Onsite Mammography, LLC, d/b/a Onsite Women's Health agreed to pay $2.525 million after an email account breach exposed patient PII and PHI. Affected individuals can claim reimbursement, a pro rata cash payment, and free credit monitoring.

Google, Flo Health, and Flurry agreed to pay a combined $59.5 million to resolve claims that the Flo period-tracking app shared users' menstruation and pregnancy data without consent. Class members can file a claim online by October 15, 2026 for a pro rata share of the fund.

Legends Hospitality agreed to an $812,900 settlement over 2024–2025 cyberattacks that exposed customer data. Class members can claim documented losses up to $5,000, a no-proof ~$200 cash payment, and 3 years of credit monitoring.

American Multispecialty Group, Inc. d/b/a Esse Health agreed to a $2.525 million settlement after an April 2025 cyberattack exposed patient data. Class Members get two years of free medical identity protection and can claim an estimated $50 cash payment, no proof required, by August 4, 2026.

Memorial Heart Institute (d/b/a The Chattanooga Heart Institute) agreed to a $3.75 million settlement over a March 2023 data breach affecting ~460,000 patients. File a claim for documented losses up to $5,500, two years of free medical monitoring, and — if your SSN was exposed — a pro rata cash payment. Deadline: July 13, 2026.

Calibrated Healthcare agreed to a $1.75 million settlement over a February 2024 data breach affecting ~34,562 patients. All class members automatically receive 2 years of identity theft and medical monitoring plus a cash payment of $21–$29. File a claim by July 9, 2026 to get up to $5,175 more.

A $527,500 settlement resolves claims arising from a November 2023 cyberattack on Mount Kisco Surgery Center LLC that exposed patients' names, Social Security numbers, medical records, health insurance information, and financial account data. File by June 29, 2026 to claim an estimated $100 flat cash payment (no proof required) or up to $5,000 for documented out-of-pocket losses, plus two free years of credit monitoring.

IBJI's July 2024 data breach exposed the personal information of ~568,000 patients. If you received a breach notice, you can file for an estimated $50 cash payment, up to $5,000 in documented losses, or 2 years of Kroll Medical Monitoring. Deadline: July 1, 2026.

Cardiovascular Consultants Ltd. agreed to a $3.85 million settlement over a September 2023 data breach exposing patients' Social Security numbers, medical records, and health insurance information. Affected U.S. residents can claim an estimated $75 cash payment, up to $5,000 in documented out-of-pocket losses, and two years of medical monitoring. The claim deadline is July 1, 2026.

Complete Payroll Solutions agreed to a $2.6 million settlement over a March 2024 data breach exposing SSNs, financial data, and health insurance information. Notified individuals can claim up to $5,000 for documented losses, a ~$100 pro rata cash payment, and/or 3 years of credit monitoring — no documentation needed for the cash and monitoring options.

Bell Ambulance agreed to a $2 million settlement over a February 2025 cyberattack that exposed patients' and employees' names, Social Security numbers, medical records, and other protected health information. Eligible class members can claim up to $5,000 for documented losses, or a no-proof cash payment estimated at $90. The claim deadline is June 29, 2026.

Bayview Asset Management, Lakeview Loan Servicing, Pingora Loan Servicing, and Community Loan Servicing agreed to a $26 million settlement over a 2021 data breach. Current and former mortgage customers can file a free claim online by June 22, 2026 — no documentation required.

Two 2021 cyberattacks exposed the personal information of approximately 2.19 million Americans. Flagstar Bank has agreed to a $31.5 million settlement — class members can claim up to $25,000 for documented losses, an estimated $60 residual cash payment with no proof needed, and three years of free three-bureau credit monitoring. Deadline: August 11, 2026.

FMR LLC and Fidelity Brokerage Services LLC, the operating companies behind Fidelity Investments, have agreed to a $2.5 million class action settlement over an August 17 to 19, 2024 cyberattack on Fidelity's computer network that exposed customer information including names, Social Security numbers, financial account and routing numbers, and driver's license information. Class members can claim up to $5,000 in reimbursement for documented out-of-pocket losses tied to the incident, plus an approximately $100 pro rata cash payment with no proof required, plus an additional $50 California Consumer Privacy Act payment for California residents, plus two years of CyEx Financial Shield Complete credit monitoring with $1 million in financial-fraud insurance. Claims are due July 27, 2026.

Oak View Group, LLC, the global venue, hospitality, and sports and entertainment company that operates arenas, stadiums, and amphitheaters across North America, agreed to an $824,000 class action settlement over a November 2023 targeted cyberattack on its computer systems that exposed full names, dates of birth, Social Security numbers, demographic information, and driver's license or state or federal ID numbers. Class members can claim up to $5,000 in reimbursement for documented out-of-pocket losses, plus a one-time pro rata cash payment estimated at $150 for California residents and $50 for residents of other states, plus two years of CyEx Identity Defense Complete credit monitoring with $1 million in identity-theft insurance. Claims must be submitted by August 15, 2026.

Circle K agreed to a class action settlement over a May 2024 cyberattack that exposed names and Social Security numbers. U.S. residents who received notice can claim up to $2,000 in documented out-of-pocket losses (capped at $45,000 total) or a $50 alternate cash payment (first 700 claimants), plus two years of CyEx Financial Shield Complete credit monitoring with $1 million in fraud insurance. Claims are due September 3, 2026.

American International College agreed to a $315K settlement over its November 2023 data breach. Class members can claim up to $5,000 in documented losses, a pro rata cash payment (estimated around $50), and two years of CyEx credit monitoring with $1M fraud insurance. File by July 22, 2026.

Southern Illinois Healthcare reached a class action settlement over alleged tracking pixels on its MyChart portal and Health Risk Assessment pages. About 79,215 eligible patients can claim a $17.50 cash payment plus one year of CyEx Privacy Shield Pro by June 15, 2026.

LastPass agreed to an $8.2M Settlement Fund plus up to a $16.25M Crypto Pool over the 2022 data breach. Eligible account holders can claim a $25 payment with no proof, up to $10,000 in documented losses, $100 for California residents, or up to $900,000 for documented cryptocurrency losses. Claim deadline July 2, 2026.

A proposed class action settlement resolves claims that Maxar Space LLC and Maxar Space Robotics LLC failed to protect data exposed in an October 2024 cyberattack. U.S. residents can claim up to $3,500 in documented losses, $80 for lost time with no proof, and three years of credit monitoring. California residents can also claim an additional expected $100 CCPA payment. Claim deadline is July 16, 2026.