Valley Mountain Regional Center $2.2M Data Breach Settlement

Consumers who were notified by Valley Mountain Regional Center Inc. about an August 2023 data breach may qualify to claim up to $5,000 from a class action settlement.

Valley Mountain Regional Center agreed to pay $2.2 million to settle a class action lawsuit regarding an August 2023 cybersecurity incident. The lawsuit alleged VMRC failed to adequately protect private information, resulting in a data breach that potentially exposed names, health insurance details and clinical information of individuals.

Who is eligible to file a data breach claim?

Class members must meet the following criteria:

• They received a notification in the mail from Valley Mountain Regional Center about the August 2023 data breach.
• Their private information was potentially compromised in the incident, which VMRC disclosed in or around April 2024.

How much is the Valley Mountain Regional Center payout?

• Reimbursement for documented losses: Up to $5,000 per class member for out-of-pocket losses directly related to the data breach. Eligible losses include:
• Unreimbursed losses from fraud or identity theft
• Professional fees (such as attorneys, accountants or credit repair services)
• Costs for freezing or unfreezing credit
• Credit monitoring costs
• Miscellaneous expenses (notary, postage, copying, mileage)

• Flat cash payment: Alternatively, class members may claim a flat cash payment of $100. This amount is subject to pro rata adjustment depending on the number of valid claims and the net settlement fund remaining after other costs.

How to claim a cybersecurity incident class action rebate

Class members can file an online claim form or download, print and complete the PDF claim form and mail it to the settlement administrator.

Settlement administrator's mailing address: Brett et al. v. Valley Mountain Regional Center Inc., c/o CPT Group Inc., 50 Corporate Park, Irvine, CA 92606

Proof and documentation required

• Class members must provide the CPT ID from from the settlement notice they received. Online claimants must also provide the passcode from this notice. Those who do not have a CPT ID and/or passcode should email the settlement administrator at VMRCDataSettlement@cptgroup.com.
• Class members claiming reimbursement for documented losses (up to $5,000), must provide supporting documentation, such as receipts, bills or other proof of expenses. Self-prepared documents (like handwritten receipts) alone are not sufficient but may help clarify the claim.

Payout options

• Claimants who file online can choose to receive a digital payment or paper check.
• Claimants who file by mail will receive a physical check mailed to the address they provide.

$2.2 million Valley Mountain Regional Center settlement fund breakdown

The $2,200,000 settlement fund covers:

• Settlement administration costs: $350,000
• Attorneys' fees: Up to $733,260
• Attorneys' costs: To be determined
• Service awards to class representatives: $2,500 each ($7,500 total)
• Payments to eligible class members: Remainder of the fund

Important dates

• Claim deadline: Aug. 15, 2025
• Exclusion deadline: Aug. 15, 2025
• Final fairness approval hearing: Aug. 28, 2025

When is the Brett et al. v. Valley Mountain Regional Center payout date?

Payments will be issued approximately 30 days after the court grants final approval of the settlement and any appeals are resolved.

Why did this class action settlement happen?

The class action settlement alleged Valley Mountain Regional Center failed to adequately protect private information during a cyberattack in August 2023. The plaintiffs alleged VMRC was responsible for the data breach and the exposure of sensitive information.

VMRC denies all allegations but agreed to the settlement to avoid the costs and uncertainty of further litigation.

Sources

1. Class notice
2. Settlement agreement