Yale New Haven Health $18M Data Breach Settlement

Current and former patients who received a notice that their private information may have been affected by the Yale New Haven Health Services Corp. data breach discovered on March 8, 2025, may be eligible to submit a claim for up to $5,000 or an alternate cash payment, and medical data monitoring from a class action settlement.

Yale New Haven Health Services Corp. has agreed to pay $18,000,000 to settle a class action lawsuit claiming that the company failed to adequately protect personal and protected health information, which was exposed during a data breach involving unauthorized access to certain systems. The data incident affected as many as 5.3 million individuals.

The patient information that may have been compromised by the data breach included names, addresses, dates of birth, telephone numbers, email addresses, race or ethnicity, Social Security numbers, patient types and medical record numbers.

Who is eligible for a data breach class action payout?

Class members are living individuals residing in the United States who received a notice from Yale New Haven Health informing them that their personal information may have been affected by the data breach discovered on March 8, 2025.

How much is the settlement payment?

Claimants have the following claim options:

• Cash payment A – Documented losses: Class members can claim up to $5,000 for documented out-of-pocket losses traceable to the data breach. Eligible expenses include unreimbursed losses from fraud or identity theft, costs for freezing or unfreezing credit, and other related expenses such as notary, postage, copying and mileage.
• Cash payment B – Alternate cash: Class members that do not submit a documented losses claim can submit to receive an estimated $100 alternate pro rata cash payment. Final payment amount determined by the number of claims filed.
• Medical Data Monitoring: All class members can elect to receive two years of free medical data monitoring services.

How to claim a class action rebate

To claim a settlement payment, a claim form must be submitted by the deadline of February 18, 2026. Class members can file a claim online or print and mail the PDF claim form to the settlement administrator.

Settlement administrator's mailing address: Yale New Haven Health Data Incident Settlement Administrator, P.O. Box 5113, Portland, OR 97208-5113

Required proof and claim information

• Unique ID and PIN from settlement notice required to file a claim online or by mail.
• Documented losses claims require supporting documentation, which may include receipts or invoices for services, bank or credit card statements showing fees or unreimbursed fraudulent charges, correspondence or other records showing identity theft or fraud.
• Medical data monitoring claims require an email address in order to receive the benefit.

Payout options

Class members have the following payment options:

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Paper check mailed to the address provided on claim form

$18 million data breach settlement fund

The $18,000,000 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys’ fees: Up to $6,000,000
• Attorneys’ costs: To be presented to the court for approval at a later date
• Service awards to class representatives: Up to $2,500 each
• Medical data monitoring: Cost determined by number of claims filed
• Payments to approved claimant: Remaining settlement funds

Important dates

• Deadline to file a claim: Feb. 18, 2026
• Deadline to opt out: Jan. 20, 2026
• Final approval hearing: March 3, 2026

When is the Yale New Haven Health data breach settlement payout date?

Payments and medical monitoring codes will be issued to approved claimants approximately 60 days after the settlement is granted final approval or claim processing is completed.

Why did this class action settlement happen?

This class action lawsuit was brought after a criminal third party gained unauthorized access to certain systems of Yale New Haven Health Services Corp., potentially exposing personal and protected health information of many individuals. The defendant denies any wrongdoing or liability, and the court has not determined that any law was violated.

Both sides agreed to settle to avoid the uncertainty, expense and time associated with continued litigation. The settlement also requires the Yale New Haven Health to enhance its information security measures.

Sources

1. Class notice
2. Official settlement website FAQ page
3. Claim form