Yale New Haven Health $18M Data Breach Settlement

Current and former patients who received a notice that the Yale New Haven Health Services Corp. data breach discovered on March 8, 2025, may have affected their private information could be eligible to submit a claim for up to $5,000 and medical data monitoring from a class action settlement.

Yale New Haven Health Services Corp. agreed to pay $18,000,000 to settle a class action lawsuit claiming it failed to adequately protect personal and protected health information. The data incident affected as many as 5.3 million individuals.

The potentially compromised patient information included names, addresses, dates of birth, telephone numbers, email addresses, race or ethnicity information, Social Security numbers, patient types and medical record numbers.

Who is eligible for a data breach class action payout?

Class members are living individuals residing in the United States who received a notice from Yale New Haven Health informing them that the data breach discovered on March 8, 2025, may have affected their personal information.

How much is the settlement payment?

Claimants have the following claim options:

• Cash payment A – Documented losses: Class members can claim up to $5,000 for documented out-of-pocket losses traceable to the data breach. Eligible expenses include unreimbursed losses from fraud or identity theft, costs for freezing or unfreezing credit and other related expenses, such as notary, postage, copying and mileage.
• Cash payment B – Alternate cash: Class members who do not submit a documented losses claim can submit a claim to receive an estimated $100 alternate pro rata cash payment. The settlement administrator will determine the final payment amount by the number of claims filed.
• Medical data monitoring: All class members can elect to receive two years of free medical data monitoring services.

How to claim a class action rebate

To claim a settlement payment, class members must submit a claim form by the deadline of Feb. 18, 2026. Class members can file a claim online or print and mail the PDF claim form to the settlement administrator.

Settlement administrator's mailing address: Yale New Haven Health Data Incident Settlement Administrator, P.O. Box 5113, Portland, OR 97208-5113

Required proof and claim information

• To file a claim online or by mail, class members must provide the unique ID and PIN from the settlement notice.
• Documented losses claims require supporting documentation, which may include receipts or invoices for services, bank or credit card statements showing fees or unreimbursed fraudulent charges, correspondence or other records showing identity theft or fraud.
• Medical data monitoring claims require an email address to receive the benefit.

Payout options

Class members have the following payment options:

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Paper check mailed to the address provided on claim form

$18 million data breach settlement fund

The $18,000,000 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys’ fees: Up to $6,000,000
• Attorneys’ costs: To be presented to the court for approval at a later date
• Service awards to class representatives: Up to $2,500 each
• Medical data monitoring: Cost determined by number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Deadline to opt out: Jan. 20, 2026
• Deadline to file a claim: Feb. 18, 2026
• Final approval hearing: March 3, 2026

When is the Yale New Haven Health data breach settlement payout date?

The settlement administrator will issue payments and medical monitoring codes to approved claimants approximately 60 days after the court completes claim processing and grants final approval to the settlement.

Why did this class action settlement happen?

This class action lawsuit alleged a criminal third party gained unauthorized access to certain systems of Yale New Haven Health Services Corp., potentially exposing personal and protected health information of many individuals.

The defendant denies any wrongdoing or liability. Both sides agreed to settle to avoid the uncertainty, expense and time associated with continued litigation. The settlement also requires the Yale New Haven Health to enhance its information security measures.

Sources

1. Class notice
2. Official settlement website FAQ page
3. Claim form