Rancho Family Medical Group $315K Data Breach Settlement

Current and former patients whom Rancho Family Medical Group notified that a November 2023 data breach involving service provider KMJ Health may have impacted their personal and protected health information could be eligible to submit a claim for up to $10,000 for out-of-pocket losses and three years of credit monitoring from a class action settlement.

Rancho Family Medical Group agreed to pay $315,000 to settle a class action lawsuit regarding allegations it failed to adequately protect patient data during a breach of its service provider, KMJ Health Service, in November 2023.

Who can file a claim for a data breach payout?

Class members are individuals who reside in the United States and whom Rancho Family Medical Group notified that the KMJ Health cybersecurity incident in November 2023 compromised their personal and protected health information.

How much is the class action settlement payment?

All class members will receive the following benefits:

• Pro rata cash payment: All eligible class members will receive a pro rata cash payment of up to $1,000 per person. The settlement administrator will determine the final payment amount using the total number of claims filed and remaining settlement funds. No claim form is required to receive this payment.
• Credit monitoring and identity theft protection: All class members will also receive a redemption code for three years of credit monitoring and identity theft protection services provided they enroll by the deadline included with the enrollment code. No claim form is required to receive this benefit.

All class members can also submit a claim to receive additional benefits:

• Out-of-pocket losses: Class members can submit a claim to receive up to $10,000 for documented, unreimbursed expenses traceable to the KMJ data breach. Eligible expenses include unreimbursed losses relating to fraud or identity theft, professional fees (such as attorneys’ or accountants’ fees), costs associated with freezing or unfreezing credit, credit monitoring costs incurred after the incident and miscellaneous expenses, including notary, postage, copying and mileage.
• Attested time: Class members can also claim up to $68, calculated at $17 per hour, for up to four hours of time spent dealing with issues related to the KMJ Health data breach. This may include changing passwords, monitoring or investigating suspicious activity, contacting providers or financial institutions or researching the incident.

How to claim a data breach class action rebate

To receive a settlement payment for out-of-pocket losses or attested time, class members can file the online claim form or download, print, complete and mail the PDF claim form. The claim deadline is Dec. 29, 2025.

Class members do not need to submit a claim to receive the pro rata cash payment or credit monitoring and identity theft protection.

Settlement administrator's mailing address: RFMG Data Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

Required proof and claim information

• All class members must provide the unique ID from the settlement notice they received. To file an online claim, they must also provide the PIN from the same notice.
• To claim out-of-pocket losses, class members must include supporting documentation, such as receipts, invoices for CPA or attorney services, bank or credit card statements showing unreimbursed expenses or fraudulent transactions, police reports or other proof of identity theft.
• To claim attested time, class members only need to select the appropriate option on the claim form.

Payout options

• PayPal
• Venmo
• Zelle
• E-Mastercard
• Physical check

$315,000 settlement fund breakdown

The $315,000 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $105,000
• Attorneys' expenses: $5,000
• Service award to class representative: $5,000
• Pro rata cash payments to class members: Remaining settlement funds
• Payments to approved claimants: Cost determined by the number of valid claims filed

Rancho Family Medical Group will pay credit monitoring costs separately from the settlement fund.

Important dates

• Deadline to file a claim: Dec. 29, 2025
• Opt-out deadline: Dec. 29, 2025
• Final approval hearing: Jan. 28, 2026

When is the Rancho Family Medical Group data breach settlement payout date?

The settlement administrator will issue payments after it completes claim processing and the court grants final approval of the settlement.

Why is there a class action settlement?

The class action lawsuit alleged a data breach at KMJ Health Service, a service provider for Rancho Family Medical Group, exposed personal information belonging to patients. The plaintiff alleged RFMG failed to adequately protect sensitive information.

Rancho Family Medical Group denies these allegations but agreed to settle to avoid the risks and expense of further litigation.

Sources

1. Official settlement notice
2. Settlement website FAQ page
3. PDF claim form