Heritage Provider Network $49.99M Class Action Settlement

Current and former patients who received a notice in early 2023 that their personal or medical information may have been exposed in a data breach involving Heritage Provider Network or its affiliates, may qualify to claim a cash payment and medical monitoring, from a class action settlement. The settlement class consists of an estimated 3,413,000 individuals.

Heritage Provider Network Inc. and several affiliated medical entities, has agreed to pay $49,995,000 to settle a class action lawsuit. The lawsuit alleged that the defendants failed to adequately protect sensitive patient and member data, resulting in a large-scale data breach in December 2022. The breach potentially exposed names, Social Security numbers, addresses, dates of birth, medical information, and other personal details.

Who is eligible for a data breach payout?

Class members are individuals who receive a notice from Heritage Provider Network or its affiliates in or around February or March 2023 regarding the December 2022 data incident.

The settlement includes the following medical practices:

• Regal Medical Group
• Lakeside Medical Group
• ADOC Medical Group
• Greater Covina Medical Group
• Affiliated Doctors of Orange County Medical Group
• Arizona Priority Care
• Community Surgery Center of Glendale
• Pacific Family Hospice
• Valley’s Best Hospice

How much is the class action settlement payment?

Class members can submit to receive one or more of the following benefits:

• Identity theft monitoring: Class members can elect to receive three years of CyEx identity theft monitoring services, which includes credit monitoring, healthcare ID monitoring, dark web monitoring, $1 million identity theft insurance, and other features
• Monetary payment: All class members can submit to receive a pro rata cash payment from the remaining net settlement fund after any fraud/out-of-pocket and document time claims are paid. Final amount will be determined by the number of approved claims and is estimated between $68.72 and $357.97.
• Documented time payment: Class members can claim up to seven hours of time, at $30 per hour, spent dealing with issues traceable to the data breach, up to a total of $210. If total approved claims in this category exceed $1,000,000, payments will be reduced pro rata.
• Fraud/out-of-pocket costs payment: Class members can claim up to $10,000 for documented, unreimbursed losses or costs fairly traceable to the breach. This includes losses due to identity theft or fraud such as late fees, overdraft fees, card cancellation and replacement fees, costs of purchasing credit reports or freezing/unfreezing credit and any credit or medical monitoring services purchased after the data breach. If total claims in this category exceed $2,000,000, payments will be reduced pro rata.

How to claim a data breach class action rebate

To receive a settlement payment or identity theft monitoring, class members must submit a claim form by Dec. 22, 2025. Claims can be submitted in several ways:

• File a claim online using the online claim form
• Print and mail the PDF claim form to the settlement administrator
• Email an electronic image of the claim form to the settlement administrator

Settlement administrator's mailing address: Regal Medical Data Breach Litigation c/o Settlement Administrator P.O. Box 25412 Santa Ana, CA 92799-9958

Settlement administrator's email address: info@RegalMedicalSettlement.com

Required proof and claim information

• Unique ID and PIN from official settlement notice required to submit an online claim.
• Fraud/out-of-pocket cost claims require supporting documentation, such as credit card and bank statements, invoices for services, receipts, police report and other proof of identity theft and fraudulent transactions or loans.

Payout options

Claimants can choose to receive payment by:

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Paper check mailed to the address provided

$49.99 Million data breach settlement fund

The $49,995,000 settlement fund of $49,995,000 will include:

• Settlement administration costs: Between $2,450,000 and $4,210,804.83
• Attorneys' fees: Not to exceed $16,665,000
• Attorneys' expenses: Approximately $138,766.80
• Service awards to class representatives: $7,500 each for seven representatives, $52,500 total
• Payments to approved claimants: Remaining settlement funds

Identity theft monitoring services will be paid for by the defendants, separate from the settlement fund.

Important dates

• Opt out deadline: Nov. 24, 2025
• Claim deadline: Dec. 22, 2025
• Final approval hearing: Jan. 28, 2026

When is the Regal Medical Group settlement payout date?

Payments and identity theft enrollment instructions will be issued to approved claimants will be issued 60 days after the court grants final approval of the settlement or after claim processing is complete, whichever is later.

Why was there a class action settlement?

The class action lawsuit was filed after Heritage Provider Network and its affiliates announced in February 2023 that a December 2022 data breach had exposed the personal and medical information belonging to millions of members and patients. Plaintiffs alleged that the defendants failed to adequately protect this sensitive information, resulting in harm and risk of identity theft.

Heritage Provider Network and the medical groups involved deny any wrongdoing but agreed to settle to avoid further litigation and the possibility of a trial.

Sources

1. Official settlement website FAQs
2. Class notice
3. Official settlement agreement