Americans affected by healthcare data breach may claim up to $5,000 in settlement payments

Americans may still be able to claim as much as $5,000 from a multimillion-dollar settlement, but the deadline is approaching fast.

Modernizing Medicine Inc. has agreed to pay $2.99 million after allegations that it failed to adequately protect sensitive patient data in a breach.

The lawsuit says Social Security numbers, health insurance information and medical records were exposed in a breach that took place in July 2025.

Although the company has denied any wrongdoing, it agreed to the settlement to resolve the case.

Under the deal, eligible claimants may receive a cash payment along with two years of free credit monitoring.

People who can document losses tied to the breach may be eligible for up to $5,000.

Covered losses include identity theft, fraud, credit-related charges, the cost of replacing identification cards and postage expenses used to contact banks by mail.

Claimants with losses that are not documented may qualify for a one-time estimated payment of $75.

Final payments could be adjusted upward or downward depending on how many claims are submitted.

The credit monitoring package includes $1 million in identity theft insurance, real-time alerts, dark web scanning and additional protections.

A final approval hearing is set for November 17.

To obtain settlement benefits, class members must file a valid claim form by November 2.

Supporting proof of loss should include reasonable documentation such as phone records, correspondence or receipts.

Self-prepared materials, including a personal certification, declaration or affidavit, may also be submitted to help explain or clarify a claim.

Modernizing Medicine is a healthcare technology company that offers a cloud-based electronic health records platform designed for specific specialties, along with revenue cycle management services.

Another healthcare company is also preparing to pay out thousands of dollars to resolve a class action in Nebraska.

Baptist Health has agreed to a similar settlement after claims that a cyberattack exposed sensitive patient information, including names, addresses and medical details.

The lawsuit accused Baptist Health of failing to use reasonable cybersecurity measures to protect patient personal data.

Baptist Health, a private, faith-based, not-for-profit healthcare system, operates medical centers across Arkansas.

Patients affected by the incident may claim up to $4,000 for documented losses connected to the breach.

The healthcare provider has not admitted any wrongdoing, but it agreed to pay an undisclosed amount to settle the dispute.