Rocky Mountain Gastroenterology Data Breach Settlement
Rocky Mountain Gastroenterology Data Breach Settlement
Published
December 8, 2025 12:43 PM
Updated
December 8, 2025

Individuals who received a notification from Rocky Mountain Gastroenterology Associates PLLC about a September 2024 data incident may be eligible to claim up to $1,000 in reimbursement for documented losses and two years of credit and medical identity monitoring from a class action settlement.

Rocky Mountain Gastroenterology Associates PLLC agreed to settle a class action lawsuit alleging it failed to implement and maintain reasonable security measures to protect private information, which resulted in a cyberattack in September 2024 that potentially exposed sensitive data.

Who can file a claim?

Individuals must meet the following criteria:

  • They reside in the United States.
  • They received a notification from Rocky Mountain Gastroenterology Associates PLLC by mail or email stating an unauthorized party may have accessed or acquired their private information during the September 2024 data incident.

Additional details:

  • The class includes both adults and minors. Parents or guardians may submit claims on behalf of minors who received a notification.
  • The class covers all individuals whose private information the September 2024 incident potentially compromised.

How much can class members get?

Eligible class members may receive:

  • Up to $1,000 in reimbursement for documented out-of-pocket losses fairly traceable to the data incident. Examples of eligible losses include:
    • Unreimbursed costs, expenses, losses or charges incurred as a result of identity theft or fraud, falsified tax returns or other misuse of private information
    • Credit monitoring costs
    • Unreimbursed bank fees
    • Postage or gasoline for local travel related to mitigating the effects of the data incident

To qualify, losses must be:

  • Actual, documented and unreimbursed
  • Most likely caused by the data incident
  • Incurred between Sept. 1, 2024, and Feb. 2, 2026
  • Not reimbursed by other means (such as insurance)
  • Two years of credit and medical identity monitoring through Cyex’s Medical Shield Complete product, which includes one-bureau credit monitoring and medical information monitoring

How to claim a class action payment

Class members can complete the online claim form or download and print the PDF claim form, complete it and mail it to the settlement administrator. The claim deadline is Feb. 2, 2026.

Settlement administrator's mailing address: RMG Data Incident, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

What proof or documentation is required to submit a claim?

To file an online claim, class members must log in with the unique ID and PIN from the settlement notice they received. Mailed claims require only the unique ID. Those who are unable to locate their ID and PIN should contact the settlement administrator by emailing info@RockyMountainSettlement.com or calling 833-417-4917 and providing their full name and mailing address.

Class must also provide documentation to support their claim for reimbursement. Required documentation includes:

  • Receipts or other non-self-prepared documentation showing reasonable costs actually incurred
  • A description of how the loss is fairly traceable to the data incident (if not obvious from the documentation)

Self-prepared documents, such as handwritten receipts, are not sufficient on their own, but class members may submit them to clarify or support other documentation.

To file on behalf of a minor, the parent or guardian should indicate their relationship and provide the minor’s information.

Payout options

  • The settlement administrator will mail checks to approved claimants.
  • It will provide credit and medical monitoring codes to all class members with a valid address or email.

Settlement fund breakdown

The settlement fund will cover:

  • Settlement administration costs: To be determined
  • Attorneys' fees and costs: Up to $500,000
  • Service awards to class representatives: $1,500 each for seven representatives ($10,500 total)
  • Credit and medical monitoring: Cost determined by number of valid claims
  • Payments to eligible class members: Up to $1,000 per person

Important dates

  • Opt-out deadline: Jan. 2, 2026
  • Final approval hearing: Jan. 23, 2026
  • Claim deadline: Feb. 2, 2026

When is the Rocky Mountain Gastroenterology Associates PLLC settlement payout date?

The settlement administrator will issue payments after the court resolves any appeals and grants final approval to the settlement.

Why did this class action settlement happen?

The class action lawsuit alleged that Rocky Mountain Gastroenterology Associates PLLC failed to implement and maintain reasonable security measures to protect private information, leading to a data breach in September 2024.

The defendant denies any wrongdoing but agreed to settle to avoid the uncertainty, risks and expense of ongoing litigation.

Sources

  1. Class notice
  2. Claim form
  3. Settlement agreement
  4. Settlement FAQ
Settlement Open for Claims
Award:
Up to $1,000 plus two years of credit and medical identity monitoring
Deadline:
February 2, 2026
SUBMIT CLAIM