Sunflower Medical Group $1.2M Data Breach Settlement

Individuals whom Sunflower Medical Group, P.A. notified that a December 2024 data breach involved their private information may be eligible to submit a claim for up to $5,000 and medical data monitoring from a class action settlement.

Sunflower Medical Group agreed to pay up to $1,200,000 to settle a class action lawsuit alleging a targeted cyberattack on its computer systems exposed personal information, including names, Social Security numbers and dates of birth.

Who can file a data breach claim?

Class members include individuals residing in the United States who received notice that the Sunflower Medical Group cybersecurity incident that occurred in December 2024 potentially exposed their personally identifiable information or protected health information.

How much can class members get?

• Out-of-pocket expense reimbursement: Up to $5,000 per person for documented, unreimbursed expenses fairly traceable to the data incident. Eligible expenses include:
• Losses due to identity theft or fraud
• Fees for credit reports, credit monitoring or freezing and unfreezing credit incurred between Dec. 15, 2024, and March 26, 2026
• Costs to replace identification documents
• Postage to contact banks by mail

• Alternative cash payment: An estimated $10 per person available to class members who do not submit a documented loss claim
• Medical data monitoring: Two years of complimentary medical data monitoring services, plus $1 million identity theft insurance available to all class members

The settlement administrator may adjust the alternative cash payment on a pro rata basis depending on the number of valid claims filed to ensure the total payout aligns with a $300,000 cap.

How to claim a class action payment

To receive a settlement payment, class members can file a claim online or download a PDF claim form to fill out and mail to the settlement administrator. The deadline to submit a claim is Mar. 26, 2026.

• Settlement administrator’s mailing address: Sunflower Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958
• Settlement administrator’s email address: info@SunflowerSettlement.com

Class members may also request a paper claim form by calling 833-417-4945 or emailing the administrator.

Required proof and claim information

• Claimants submitting an online claim must provide the login ID and PIN from the settlement notice they received.
• Claimants seeking reimbursement for documented losses must provide third-party documentation, such as bank statements or receipts, to verify the claimed losses.
• Claimants seeking the alternative cash payment do not need to provide any proof or explanation.

Payout options

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Physical check

Sunflower Medical Group $1.2M settlement fund breakdown

The $1,200,000 settlement fund includes:

• Settlement administration costs: To be determined
• Attorneys’ fees: Up to $600,000
• Service awards to class representatives: $22,100 total
• Payments to approved claimants: Up to $300,000

Important dates

• Opt-out deadline: Jan. 26, 2026
• Final approval hearing: Mar. 6, 2026
• Deadline to file a claim: Mar. 26, 2026

When is the Sunflower Medical Group data breach settlement payout date?

The settlement administrator will distribute payments to class members after the court grants final approval and resolves any appeals.

Why is there a class action settlement?

The class action lawsuit alleged a targeted cyberattack on Sunflower Medical Group's computer systems in December 2024 allowed unauthorized access to files containing private information.

Sunflower Medical Group denies any wrongdoing. Both sides agreed to settle the lawsuit to avoid the costs, risks and uncertainties of continued litigation.

Sources

1. Class notice
2. Settlement website FAQ page
3. Claim form