
If you received a notice from the University of California San Diego Health (UCSDH) in or around September 2021 about a data security incident, you may be qualify to claim $33.94-$169.69, plus additional benefits, from a class action settlement.
The Regents of the University of California agreed to pay $2.95 million to settle a class action lawsuit for alleged failure to adequately protect patient information during a data breach involving unauthorized access to employee email accounts at UCSDH between Dec. 2, 2020, and April 8, 2021.
Who is eligible for a UCSDH data breach settlement payout?
You are a class member if:
- You received a notice from UCSDH in or around September 2021 regarding the data security incident.
- Your personal or health information was impacted by the data breach that occurred between Dec. 2, 2020, and April 8, 2021.
How much is the class action settlement payment?
Class members can submit for one or more of the following:
- Cash payment: A monetary payment, estimated at $33.94-$169.69, depending on the number of claims submitted
- Attested time: Up to $175 for up to seven hours of documented time spent addressing the data breach, at a rate of $25 per hour
- Out-of-pocket losses: Up to $10,000 for documented out-of-pocket losses related to the data incident
- Credit monitoring: Two years of Medical Shield Complete credit and medical monitoring and identity theft insurance services
How to claim a data breach class action rebate
To claim a settlement payment, you must file a claim form by July 31, 2025. You can file a claim online or print a PDF claim form, fill it out and mail it to the settlement administrator.
Settlement Administrator's mailing address: University of California San Diego Health Data Security Incident Litigation, PO Box 25291, Santa Ana, CA 92799
Required proof and information
- For an online claim, you must provide your unique ID and PIN from the settlement notice.
- To receive Medical Shield Complete credit and medical monitoring and identity theft insurance services, those who received a claim notice must provide a valid email address. If you did not receive a direct notice, you must provide your name and the last four digits of your Social Security number for eligibility verification.
- For documented time, you must provide reasonable documentation showing the time spent addressing the data breach, such as credit card statements, bank statements, invoices and receipts.
- For out-of-pocket losses, you must submit reasonable documentation for each claimed expense, such as receipts, statements, letters from financial institutions, etc.
Payout options
Claimants can choose to receive payment by:
- PayPal
- Venmo
- Zelle
- Paper check mailed to address provided
$2,950,000 data breach settlement fund breakdown
The settlement fund of $2,950,000 includes:
- Settlement administration costs: To be determined
- Attorneys' fees: Up to $1,200,000
- Service awards to class representatives: $7,500 each to three representatives for a total of $22,500
- Credit monitoring services: Cost determined by the number of claims submitted
- Payments to approved claimants: The remainder of the settlement fund
Important dates
- Opt-out Deadline: July 1, 2025
- Claim Deadline: July 31, 2025
- Final Approval Hearing: Oct. 3, 2025
When is the UCSD Health data breach settlement payout date?
Payments and benefits will be distributed approximately 60 days after the court grants final approval of the settlement or claim processing is complete.
Why did this class action settlement happen?
This class action lawsuit was filed because, between Dec. 2, 2020, and April 8, 2021, unauthorized parties accessed certain employee email accounts at UCSDH, exposing personal and health information of patients. Plaintiffs alleged that UCSDH failed to adequately protect this information.
The Regents of the University of California denies any wrongdoing but agreed to settle to avoid the risks and costs of continued litigation.
Comments