Staten Island University Hospital Data Breach Settlement

Individuals whose private information the January 2024 Staten Island University Hospital data incident compromised may be eligible to claim up to $1,035 from a class action settlement.

Staten Island University Hospital agreed to resolve a class action lawsuit alleging it failed to protect patient data following a targeted cyberattack on The Medibase Group Inc., a vendor providing services to the hospital. This incident resulted in unauthorized access to files containing sensitive personal information, such as names, dates of birth, Social Security numbers, hospital admission and discharge dates, outstanding balances and health insurance details.

Who can file a claim?

The class includes all living individuals in the United States whose private information the January 2024 data incident involving Staten Island University Hospital and The Medibase Group Inc. compromised.

Those who received a notice from the settlement administrator or directly from Staten Island University Hospital about the data breach are likely included in the settlement class.

How much can class members get?

Class members may claim one or more of the following benefits:

• Reimbursement for out-of-pocket losses: Those who experienced actual, documented and unreimbursed out-of-pocket losses due to the data incident can claim up to $1,000. These losses must have occurred between Jan. 26, 2024, and March 16, 2026. Eligible expenses include:
• Losses due to fraud or identity theft
• Costs for freezing and unfreezing credit with a credit reporting agency
• Credit monitoring costs incurred after notice of the data incident through the date of claim submission
• Miscellaneous expenses, such as notary, fax, postage, copying, mileage and long-distance telephone charges

• Flat cash payment: All class members may claim a one-time $35 cash payment. No documentation or explanation is needed for this option.
• Medical data monitoring: All class members are eligible for two years of CyEx Medical Shield Complete. This service includes $1 million in medical identity theft insurance and monitoring for health care insurance ID exposure, medical record number exposure and unauthorized health savings account spending. If the service detects suspicious activity, recipients will have access to a fraud resolution agent.

How to claim a class action payout

Class members can file a claim online or download and print a PDF claim form to complete and mail to the settlement administrator. The claim deadline is March 16, 2026.

Settlement administrator's mailing address: SIUH Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

What proof or documentation is required to submit a claim?

• To submit an online claim form, class members must log in with their unique ID and PIN, which are located on the settlement notice they received. Those who are unable to locate their ID and PIN should contact the settlement administrator by emailing info@MediBaseSIUHDataBreachSettlement.com and providing their full name and mailing address.
• To submit a claim for reimbursement of out-of-pocket losses, class members must list each expense and provide documentation, such as receipts.
• To submit a claim for the $35 flat payment or medical data monitoring, class members do not need to provide documentation.

Payout options

• Eligible class members who submit their claim by mail will receive a paper check.
• Eligible class members who submit their claim online may choose to receive payment by check, PayPal, Venmo or Zelle

Settlement fund breakdown

The settlement fund includes:

• Settlement administration costs: To be determined
• Attorneys' fees and costs: Up to $195,000
• Service awards to class representatives: $1,000 each ($2,000 total)
• Medical monitoring costs: Dependent on number of claims
• Payments to eligible class members: Not dependent on the above costs

Important dates

• Opt-out deadline: March 2, 2026
• Deadline to file a claim: March 16, 2026
• Final approval hearing: March 31, 2026

When is the SIUH data incident settlement payout date?

The settlement administrator will issue payments no later than May 15, 2025.

Why is there a class action settlement?

Te class action lawsuit alleged a targeted cyberattack on Medibase’s computer systems in January 2024 led to unauthorized access to files containing private information of Staten Island University Hospital patients. The plaintiffs claimed the hospital failed to adequately protect this sensitive data.

Staten Island University Hospital denies any wrongdoing. Both parties agreed to settle to avoid the costs, risks and uncertainties of continued litigation.

Sources

1. Class notice
2. Claim form
3. Settlement agreement
4. Settlement FAQs