A settlement has been reached in a data breach lawsuit against Eye Physicians of Central Florida, with preliminary court approval granted on February 23, 2026. The settlement will provide compensation to all U.S. residents whose private information was exposed when the company suffered a data breach on November 5, 2023.
If you received a breach notification letter from Eye Physicians of Central Florida, you may be eligible for cash reimbursement for documented losses, extraordinary losses from fraud or identity theft, and two years of complimentary credit monitoring and identity theft insurance—at no cost to you. The settlement is still pending final court approval, but eligible parties can begin filing claims immediately. Understanding your rights now will help you secure compensation before the May 15, 2026 deadline passes.
Table of Contents
- What Happened in the Eye Physicians of Central Florida Data Breach?
- Who Is Eligible and How Much Compensation Is Available?
- What Credit Monitoring and Identity Theft Protection Does the Settlement Include?
- How Do You File a Claim and What Documents Do You Need?
- What Are the Critical Deadlines You Cannot Miss?
- What Happens Next? The Remaining Legal Process
- Broader Context—Why Medical Data Breaches Matter More Than Typical Breaches
- Frequently Asked Questions
What Happened in the Eye Physicians of Central Florida Data Breach?
On November 5, 2023, unauthorized third parties gained access to confidential patient information stored by Eye Physicians of Central Florida. The breach compromised personal data including names, addresses, dates of birth, insurance information, medical records, and potentially Social Security numbers for thousands of patients. The company discovered the unauthorized access and began notifying affected individuals in early 2024, providing details about what information had been compromised and recommendations for protective measures.
The scope of the breach extended beyond a single office location—it affected patient records across Eye Physicians of Central Florida’s network of practices. This widespread exposure is why the settlement covers all U.S. residents who received official breach notification letters from the company, not just patients from a specific location. Unlike some data breaches that affect only payment card information, this breach exposed comprehensive medical and identity information that puts victims at significant risk for identity theft and fraud over many years.
Who Is Eligible and How Much Compensation Is Available?
The settlement defines the class as all United States residents notified by Eye Physicians of Central Florida that their private information was accessible during the breach. If you received an official notification letter from the company, you are part of the settlement class and can file a claim. The settlement provides two types of cash compensation: ordinary losses and extraordinary losses. For ordinary losses—such as bank fees, credit monitoring charges you paid out of pocket, travel expenses to address the breach, or time spent dealing with breach-related issues (valued at $25 per hour for up to 3 hours)—you can recover up to $2,000 with documentation of your expenses.
However, the settlement also recognizes that some victims suffer severe financial harm from fraud or identity theft directly caused by the breach. For extraordinary losses, you can claim up to $7,500 in reimbursement for unreimbursed monetary losses from fraudulent activity or identity theft that you can document was connected to the breach. The key limitation here is that you must provide clear evidence connecting your fraud losses to the breach—you cannot claim ordinary credit card fraud that happened to occur during the same timeframe unless you can show it resulted from the breached information. Many claims will likely fall into the ordinary losses category for typical expenses incurred after the breach became known.
What Credit Monitoring and Identity Theft Protection Does the Settlement Include?
All class members receive two years of complimentary CyEx Identity Defense Complete identity protection, regardless of whether they file a claim for cash compensation. This benefit includes credit monitoring, identity theft insurance, and victim assistance services at no cost—meaning you don’t need to pay anything out of pocket to access these protections. The credit monitoring component tracks your credit reports for suspicious activity and alerts you to potential fraud. The identity theft insurance provides coverage for losses resulting from identity theft, and the victim assistance service connects you with professionals who can help you dispute fraudulent accounts and recover your identity if theft occurs.
This is a significant benefit for breach victims because identity theft and fraud from medical data breaches often emerge months or even years after the initial breach occurs. Someone with access to your Social Security number, insurance information, and medical details can use that information to open fraudulent accounts, apply for credit in your name, or commit medical identity theft by seeking treatment under your identity. The two-year monitoring window gives you a substantial period to detect problems early, when damage is easier to contain. However, keep in mind that two years of monitoring is just a starting point—after the CyEx protection expires, you may want to continue monitoring your credit independently or through paid services, especially given the sensitive nature of medical data breaches.
How Do You File a Claim and What Documents Do You Need?
To file a claim, you must submit your claim through the official settlement website at eyephysicianscentralflsettlement.com. The website provides the claim form and specific instructions for what documentation you need to submit. For ordinary losses, gather receipts, bank statements, or other proof of expenses you incurred as a result of the breach—such as credit reports you purchased, credit monitoring service fees, or travel costs to address the breach. If you’re claiming lost time, document the hours you spent dealing with breach-related matters and keep a record of your hourly rate or reasonable valuation of your time.
For extraordinary losses from fraud or identity theft, you need documentation showing the fraudulent activity occurred, the amount of your losses, and evidence connecting those losses to the breach. This might include fraudulent account statements, police reports if you filed identity theft reports, credit card statements showing unauthorized charges, or correspondence with creditors about fraudulent accounts. The challenge with extraordinary losses is establishing the causal connection—simply having your information in a breach doesn’t automatically mean the settlement covers every fraud that happens afterward. If you experienced fraud, collect all documentation linking it to the breach and submit everything the settlement website requests. Claims must be filed by May 15, 2026, so don’t wait until the last moment to gather your documentation.
What Are the Critical Deadlines You Cannot Miss?
Two critical deadlines govern this settlement. First, if you want to exclude yourself from the settlement or object to its terms, you must do so by April 29, 2026. Excluding yourself means you would give up all rights to compensation but could potentially pursue your own lawsuit against the company. Objecting means you stay part of the settlement but formally tell the court you disagree with its terms—this is rarely successful but is an option if you believe the settlement is fundamentally unfair. Most affected patients will want to remain in the settlement and file a claim rather than exclude themselves.
The second critical deadline is May 15, 2026, for submitting claim forms. This is when your eligibility to receive compensation expires—claims filed after this date will not be accepted, and you will permanently forfeit your right to any settlement compensation. This deadline is absolute; there are no extensions for late filings. Start gathering your documentation now, create an account on the settlement website, and submit your claim well before May 15, 2026. If you’re uncertain whether your expenses qualify, the settlement website should provide guidance or contact information for questions.
What Happens Next? The Remaining Legal Process
The settlement currently has preliminary court approval, but final approval from the judge has not yet been granted. This means additional steps remain before compensation actually begins distributing. The judge must hold a final approval hearing, which will likely occur sometime before the May 15, 2026 claim deadline. At this hearing, the court will confirm that the settlement is fair and reasonable to class members, and will also announce the plan for distributing settlement funds.
After final approval, any appeals must be resolved before the settlement fund is distributed to claimants. This timeline could extend several months beyond the claim deadline, so do not expect immediate payments. You should file your claim by May 15, 2026, but you may not receive compensation until fall 2026 or later, depending on how quickly the appeals process concludes and how the claims administrator processes individual claims. The settlement website will provide updates on this timeline as the process advances.
Broader Context—Why Medical Data Breaches Matter More Than Typical Breaches
Eye Physicians of Central Florida’s breach illustrates why healthcare data breaches carry greater risks than standard payment card breaches. Medical information includes not just financial data but comprehensive information about your health conditions, treatments, prescriptions, and insurance details. This information has higher value in the criminal marketplace because it can be used for medical identity theft, fraudulent insurance claims, or long-term extortion.
A stolen medical record can cause complications for years—fraudulent medical treatments applied under your identity can pollute your medical history, insurance claims can be incorrectly attributed to you, and your coverage can be affected by fraudulent uses. This settlement provides a meaningful remedy because it recognizes both immediate expenses (monitoring, recovery efforts) and the potential for significant future fraud and identity theft losses. As healthcare data breaches continue to occur nationwide, settlements like this establish an important precedent that healthcare providers who fail to adequately protect patient information must compensate victims for documented harm. Understanding this settlement’s terms helps you understand what compensation is reasonable and fair when your medical data has been compromised.
Frequently Asked Questions
If I didn’t receive a breach notification letter, can I still claim the settlement?
No. The settlement only covers residents notified by Eye Physicians of Central Florida that their information was affected by the breach. If you were a patient but didn’t receive notification, contact the settlement administrator to verify your eligibility.
Can I claim both ordinary and extraordinary losses at the same time?
Yes. You can claim both types of compensation if you have documentation for both—for example, you might claim ordinary losses for credit monitoring fees and expenses, plus extraordinary losses for fraudulent accounts opened using your breached information.
What if the fraud happened months ago but I’m only learning about it now?
You can still claim it if you can document that it resulted from the breach. Gather all documentation of the fraudulent activity, the resulting losses, and evidence showing the connection to the breach, then submit your claim before May 15, 2026.
What happens if I file a claim but don’t receive approval?
The claims administrator will review your documentation and determine whether your claimed losses meet the settlement criteria. If your claim is denied, the decision letter should explain why and may provide you an opportunity to submit additional documentation or appeal.
When will I receive my settlement payment?
Payments will begin distributing only after the settlement receives final court approval and any appeals are resolved. This process could take until fall 2026 or later. The settlement website will provide updates on the payment timeline as the process advances.
Do I need a lawyer to file a claim?
No. The claim process is designed for individuals to submit claims directly through the settlement website. You do not need to hire an attorney to file a claim, though an attorney can assist you if you choose.
Sources
- Physicians' Primary Care FL Data Breach Settlement on OpenClassActions.com — full settlement breakdown, with eligibility, payout tiers and filing steps.
You Might Also Like
- Settlement Approved for Canadians Affected by 23andMe Data Breach
- LastPass $24.45M Data Breach Settlement Opens Claim Submissions
- Lakeview Loan Servicing Reaches $26M Data Breach Settlement with Claim Filing Details
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: