SAG-AFTRA Health Plan $950K Data Breach Settlement

Individuals who received notice by mail that the September 2024 SAG-AFTRA Health Plan data breach affected their private information could be eligible to claim up to $5,000 plus additional benefits from a class action settlement.

SAG-AFTRA Health Plan agreed to pay $950,000 to settle a class action lawsuit alleging it failed to adequately protect sensitive personal and health information, resulting in a data breach in September 2024. The cybersecurity incident compromised personally identifiable information and protected health Information belonging to an estimated 35,592 members.

Who can submit a claim for a data breach payout?

Class members are individuals who received a mailed notification indicating the data breach that occurred in SAG-AFTRA’s system between Sept. 17 and Sept. 18, 2024, may have impacted their private information.

California residents who resided in the state any time from Sept. 17, 2024 and July 23, 2026, who received notice of the data breach at a California address.

How much will settlement payments be?

• Out-of-pocket losses: Class members can claim up to $5,000 for documented unreimbursed monetary losses the data breach most likely caused. The losses must have occurred between Sept. 17, 2024, and July 23, 2026, and may include costs for credit monitoring, identity theft protection or other expenses.
• Pro rata cash payment: All class members can also submit a claim to receive a pro rata cash payment from the remaining net settlement fund after the settlement administrator pays all out-of-pocket losses. The administrator will determine the final payment amount by the total number of claims filed. The distribution is based on a share system:
• California residents who lived in California at any time from Sept. 17, 2024, and July 23, 2026, and received notice at a California address can submit a claim to receive two shares of remaining settlement funds.
• Non-California residents can submit a claim to receive one share of remaining settlement funds.

• Credit monitoring and identity protection: All class members will automatically receive 18 months of CyEx Medical Shield Complete or CyEx Minor Defense (for minors). Services include medical and health care data monitoring for signs of fraud and single-bureau credit monitoring.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form.pdf) to complete and mail to the settlement administrator.

Settlement administrator's mailing address: Claims Administrator – 83302+++, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391

The claim deadline is July 23, 2026.

Class members do not need to submit a claim form to receive credit monitoring and identity protection. They received enrollment instructions in the settlement notice.

Required proof and claim information

• All claims require the class member ID from the settlement notice the class member received.
• Out-of-pocket losses claims require supporting documentation showing the data breach most likely caused the loss. Another source cannot have reimbursed the losses, and claimants must have made reasonable efforts to seek reimbursement elsewhere. Proof may include receipts, invoices, bank or credit card statements showing unreimbursed fees or fraudulent charges and other proof of fraud or identity theft.

Payout options

• Electronic payment
• Paper check mailed to the address provided (only option for mailed claims)

$950,000 settlement fund

The settlement fund of $950,000 will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $316,350
• Attorneys’ expenses: To be presented to the court for approval at a later date
• Service awards to class representatives: $2,500 each
• Credit monitoring: Cost determined by number of eligible class members
• Payments to approved claimants: Remaining settlement funds

Important dates

• Opt-out deadline: June 23, 2026
• Deadline to file a claim: July 23, 2026
• Final approval hearing: Sept. 24, 2026

When is the SAG-AFTRA Health Plan data breach settlement payout date?

The settlement administrator will issue payments to approved claimants approximately 30 days after it completes claim processing or 60 days after the court grants final approval of the settlement, whichever is later.

Why did this class action settlement happen?

The class action lawsuit claimed an unauthorized third party accessed sensitive and confidential information through a SAG-AFTRA Health Plan employee email account in September 2024. The compromised data included names, Social Security numbers and, in some cases, health and insurance information. The plaintiffs alleged SAG-AFTRA Health Plan was responsible for the data breach and the resulting harm.

SAG-AFTRA denies the allegations but agreed to settle to avoid the expense and risk of continued litigation and a possible trial.

Sources

1. Class notice%20.pdf)
2. Settlement website FAQs
3. Claim form.pdf)