Orthopedics Rhode Island $2.9M Data Breach Settlement

Individuals who received a notice stating the Orthopedics Rhode Island Inc. data incident that occurred in September 2024 may have compromised their personal information could be eligible to claim up to $5,000 from a class action settlement.

Orthopedics Rhode Island Inc. agreed to pay $2.9 million to settle a class action lawsuit alleging it failed to adequately protect patient data, resulting in a ransomware attack that exposed sensitive information, including names, addresses, dates of birth, billing and claims details, health insurance data and medical records.

Who is eligible to file a claim?

Class members must meet all of the following criteria:

• They are a living individual residing in the United States.
• They received a notice from Orthopedics Rhode Island Inc. informing them their private information may have been impacted by the September 2024 data incident.

How much is the class action payout?

Eligible class members who submit valid claims may receive one or more of the following benefits:

• Cash Payment A – Documented losses: Up to $5,000 per person for documented losses related to the data incident
• Cash Payment B – Alternate cash: As an alternative to Cash Payment A, class members can elect to receive an estimated $100 cash payment.
• Medical record monitoring: In addition to either cash payment, class members may claim two years of CyEx Medical Shield Ultra Medical Record Monitoring at no cost.

The settlement administrator may reduce cash benefits on a pro rata basis if total claims exceed the available settlement fund.

How to claim a settlement payment

Class members can file a claim online or download, print and complete the PDF claim form and mail it to the settlement administrator. The claim deadline is Jan. 13, 2026.

Settlement administrator's mailing address: ORI Data Incident Settlement Administrator, P.O. Box 3654, Baton Rouge, LA 70821

What proof or documentation is necessary to submit a claim?

• All class members must provide their settlement claim ID to submit a claim.
• For Cash Payment A (up to $5,000 for documented losses), class members must submit reasonable documentation of their losses, such as receipts, billing statements or correspondence related to the data incident.
• For Cash Payment B (estimated $100), class members do not need no documentation but must attest to their eligibility as a class member.
• For medical record monitoring, class members need only select the appropriate option.

Payout options

• Venmo
• Zelle
• Physical check
• Medical record monitoring activation code

$2.9 million settlement fund breakdown

The $2,900,000 settlement fund includes:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $966,570
• Attorneys' costs: To be determined
• Service awards to class representatives: Up to $4,000 each
• Payments to eligible class members: Remainder of the fund

Important dates

• Exclusion (opt-out) deadline: Dec. 29, 2025
• Deadline to file a claim: Jan. 13, 2026
• Final approval hearing: Jan. 28, 2026

When is the Orthopedics Rhode Island settlement payout date?

The settlement administrator will distribute payments no later than 75 days after the court grants final approval or 30 days after it resolves all appeals, whichever is later.

Why is there a class action settlement?

The class action lawsuit alleged Orthopedics Rhode Island Inc. failed to adequately protect patient information, resulting in a ransomware attack between Sept. 4 and Sept. 8, 2024. The plaintiffs claimed the breach exposed sensitive data, including medical records and personal identifiers.

The company denied any wrongdoing but agreed to settle to avoid the risks and costs of further litigation.

Sources

1. Class notice
2. Claim form
3. Settlement agreement
4. Settlement FAQ