The Capital Health Data Breach Settlement offers affected individuals an estimated $100 pro rata cash payment with no documentation required, or up to $5,000 for those who can prove out-of-pocket losses tied to the breach. The $4.5 million settlement fund resolves claims stemming from a November 2023 LockBit ransomware attack that exposed the personal information of 503,071 people treated at Capital Health facilities in New Jersey and Pennsylvania. But that estimated $100 figure is not guaranteed — it could shrink considerably depending on how many people file claims. This matters because pro rata settlements are a gamble by design.
If only a fraction of eligible claimants file, the per-person payout could exceed estimates. If a surge of claims rolls in before the April 6, 2026 deadline, that number drops fast. For someone who spent $300 on a credit monitoring service after getting the breach notification letter, the documented loss route (Option A) is almost certainly the better play.
Table of Contents
- How Much Will You Actually Get From the Capital Health Data Breach Settlement?
- What Were the Capital Health Data Breach Details and Who Is Eligible?
- Understanding the Pro Rata Payment Structure and Why Estimates Shift
- Option A vs. Option B — Which Capital Health Settlement Payment Should You Choose?
- Key Deadlines and What Happens If You Miss Them
- How LockBit Ransomware Attacks Impact Settlement Valuations
- What Comes After the Final Fairness Hearing
- Frequently Asked Questions
How Much Will You Actually Get From the Capital Health Data Breach Settlement?
The settlement creates two distinct payment options for class members. Option A covers documented, unreimbursed out-of-pocket losses up to $5,000 per person. This includes expenses like identity theft remediation costs, fees paid for credit monitoring or freezes, unauthorized charges tied to the breach, and time spent dealing with fraud. You will need receipts, bank statements, or other proof. Option B is the simpler route — a flat pro rata cash payment estimated at roughly $100, available to anyone in the class without submitting documentation.
The key word in that estimate is “approximately.” The $4.5 million fund has to cover attorney fees, settlement administration costs, and service awards to the named plaintiffs before a single dollar reaches class members. In data breach settlements of this size, legal fees alone often consume 25 to 33 percent of the total fund, which could reduce the available pool to somewhere between $3 million and $3.4 million. Divide that among tens of thousands of claimants and the per-person figure shifts fast. To put it in concrete terms: if 30,000 people file for the pro rata payment and $3.2 million remains after fees, each person gets about $107. If 100,000 people file, that drops to $32. The settlement administrators cannot predict turnout in advance, which is why the $100 figure is presented as an estimate rather than a promise.
What Were the Capital Health Data Breach Details and Who Is Eligible?
Between November 11 and November 26, 2023, the LockBit ransomware group infiltrated Capital Health Systems’ network. The attackers encrypted files across the system and exfiltrated an alleged 7 terabytes of data. LockBit later threatened to publish the stolen information on January 9, 2024 if Capital Health did not pay the ransom. Capital Health operates hospitals and medical facilities across New Jersey and Pennsylvania, and the breach affected a wide range of patient and employee records. The breach was reported to the U.S. Department of Health and Human Services Office for Civil Rights as impacting 503,071 individuals.
If you received a notification letter from Capital Health about the incident, you are almost certainly a class member in *In re Capital Health Data Breach Litigation*. However, receiving a letter is not the only path — if you were a patient or had records in Capital Health’s system during the relevant period and your information was compromised, you may still qualify even if the letter went to an old address or got lost. One important limitation: eligibility alone does not guarantee payment. You must actively file a claim before the April 6, 2026 deadline. Data breach settlements routinely see claim rates below 10 percent of the affected class. If you do nothing, you get nothing — and you also release your individual legal claims against Capital Health.
Understanding the Pro Rata Payment Structure and Why Estimates Shift
Pro rata distribution means the available money is divided equally among all valid claimants. Unlike settlements that guarantee a fixed dollar amount per person, this structure ties your payout directly to how many other people file. The settlement website’s $100 estimate reflects a projection based on anticipated claim rates, but actual data breach claim rates vary wildly depending on media coverage, the severity of the breach, and how easy the claims process is. Consider a comparison. The Equifax data breach settlement initially estimated $125 per person for the cash payment option. After an overwhelming number of claims poured in — driven by viral social media attention — that figure collapsed.
Claimants who chose cash ended up receiving far less than the headline number. The Capital Health settlement is smaller in scale, but the same dynamic applies. A local news story going viral in the New Jersey and Pennsylvania markets could drive a spike in filings that cuts into every claimant’s share. The three years of free credit monitoring included in the settlement, valued at approximately $90 per year or $270 total, does not come out of your cash payment. It is a separate benefit available to all class members regardless of which payment option they choose. For some people, particularly those who are not currently paying for monitoring, the credit monitoring alone may represent more tangible value than the cash payment.
Option A vs. Option B — Which Capital Health Settlement Payment Should You Choose?
The choice between Option A (documented losses up to $5,000) and Option B (pro rata cash payment) depends entirely on whether you have paperwork showing breach-related expenses. If you paid for identity theft protection services, spent money replacing compromised documents, or suffered unauthorized charges that were not fully reimbursed by your bank, Option A is the stronger path. A claimant who paid $40 per month for two years of credit monitoring after the breach, for example, has $960 in documented costs that clearly exceeds any realistic pro rata payment. Option B makes sense for class members who did not incur measurable financial losses but still had their data exposed. The tradeoff is simplicity versus potential size: Option B requires minimal effort but caps your recovery at whatever the pro rata amount turns out to be.
Option A demands time gathering receipts and completing a more detailed claim form, but it unlocks a much higher ceiling. One critical note — you cannot choose both. Selecting Option A means you are forgoing the guaranteed flat payment in favor of a documented claim that must be reviewed and approved. If your documented losses are modest — say, under $50 — the pro rata payment might actually net you more money with less hassle. But if your losses approach even a few hundred dollars, the documentation route is almost always worth the effort.
Key Deadlines and What Happens If You Miss Them
Three dates matter. The opt-out and objection deadline is March 9, 2026. The claim filing deadline is April 6, 2026. The final fairness hearing is scheduled for July 14, 2026. Missing the claim deadline means you receive no payment but remain bound by the settlement’s release of claims — the worst possible outcome. Opting out is a separate decision with different stakes. If you believe your individual damages exceed what this settlement offers — say you suffered significant identity theft and racked up thousands in losses — you can opt out by March 9, 2026 and preserve your right to sue Capital Health independently.
However, individual data breach lawsuits are expensive, slow, and uncertain. For the vast majority of class members, filing a claim within the settlement is the practical choice. Objecting is yet another option: you stay in the class but formally tell the court you believe the settlement terms are unfair. Objections are considered at the July 14 hearing. One warning that catches people off guard: the opt-out deadline of March 9, 2026 arrives nearly a full month before the claim filing deadline. If you are weighing your options and accidentally let March 9 pass, your only remaining choices are to file a claim or do nothing. The window for preserving independent legal action closes first.
How LockBit Ransomware Attacks Impact Settlement Valuations
The involvement of LockBit — one of the most prolific ransomware operations in the world — is relevant context for understanding why the settlement landed at $4.5 million. LockBit’s standard playbook involves both encrypting data for ransom and exfiltrating it for use, which means affected individuals face a dual threat: their data was not just accessed but actively stolen and potentially circulated on dark web forums. Courts and settlement negotiators tend to view exfiltration cases as more serious than incidents where data was merely exposed through a misconfigured server.
That said, $4.5 million for 503,071 affected individuals works out to roughly $8.95 per person if the entire fund were distributed equally with no deductions. This is consistent with the range seen in healthcare data breach settlements of similar size, where per-capita figures often land between $5 and $50 before accounting for claim rates. The settlement amount reflects the reality that most class members will not file claims, which is how the estimated $100 pro rata figure becomes possible.
What Comes After the Final Fairness Hearing
Assuming the court grants final approval at the July 14, 2026 hearing, distribution of payments typically follows within 60 to 120 days — though delays are common, particularly if objections are filed or appeals are pursued. Capital Health class members should not expect checks or direct deposits immediately after the hearing date.
Looking ahead, this settlement joins a growing pattern of healthcare organizations resolving ransomware-related litigation through class action funds rather than fighting prolonged court battles. For consumers, the practical takeaway is straightforward: file your claim before April 6, 2026, choose the payment option that matches your situation, and enroll in the free credit monitoring regardless of which cash option you select. The credit monitoring begins after the settlement receives final approval, adding another layer of protection during the period when stolen healthcare data is most likely to be exploited.
Frequently Asked Questions
How do I know if I am part of the Capital Health data breach settlement class?
If you received a notification letter from Capital Health about the November 2023 data breach, you are a class member. The breach affected 503,071 individuals who had data in Capital Health Systems’ network across their New Jersey and Pennsylvania facilities.
Can I file for both Option A (documented losses) and Option B (pro rata payment)?
No. You must choose one or the other. Option A allows claims up to $5,000 with documentation of breach-related expenses. Option B provides an estimated flat payment of approximately $100 without requiring proof of losses.
What is the actual deadline to file a claim?
The claim filing deadline is April 6, 2026. The opt-out deadline is earlier — March 9, 2026 — so if you are considering preserving your right to sue individually, that decision must come first.
Will I definitely receive $100 from the pro rata payment?
No. The $100 figure is an estimate. The actual amount depends on the total number of valid claims filed and how much of the $4.5 million fund remains after attorney fees, administration costs, and service awards are deducted. The final per-person amount could be higher or lower.
Is the credit monitoring separate from the cash payment?
Yes. All class members can enroll in three years of free credit monitoring valued at approximately $90 per year regardless of whether they choose Option A or Option B for their cash payment.
When will payments actually arrive?
Payments are expected to be distributed after the final fairness hearing on July 14, 2026, assuming the court approves the settlement. Typical distribution timelines run 60 to 120 days after final approval, though delays can occur.