of valid claims filed

Important dates

• Opt-out deadline: Oct. 7, 2026
• Claim deadline: Oct. 22, 2026
• Final approval hearing: Nov. 6, 2026

When is the Highlands Oncology Group data breach settlement payout date?

The settlement administrator will distribute payments and medical monitoring codes approximately 90 days after the court grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit claimed a targeted cyberattack on Highlands Oncology Group’s computer systems in June 2025 allowed unauthorized access to files containing sensitive personal and medical information. The plaintiffs alleged Highlands Oncology Group failed to adequately protect this information.

The company denies the allegations but agreed to settle to avoid the expense and uncertainty of continued litigation.

Sources

1. Claim form
2. Class notice
3. Settlement agreement
4. Settlement website FAQ page