Medical Center Barbour Data Breach Class Action Settlement

Individuals who were a current or former patient or employee of Medical Center Barbour, whose personal information may have been exposed in the October 2023 data breach, may qualify to submit a claim for up to $5,000 from a class action settlement. There are an estimated 61,014 class members.

Medical Center Barbour, along with Blue Management Services LLC (doing business as Alliant Management Services) and The Health Care Authority of the City of Eufaula, has agreed to pay to settle a class action lawsuit. The lawsuit alleged that the defendants failed to adequately protect sensitive personal and health information, leading to a data breach in October 2023.

Who can file a claim for a data breach payout?

Class members must meet the following criteria:

• Their personally identifiable information (PII) and/or private health information (PHI) was potentially accessed during the Medical Center Barbour data incident on or around Oct. 29, 2023.
• They received a notice from Medical Center Barbour regarding the data incident, which was mailed in or around August 2024.
• They are a current or former patient or employee of Medical Center Barbour.

How much will the class action settlement payment be?

Class members can claim one or more of the following benefits:

• Expense reimbursement: Class members can claim up to $5,000 for documented out-of-pocket losses and expenses traceable to the data incident. This includes costs such as credit report fees, the cost of freezing or unfreezing credit, card replacement fees, late fees, credit monitoring purchased due to the breach, and other expenses or losses directly related to the incident.
• Class members submitting for this benefit can also claim up to three hours of lost time at $25 per hour, a maximum $75, for time spent dealing with the data breach.

• Alternative cash payment: Class members that do not submit an expense reimbursement claim can submit to receive a pro rata $50 cash payment. Final payment amount will be determined by the number of claims filed.
• Credit monitoring services: All class members can elect to receive two years of free credit monitoring.

How to claim a data breach class action rebate

To receive a settlement benefit, Class members must submit a claim form by Jan. 2, 2026. Claims can be submitted in two ways:

• File a claim online using the online claim form
• Download, print, and mail the PDF claim form to the settlement administrator.

Settlement administrator's address: MCBH Settlement Administrator, c/o CPT Group, Inc., PO Box 19504, Irvine, CA 92623.

Required claim information and proof

• CPT ID and Passcode from settlement notice required to submit an online claim.
• Expense reimbursement claims require supporting documentation such as invoices for services or fees, bank or credit card statements showing late fees, over-limit fees or fraudulent charges and other proof showing monetary losses due to identity theft or fraud.
• Class members claiming lost time must include a description of actions taken while dealing with the data breach.

Payout options

• Electronic payment, only available for claims submitted online
• Paper check mailed to the address provided

Settlement fund breakdown

A settlement fund of $300,000 will include the following:

• Credit monitoring: Cost determined by the number of claims filed
• Payments to approved claimants: Remaining settlement fund, up to $300,000

The defendant will also be responsible for the following costs and fees:

• Settlement administration costs: Estimated at $65,000
• Attorneys' fees and costs: Up to $300,000
• Service awards to class representatives: $1,500 each for three representatives, $4,500 total

Important dates

• Deadline to opt out of the settlement: Jan. 2, 2026
• Deadline to submit a claim form: Jan. 2, 2026
• Final fairness hearing: April 9, 2026

When is the Medical Center Barbour data breach settlement payout date?

Payments and credit monitoring activation codes will be issued to approved claimants approximately 75 days after the court grants final approval of the settlement, or 30 days after the claim is approved, whichever is later.

Why did this class action settlement happen?

This class action lawsuit was filed after a data security incident at Medical Center Barbour in October 2023, where cybercriminals accessed sensitive information of patients and employees. Plaintiffs alleged negligence, breach of contract, breach of fiduciary duty, unjust enrichment, and invasion of privacy.

The defendants denied wrongdoing but agreed to settle to avoid the expense and uncertainties of continued litigation.

Sources

1. Long form notice
2. Claim form
3. Settlement agreement