MedStar Health $1.35M Data Breach Class Action Settlement

Consumers whom MedStar Health Inc. identified as having their personal information potentially exposed in a recent data incident may qualify to claim up to $5,000 from a class action settlement.

MedStar Health Inc. agreed to pay $1.35 million to resolve a class action lawsuit alleging it failed to adequately protect sensitive personal information, resulting in unauthorized access to employee email accounts and files containing patient and employee data.

Who can file a MedStar Health claim?

Class members must meet all of the following criteria:

• They reside in the United States.
• MedStar Health Inc. identified them as having personal information that was potentially compromised in the data incident.

This includes both former and current patients and employees whose information was potentially accessed between Jan. 25, 2023, and Oct. 18, 2023. MedStar began mailing notifications to impacted individuals on May 3, 2024.

How much can class members receive?

• Cash payment A – documented losses: Up to $5,000 per person for documented losses related to the data incident
• Cash payment B – alternate cash payment: An estimated $100 subject to pro rata adjustment depending on the number and type of valid claims submitted.
• Medical data monitoring: One year of CyEx’s Medical Shield Complete service, which monitors medical and health care data

How to claim a data breach class action rebate

Class members can file a claim online or download, print and complete the PDF claim form to mail to the settlement administrator. Claims must be submitted online or postmarked by Oct. 14, 2025.

Settlement administrator's mailing address: Riddick v. MedStar Health Inc., c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391

What is required to submit a claim?

• Class members must provide the class member ID number located on their postcard notice. Those who do not have this information but believe they may be a settlement class member should contact the claims administrator.
• For cash payment A (documented losses), class members must provide reasonable and sufficient documentation of their losses, such as receipts, bank statements or other proof of out-of-pocket expenses.
• For cash payment B (alternate cash payment) and medical data monitoring, class members only need to check the appropriate box.

Payout options

• Electronic payment (online claims only)
• Paper check
• Medical data monitoring activation code

$1.35 million data incident settlement fund breakdown

The $1,350,000 settlement fund covers:

• Settlement administration costs: $250,000
• Attorneys' fees: Up to $450,000
• Attorneys' expenses: To be determined
• Service awards to class representatives: Up to $2,500 per representative
• Medical data monitoring costs: To be determined
• Payments to eligible class members: Remainder of the fund

Important dates

• Opt-out deadline: Sept. 15, 2025
• Deadline to file a claim: Oct. 14, 2025
• Final approval hearing: Nov. 4, 2025

When is the MedStar Health Inc. settlement payout date?

Payments and benefits will be distributed 30 to 60 days after the court grants final approval and any appeals are resolved.

Why did this class action settlement happen?

The class action lawsuit alleged MedStar Health Inc. failed to adequately protect personal information, leading to unauthorized access to employee email accounts and files containing sensitive data.

MedStar Health Inc. denies any wrongdoing. Both sides agreed to settle to avoid the cost and risk of trial and provide benefits to affected individuals.

Sources

1. Class notice
2. Settlement agreement
3. Settlement FAQ