Pinehurst Radiology Data Breach Class Action Settlement

Individuals whose personal or health information the January 2025 Pinehurst Radiology Associates data breach may have compromised could be eligible to claim up to $500 and/or one year of free medical data monitoring from a class action settlement.

Pinehurst Radiology Associates PLLC agreed to settle a class action lawsuit alleging it failed to protect sensitive personal and health information during a targeted cyberattack in January 2025.

Who can file a claim?

The class includes all living individuals in the United States whose personally identifiable information or protected health information the January 2025 Pinehurst Radiology Associates data incident potentially compromised. The compromised PII and PHI may include:

• Names
• Addresses
• Dates of birth
• Social Security numbers
• Medical diagnoses
• Treatment information
• Medical record numbers
• Health insurance information
• Medicare or Medicaid numbers

Anyone who received a notice from Pinehurst Radiology Associates about the breach is likely included in the settlement. However, individuals who did not receive a notice but whose information the incident impacted may also qualify.

How much can class members get?

Class members may claim one or both of the following benefits:

• Cash reimbursement: Up to $500 for documented losses, including losses from identity theft or fraud; fees for credit reports, credit monitoring or freezing/unfreezing credit; costs to replace IDs; and postage to contact banks by mail
• Medical data monitoring: Available to all class members. No documentation required. Includes one year of CyEx Medical Shield Complete medical data monitoring, which includes $1 million in medical identity theft insurance and monitoring for health care insurance ID exposure, medical record number exposure and unauthorized health savings account spending and access to fraud resolution agent for assistance.

How to claim a class action payment

Class members can file a claim online or download, print and complete a PDF claim form and mail or email it to the settlement administrator. They can also request a claim form by calling, emailing or writing to the settlement administrator. The claim deadline is April 9, 2026.

Settlement administrator's contact information: Pinehurst Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226 Santa Ana, CA 92799, 833-647-8952, info@PinehurstRadiologySettlement.com

Necessary information and documentation

• To file an online claim, class members must log in with the unique ID and PIN located on the settlement notice they received. Those who are unable to locate their ID and PIN should contact the settlement administrator by emailing info@PinehurstRadiologySettlement.com and providing their full name and mailing address.
• To claim cash reimbursement for documented losses, class members must provide proof, such as bank statements, receipts or other documentation showing the amount spent or lost and how it relates to the data breach. They may submit self-prepared notes or papers to support other proof, but these documents are not sufficient on their own.
• No documentation is required to claim medical data monitoring.

Payout options

• Class members who file online may select a digital payment (PayPal, Venmo or Zelle).
• Class members who file by mail will receive a paper check at the address provided.

Settlement fund breakdown

The settlement fund covers:

• Settlement administration costs: To be determined
• Attorneys' fees and costs: $100,000
• Service awards to class representatives: $1,500 each ($3,000 total)
• Medical data monitoring: Dependent on number of valid claims
• Payments to class members: Not dependent on the above costs

Important dates

• Opt-out deadline: March 7, 2026
• Final approval hearing: April 6, 2026
• Claim deadline: April 9, 2026

When is the Pinehurst Radiology Associates settlement payout date?

The settlement administrator will distribute payments on or after June 8, 2026.

Why did this class action settlement happen?

This class action lawsuit alleged a targeted cyberattack on Pinehurst Radiology Associates' computer systems in January 2025 resulted in unauthorized access to files containing sensitive personal and health information. The plaintiffs claimed Pinehurst failed to adequately protect this information.

Pinehurst denies any wrongdoing, but both sides agreed to settle to avoid the costs, risks and uncertainties of continued litigation.

Sources

1. Class notice
2. Claim form
3. Settlement agreement
4. Settlement FAQ