If you received a notice about the Capital Health data breach settlement, here is what you need to know right now: the claim filing deadline is April 6, 2026, eligible class members can receive up to $5,000 for documented losses or an estimated flat payment of around $100 with no documentation required, and payments will likely arrive sometime after July 14, 2026, once the court grants final approval. The settlement fund totals $4.5 million, and it covers more than 500,000 individuals whose personal information was potentially compromised when the LockBit ransomware group accessed Capital Health’s network between November 11 and 26, 2023.
If you were a patient, former patient, guarantor, or employee of Capital Health during the breach window, you are likely part of the affected class. Understanding the details now gives you the best chance of filing a valid claim before the deadline passes.
Table of Contents
- Who Is Eligible for the Capital Health Data Breach Settlement?
- What Are the Payment Options and How Much Can You Actually Expect?
- Key Deadlines You Cannot Afford to Miss
- How to File Your Claim Before the April 2026 Deadline
- When Will Payments Actually Arrive?
- What the LockBit Breach Actually Exposed
- What Happens After the Settlement Is Finalized
- Frequently Asked Questions
Who Is Eligible for the Capital Health Data Breach Settlement?
Eligibility covers anyone whose private information was potentially compromised during the capital Health data breach that occurred between November 11 and 26, 2023. That includes current and former patients, guarantors who were financially responsible for patient accounts, and Capital Health employees. If you received a notification letter from Capital Health or the settlement administrator, that is a strong indicator you are part of the class. But even if you did not receive a letter, you may still qualify if your data was in Capital Health’s systems during that period. The scope here is broad. The LockBit ransomware group claimed it exfiltrated over 10 million files totaling more than 7 terabytes of data.
The stolen information included names, addresses, Social Security numbers, dates of birth, email addresses, phone numbers, and clinical information. So if you visited a Capital Health facility or were employed there around that time, your data was likely in the pool of compromised records. For example, even a single outpatient visit in November 2023 could mean your intake paperwork, insurance details, and contact information were part of the breach. One important note: eligibility does not require proof that your specific data was actually misused. The standard is that your information was “potentially compromised,” which is a lower bar than proving identity theft actually occurred. This distinction matters because it means you can file a claim for the flat cash payment even if you have not experienced any fraud.
What Are the Payment Options and How Much Can You Actually Expect?
The settlement offers two cash payment options, and you must choose one. Option A is for people who have documented, unreimbursed losses tied to the breach. This covers things like identity theft costs, fraudulent charges, credit monitoring you paid for out of pocket, credit freeze and unfreeze fees, mileage for trips to deal with fraud-related issues, and postage. Under Option A, you can claim up to $5,000. Option B is a flat cash payment estimated at roughly $100 per person, available to class members who do not have documentation of specific losses. Every class member, regardless of which cash option they choose, also receives three years of free single-bureau credit monitoring valued at approximately $90 per year. However, those dollar figures come with a significant caveat.
The actual per-person amounts may be adjusted on a pro rata basis if the total value of valid claims exceeds the net settlement fund. With a $4.5 million fund and over 500,000 potentially eligible individuals, the math gets tight quickly. If a large number of people file claims, the flat payment under Option B could shrink below $100. Conversely, if relatively few people file, payments could remain at or near the estimated amounts. In most data breach settlements, the claim rate tends to be low — often under 10 percent — so there is a reasonable chance the per-person amounts hold close to estimates, but there are no guarantees. If you have even modest documentation of losses, Option A is almost certainly the better choice. A single credit monitoring subscription at $20 per month, combined with a few hours spent dealing with fraud alerts, can quickly exceed $100 in documented expenses. Keep receipts, bank statements, and any correspondence related to identity theft or fraud that you can tie back to the November 2023 breach window.
Key Deadlines You Cannot Afford to Miss
Three dates matter for this settlement. The opt-out and objection deadline is March 9, 2026. If you want to exclude yourself from the settlement and preserve your right to sue Capital Health independently, or if you want to formally object to the settlement terms, you must act before that date. The claim filing deadline is April 6, 2026. If you do not submit your claim by then, you get nothing from the settlement fund regardless of your eligibility. The final fairness hearing is scheduled for July 14, 2026, when the court will decide whether to grant final approval. For most people, the April 6 deadline is the one that matters.
Missing it means forfeiting your share entirely. For example, if you learn about the settlement in mid-March, you still have roughly three weeks to gather documentation and file. But waiting until the last few days is risky — the settlement website could experience high traffic, or you might realize you need bank statements or receipts that take time to obtain. Filing early eliminates that stress. The March 9 opt-out deadline is relevant only in narrow circumstances. If you suffered significant, well-documented losses far exceeding $5,000, opting out and pursuing an individual lawsuit might make sense. But for the vast majority of class members, the settlement payment plus three years of credit monitoring is a better deal than the cost, time, and uncertainty of independent litigation.
How to File Your Claim Before the April 2026 Deadline
Filing is done through the official settlement website at capitalhealthdatabreachsettlement.com. You will need to provide identifying information to verify your class membership, select either Option A or Option B for your cash payment, and submit supporting documentation if you choose Option A. The process is typically straightforward and can be completed online in under 15 minutes for an Option B claim. If you go with Option A, preparation matters. Before you start the claim form, gather all relevant documentation: credit card statements showing fraudulent charges, receipts for credit monitoring services, records of time spent on the phone with banks or credit bureaus, and any correspondence from companies notifying you of suspicious activity. The stronger your documentation, the less likely your claim is to be reduced or denied.
Compare this to Option B, where you simply attest that you were affected and collect the flat payment with no paperwork burden. The tradeoff is clear: more effort for potentially much more money under Option A, versus minimal effort for a smaller but guaranteed payout under Option B. One thing to watch for: make sure you are filing on the legitimate settlement website. Scam sites sometimes pop up around major settlements to harvest personal information. The official URL is capitalhealthdatabreachsettlement.com. If you received a mailed notice, it should contain this URL along with a unique claim ID number.
When Will Payments Actually Arrive?
Payments will not be distributed until after the court grants final approval at the July 14, 2026 hearing and all appeals are resolved. This means the earliest realistic window for receiving money is late 2026, and if any party appeals the settlement, it could stretch into 2027 or beyond. This timeline frustrates a lot of people, but it is standard for class action settlements of this size. The reason for the delay is procedural. After the final fairness hearing, the court must issue an order approving the settlement. There is then typically a window — often 30 to 60 days — during which objectors can file appeals.
Only after that window closes, or after any appeals are resolved, does the settlement administrator begin processing and mailing checks or issuing electronic payments. If you have filed claims in other data breach settlements, you have likely experienced similar timelines. The Equifax settlement, for instance, took years before most claimants received payment. Do not count on this money for any near-term financial needs. Treat it as something that will arrive eventually, and consider the three years of credit monitoring as the more immediately valuable benefit. You can activate the monitoring as soon as it becomes available, which may happen before cash payments go out.
What the LockBit Breach Actually Exposed
The details of this breach are worth understanding because they affect how seriously you should take your own exposure. LockBit, one of the most prolific ransomware groups in recent years, accessed Capital Health’s network for a 16-day window in November 2023. Unusually, the group claimed it deliberately chose not to encrypt Capital Health’s files, stating it did not want to disrupt patient care. Instead, it only exfiltrated data — meaning it copied and stole the files rather than locking them down.
This distinction matters for affected individuals. Because the data was stolen rather than just encrypted, it is out in the wild. Over 7 terabytes of information, including clinical records and Social Security numbers, potentially circulated through criminal networks. If you have not already placed a fraud alert or credit freeze on your accounts, doing so now is a practical step regardless of the settlement. The settlement’s three-year credit monitoring benefit is helpful, but a credit freeze — which is free — provides stronger protection against new accounts being opened in your name.
What Happens After the Settlement Is Finalized
Once final approval is granted and payments are distributed, the settlement will release Capital Health from further liability related to this specific breach. That means class members who do not opt out will not be able to sue Capital Health over the November 2023 incident in the future. For most people, this is a reasonable trade — the settlement provides concrete compensation now rather than years of uncertain litigation.
Looking ahead, settlements like this one are becoming more common as ransomware attacks on healthcare systems continue to escalate. The $4.5 million fund, while substantial, works out to less than $10 per affected person if everyone filed. This reflects a broader tension in data breach litigation: the harm is real and widespread, but the per-person compensation often feels modest relative to the scope of the exposure. If you are part of this class, file your claim before April 6, 2026, activate the credit monitoring when it becomes available, and keep monitoring your accounts for the foreseeable future.
Frequently Asked Questions
Do I need proof that my data was actually stolen to file a claim?
No. Eligibility is based on your information being “potentially compromised” during the breach. You do not need to prove your specific records were accessed or misused.
Can I file for both Option A and Option B?
No. You must choose one cash payment option. Option A is for documented losses up to $5,000, and Option B is a flat payment of approximately $100. However, all class members receive the three-year credit monitoring benefit regardless of which cash option they select.
What if I already paid for my own credit monitoring after the breach?
That cost may be reimbursable under Option A. Keep your receipts and subscription records, as out-of-pocket credit monitoring expenses are specifically listed as a covered loss category.
Will the $100 flat payment definitely be $100?
Not necessarily. The amount is an estimate and may be adjusted pro rata if total valid claims exceed the net settlement fund. If fewer people file, the amount could stay near $100 or potentially be higher. If many people file, it could be reduced.
What happens if I miss the April 6, 2026 deadline?
You will not receive any cash payment from the settlement. There are generally no extensions for individual claimants, so filing before the deadline is essential.
Should I opt out of the settlement?
For most class members, opting out does not make financial sense. The opt-out route preserves your right to sue independently, but individual litigation is expensive, time-consuming, and uncertain. Opting out is typically only worth considering if your documented losses substantially exceed the $5,000 cap under Option A.