OnePoint Patient Care $2.1 Million Data Breach Settlement

Individuals who received a notice that the Aug. 8, 2024, data incident involving OP Pharmacy LLC (d/b/a OnePoint Patient Care LLC) may have impacted their private information could be eligible to claim up to $3,500 from a class action settlement.

OP Pharmacy LLC agreed to pay $2.12 million to settle a class action lawsuit alleging it failed to safeguard sensitive personal and medical information. The lawsuit claims unauthorized individuals accessed or acquired patient data, including names, addresses, facility locations and medical information, resulting in potential harm to affected individuals.

Who can file a claim?

Individuals are eligible to file a claim if they meet all of the following criteria:

• They are living individuals residing in the United States.
• Unauthorized threat actors may have accessed their private information during the Aug. 8, 2024, data incident involving OP Pharmacy LLC (d/b/a OnePoint Patient Care LLC).
• They received a notice from OnePoint indicating the breach may have impacted their private information.

The private information at issue includes, but is not limited to, names, addresses, facility locations and medical information belonging to current and former patients. The settlement administrator identified potential class members and sent them a notice.

How much can class members get?

Class members can claim one of two types of cash payments:

• Cash payment A – Documented losses: Up to $3,500 per class member for documented losses related to the data incident. This includes expenses such as bank fees, phone charges, postage, gasoline for local travel, and costs and fees for credit reports, credit monitoring or identity theft insurance products.
• Cash payment B – Alternate cash: Class members who do not have documented losses may claim an alternate cash payment estimated at $100. The settlement administrator may increase or decrease the actual amount depending on the total number of valid claims filed and the net settlement fund available.

How to claim a settlement payout

Class members can file a claim online or download and print the PDF claim form, complete it and mail it to the settlement administrator.

Settlement administrator's mailing address: OnePoint Data Incident Settlement Administrator, P.O. Box 2688, Portland, OR 97208-2688

The claim deadline is Oct. 8, 2026.

Is proof or documentation required to submit a claim?

Yes. For cash payment A (documented losses), class members must provide reasonable documentation of their losses or expenses related to the data incident. Acceptable documentation includes:

• Receipts
• Account statements
• Phone bills
• Other records showing the expense and its connection to the data incident

Self-prepared documents, such as handwritten receipts or personal certifications, are not sufficient by themselves, but class members can use them to clarify or support other documentation.

Payout options

• Paper check sent to mailing address
• Digital payment sent to email address

$2.12 million settlement fund breakdown

The $2,115,000 settlement fund will cover:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $705,000
• Attorneys' costs: To be determined
• Service awards for class representatives: Up to $2,500 each
• Payments to eligible class members: The remainder of the fund

Important dates

• Deadline to opt out of the settlement: Aug. 24, 2026
• Final approval hearing: Sept. 23, 2026
• Deadline to submit a claim form: Oct. 8, 2026

When is the OnePoint data breach settlement payout date?

The settlement administrator will issue payments to eligible class members after the court resolves any appeals and grants final approval of the settlement.

Why is there a class action settlement?

The class action lawsuit alleged unauthorized parties accessed or acquired OP Pharmacy LLC patients' private information during a data incident on Aug. 8, 2024. The plaintiffs claimed the defendant failed to adequately protect their sensitive data, resulting in lost privacy, diminished value of their information and time spent responding to the incident.

The defendant denies any wrongdoing but agreed to settle to avoid the risk, cost and time of continued litigation.

Sources

1. Claim form
2. Class notice
3. Settlement agreement
4. Settlement FAQ