Kitsap Mental Health Services Data Breach Settlement
Kitsap Mental Health Services Data Breach Settlement
Nicole Aljets
Nicole Aljets
Editor & Community Manager
Published
December 12, 2025 9:37 AM
Updated
January 30, 2026

Current and former patients who received a notice stating the October 2024 Kitsap Mental Health Services data breach compromised their private information may be eligible to submit a claim up to $3,100 plus additional benefits from a class action settlement. The cybersecurity incident impacted approximately 70,759 current and former Kitsap patients.

Kitsap Mental Health Services agreed to settle a class action lawsuit alleging a cyberattack in October 2024 exposed sensitive personal and medical information. The compromised information may have included names, addresses, birth dates, Social Security numbers, driver’s license or state identification numbers, medical diagnoses, treatment information, medications, claims information, financial information and other health care-related data.

Who can file a data breach claim?

Class members are individuals whose personal and protected health information the October 2024 Kitsap Mental Health Services data breach may have compromised.

How much is the class action settlement payout?

Class members can select one or more from the following benefits:

  • Medical data monitoring services: All class members can elect to receive two years of CyEx Medical Shield Complete, which includes $1 million in identity theft insurance and monitoring for specific types of medical data exposure
  • Out-of-pocket documented losses: Class members can claim up to $3,000 for documented losses incurred between Oct. 17, 2024, and Feb. 5, 2026. Covered expenses include:
    • Losses due to identity theft or fraud
    • Fees for credit reports, credit monitoring or freezing/unfreezing credit
    • Costs to replace IDs
    • Postage for contacting banks by mail
  • Lost time: Class members can claim up to four hours of lost time spent dealing with the data breach at $25 per hour up to a maximum $100. Time spent may include changing passwords, investigating suspicious account activity and researching the data breach.

How to claim a data breach class action rebate

To receive a settlement payment, class members must submit a claim online or download and print the PDF claim form to mail or email to the settlement administrator.

Settlement administrator's mailing address: KMHS Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

Settlement administrator's email address: info@kmhsdatasecuritysettlement.com

The deadline to submit a claim is Feb. 5, 2026.

Required proof and claim information

  • Online claims require the unique ID and PIN from the settlement notice class members received.
  • Out-of-pocket losses claims require supporting documentation, which may include bank or credit card statements, receipts, invoices and other proof of unreimbursed fraudulent charges due to identity theft or fraud.

Payout options

  • PayPal
  • Venmo
  • Zelle
  • Virtual prepaid card
  • Paper check mailed to the address provided

Class action settlement fund breakdown

The settlement fund will include:

  • Settlement administration costs: To be determined
  • Attorneys' fees and costs: Up to $200,000
  • Service award to class representative: $2,500
  • Medical data monitoring: Cost determined by the number of claims filed
  • Payments to approved claimants: Total determined by the number of valid claims filed

Important dates

  • Deadline to file a claim: Feb. 5, 2026
  • Opt out deadline: Feb. 19, 2026
  • Final approval hearing: March 6, 2026

When is the Kitsap Mental Health Services data breach settlement payout date?

The settlement administrator will issue payments and medical monitoring enrollment codes to approved claimants approximately 60 days after the court grants final approval of the settlement.

Why is there a class action settlement?

The class action lawsuit alleged a targeted cyberattack on Kitsap Mental Health Services’ computer systems in October 2024 resulted in unauthorized access to files containing private information. The compromised data included personal and health information such as names, Social Security numbers, medical diagnoses and financial details.

Kitsap Mental Health Services denies any wrongdoing but agreed to settle to avoid the expense and uncertainty of continued litigation.

Sources

  1. Official class notice
  2. Official settlement website FAQ page
  3. Settlement claim form
Settlement Open for Claims
Award:
Up to $3,100
Deadline:
February 5, 2026
SUBMIT CLAIM