Hillcrest Convalescent Center Data Breach Settlement
Hillcrest Convalescent Center Data Breach Settlement

People whose private information the June 2024 Hillcrest Convalescent Center data breach compromised may be eligible to claim up to $2,500 plus credit monitoring from a class action settlement.

Hillcrest Convalescent Center Inc. agreed to settle a class action lawsuit alleging it failed to adequately protect sensitive personal and health information during a cyberattack in June 2024. The lawsuit claims the data breach resulted in unauthorized access to files containing names, addresses, Social Security numbers, financial account details, dates of birth, government-issued identification numbers and medical and health insurance information.

Who can file a claim?

Class members must be a living individual in the United States whose private information the June 2024 Hillcrest data breach potentially compromised.

There are two groups within the class:

  • Group One settlement subclass: Individuals whose Social Security numbers are among the private information the breach potentially impacted
  • Group Two settlement subclass: Individuals whose Social Security numbers are not among the private information the breach potentially impacted

How much can class members receive?

All class members can claim credit monitoring services and reimbursement for documented losses. Additionally, Group 1 subclass members may opt for a $50 alternative cash payment instead of other benefits.

  • Documented losses: All class members may claim up to $2,500 for actual, documented out-of-pocket losses due to the data breach. Eligible expenses include losses from identity theft or fraud, fees for credit reports or credit monitoring, costs to replace IDs and postage for contacting banks. Class members must support the expenses with documentation, such as bank statements or receipts. The losses must have occurred between June 27, 2024, and Aug. 26, 2026.
  • Alternative cash payment (Group One only): Group One subclass members can choose a one-time $50 cash payment instead of other benefits. No documentation is required for this option.
  • Credit monitoring services: All class members can enroll in two years of CyEx Identity Defense Complete, which includes $1 million in identity theft insurance, real-time credit file monitoring, dark web scanning and public records monitoring.

If the total amount class members claim exceeds the available settlement funds, the settlement administrator may reduce payments on a pro rata basis.

How to claim a class action payment

Class members can file a claim online or download and print a PDF claim form and mail it to the settlement administrator. They can also request a paper copy of the claim form by calling 833-421-7232 or emailing info@HCCDataSettlement.com.

Settlement administrator's mailing address: Hillcrest Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

The claim deadline is Aug. 26, 2026.

What proof or documentation is required to submit a claim?

  • Documented losses: Class members must provide proof, such as bank statements, receipts or other supporting documents, showing the out-of-pocket expenses are related to the data breach. Self-prepared notes are not sufficient by themselves, but class members may include them to supplement other information.
  • Alternative cash payment (Group One only): Class members need only select the correct option on the claim form.
  • Credit monitoring: Class members need only select the correct option on the claim form.

Payout options

  • PayPal (requires email address)
  • Venmo (requires mobile number)
  • Zelle (requires email address or mobile number)
  • Virtual prepaid card (requires email address)
  • Physical check (requires mailing address)

Settlement fund breakdown

The settlement fund includes:

  • Settlement administration costs: To be determined
  • Attorneys' fees and costs: $325,000
  • Service awards to class representatives: $2,500 each for three representatives ($7,500 total)
  • Payments to eligible class members and credit monitoring costs: Remainder of the fund

Important dates

  • Opt-out deadline: July 27, 2026
  • Final approval hearing: Aug. 24, 2026
  • Claim deadline: Aug. 26, 2026

When is the Hillcrest Convalescent Center data breach settlement payout date?

The settlement administrator will send an email to class members with valid claims to select their preferred payment method (electronic payment or paper check). Class members will have 30 days to select their form of payment.

The settlement administrator will issue payments to eligible class members benefits no later than 60 days after the court resolves any appeals and grants final approval.

Why did this class action settlement happen?

The class action lawsuit claimed a cyberattack in June 2024 allowed unauthorized access to private information stored by Hillcrest Convalescent Center Inc. The plaintiffs alleged the company failed to adequately protect sensitive data, including personal and health information.

Hillcrest denies any wrongdoing but agreed to settle to avoid the expense and uncertainty of further litigation and to provide benefits to those affected.

Sources

  1. Claim form
  2. Class notice
  3. Settlement agreement
  4. Settlement FAQ
  5. Important dates
Settlement Open for Claims
Award:
Up to $2,500 plus credit monitoring
Deadline:
August 26, 2026
SUBMIT CLAIM