Northbay Healthcare $3.6M Data Breach Settlement

Individuals who received a notice that their private information was compromised in the Northbay Healthcare data incident between Jan. 11 and April 1, 2024, may be eligible to claim up to $4,000 from a class action settlement.

Northbay Healthcare Corp. agreed to pay $3.6 million to settle a class action lawsuit related to a cyberattack that exposed sensitive information, including protected health information and personally identifiable information, such as names and Social Security numbers. The class action lawsuit alleged Northbay failed to adequately protect this information.

Who is eligible for a data breach payout?

Class members must meet the following criteria

• Their private information was compromised as a result of the Northbay Healthcare data incident that occurred between Jan. 11 and April 1, 2024
• They received a notice from Northbay Healthcare about the data breach

How much is the class action settlement payment?

Class members are eligible for the following benefits:

• Credit monitoring services: All class members may submit to receive three years of credit monitoring services which includes real-time monitoring of their credit file, dark web monitoring, identity theft insurance coverage up to $1,000,000 and fully managed identity recovery services.
• Cash payment A – documented losses: Class members may claim up to $4,000 documented out-of-pocket monetary losses. Eligible expenses include bank and credit card fees, overdraft or NSF fees, fees for credit reports or monitoring and losses due to fraud.
• Cash payment B – flat cash payment: Class members that do not submit a documented losses claim may submit for a pro rata cash payment of $100. The final payment amount will be determined by the number of claims submitted.

How to claim a data breach class action rebate

To receive a settlement payment, class members must submit a claim form. Eligible class members may file a claim online or print a PDF claim form to complete and mail to the settlement administrator.

Claims must be submitted online or postmarked by the deadline of Oct. 14, 2025.

Settlement administrator's mailing address: Northbay Data Incident Settlement c/o Settlement Administrator, P.O. Box 25414 Santa Ana, CA 92799

Required information and documentation

• Notice ID and PIN from official settlement notice required to submit an online claim.
• Documented losses claims require proof, such as bank or credit card statements showing unreimbursed fees or charges, receipts for freezing/unfreezing credit, invoices for CPA or attorney services, police reports and other documentation showing fraudulent charges due to the data breach.

Payout options

• Electronic payment
• Paper check mailed to the address provided

$3.6 million Northbay Healthcare settlement fund

The $3,600,000 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $1,200,000
• Attorneys' expenses: To be presented to the court for approval
• Service award to class representative: Not to exceed $5,000
• Credit monitoring and identity theft protection services: Cost determined by the number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Opt out deadline: Sept. 30, 2025
• Deadline to file a claim: Oct. 14, 2025
• Final approval hearing: Oct. 29, 2025

When is the Northbay Healthcare data breach settlement payout date?

Payments will be issued to approved claimants approximately 105 days after the court grants final approval of the settlement.

Why did this class action lawsuit and settlement happen?

The class action lawsuit was filed because Northbay Healthcare experienced a cyberattack that compromised private information of patients and consumers. Plaintiffs alleged that Northbay failed to adequately protect this information.

Northbay denies these allegations but agreed to settle to avoid continuing litigation expense and risk.

Sources

1. Class notice
2. Settlement website FAQ page