The Equinox data breach case involves a proposed $685,000 settlement for certain living U.S. residents who were sent notice that their private information may have been affected by the April 2024 incident. Eligible class members must submit claims by October 23, 2026, to request available benefits, which may include reimbursement of documented losses, a variable cash payment, and credit-monitoring services. For example, a person who received an Equinox breach notice and paid documented costs to address identity theft could seek reimbursement of qualifying losses up to $5,000. The settlement is not yet final. The court has not found Equinox liable, and no benefits will become available unless the proposed agreement receives final approval. The cases are *McHugh v.
Equinox, Inc.*, Index No. 911677-24, and *Carter v. Equinox, Inc.*, Index No. 901198-25, pending in the New York Supreme Court, Albany County. This case concerns Equinox, Inc., an Albany, New York nonprofit that provides counseling and health services. It does not concern the Equinox fitness-club company. That distinction matters when reviewing notices or searching personal records for evidence of eligibility.
Official resource:
- File an Equinox data-incident settlement claim — Use the court-authorized settlement website to submit a claim and review eligibility and deadlines.
Table of Contents
- Who Is Eligible for the Equinox $685,000 Data Breach Settlement?
- What Happened in the Equinox Data Incident?
- What Benefits Can Eligible Claimants Request?
- How to File a Claim by the October 23, 2026 Deadline
- Exclusion, Objection, and the Risks of Doing Nothing
- Credit Monitoring and Identity-Recovery Benefits
- Court Approval and When Payments May Be Issued
- Frequently Asked Questions
Who Is Eligible for the Equinox $685,000 Data Breach Settlement?
The proposed class consists of living U.S. residents who were sent notice from Equinox stating that their private information may have been affected by the data incident. Receiving that notice is the central eligibility requirement under the published class definition. Merely receiving services from Equinox, working with the organization, or believing that Equinox possessed personal information does not by itself establish eligibility.
For example, a former counseling client who received an Equinox incident letter may fall within the class even if no fraud later appeared on the person’s accounts. By comparison, another client who never received a notice is not necessarily covered under the published definition merely because the person used Equinox services during the same period. Anyone uncertain about eligibility should preserve the original mailed or emailed notice, including any claimant identifier printed on it. A person should not assume that a communication involving “Equinox” relates to this settlement without confirming that it came from the Albany nonprofit or the court-authorized settlement administrator.
What Happened in the Equinox Data Incident?
The settlement concerns potential unauthorized access to and acquisition of private information on or about April 29, 2024. Equinox’s original incident notice states that it discovered unusual activity on that date. Its investigation later concluded that certain files within its network may have been accessed or downloaded without authorization. The types of information potentially involved varied from person to person.
They could include names and other identifying information, financial information, health-insurance details, medical treatment or diagnosis information, medication information, provider information, and patient identification numbers. Equinox’s incident notice also specifically identified Social Security numbers and driver’s-license or other government-identification numbers as possible data elements. This list does not mean every affected person had every category exposed. A notice recipient should review the individual notice instead of assuming that medical, financial, and government-identification data were all involved. The available public information also describes information that may have been accessed or acquired; it does not establish that every class member experienced identity theft or financial fraud.
What Benefits Can Eligible Claimants Request?
A valid claimant may seek reimbursement of up to $5,000 for documented monetary losses related to the incident. Supporting records will be important because the benefit concerns actual losses rather than a payment based solely on inconvenience or concern. Relevant documentation might include bank statements showing unreimbursed fraudulent charges, invoices for professional assistance, receipts, or correspondence demonstrating how an expense relates to the incident. Valid claimants may also be eligible for an estimated $100 pro rata cash payment.
The $100 figure is an estimate, not a guaranteed award. The actual payment can increase or decrease depending on the number of valid claims, the amounts approved for loss reimbursement, and other payments made from the settlement fund. For example, if approved claims and settlement expenses consume more of the available $685,000 fund than anticipated, individual pro rata payments could be lower than $100. Conversely, fewer valid claims could leave more money available for distribution, subject to the settlement’s terms and the administrator’s calculations.
How to File a Claim by the October 23, 2026 Deadline
The claim deadline is October 23, 2026. An online claim must be submitted by that date, while a paper claim sent by mail must be postmarked no later than October 23, 2026. Claimants should follow the instructions in the court-authorized notice and provide any requested claimant identification, contact information, benefit selections, certifications, and supporting documents. Online filing may provide faster confirmation and reduce the risk of postal delay.
Mailing can be useful for someone submitting extensive paper records, but it creates a different proof issue: the claimant should keep a complete copy and evidence of timely mailing. A form placed in a mailbox after the final collection on October 23 could receive a later postmark and be treated as late. Claimants requesting documented-loss reimbursement should organize records before filing. A brief written timeline can help connect each expense to the incident—for example, identifying the date suspicious activity appeared, the steps taken to dispute it, the amount the bank reimbursed, and the remaining unreimbursed amount. The reimbursement cap is $5,000, so submitting evidence of a loss does not guarantee that the entire requested sum will be approved.
Exclusion, Objection, and the Risks of Doing Nothing
The deadlines to exclude oneself from the settlement or object to it are both September 23, 2026. Exclusion and objection serve different purposes. A person who excludes themselves preserves the right to bring an individual lawsuit over covered claims but gives up any settlement benefits. A person who objects remains in the class and asks the court to consider a concern about the proposed agreement. Doing nothing is not the same as excluding oneself.
A class member who takes no action will receive no settlement benefits and will release the covered claims if the settlement becomes final. This can be an important downside for someone who ignores the notice because the expected pro rata payment appears modest. For example, a class member considering an individual lawsuit may prefer exclusion, while someone who wants compensation through the settlement must remain in the class and file a valid claim. An objection does not replace a claim form, and filing a claim does not automatically register an objection. Anyone considering separate litigation should evaluate the release language and obtain legal advice before the September 23 exclusion deadline.
Credit Monitoring and Identity-Recovery Benefits
The proposed settlement includes three years of one-bureau credit monitoring, dark-web monitoring, identity-theft insurance of up to $1 million, and managed identity-recovery services. These services can be useful when sensitive identifiers may have been involved, but one-bureau monitoring is narrower than monitoring all three major credit bureaus.
For example, an account or inquiry appearing only on a credit report from a bureau outside the monitoring service might not generate the same alert. Identity-theft insurance also should not be mistaken for an automatic $1 million cash payment: coverage is limited to qualifying losses and governed by the policy’s terms.
Court Approval and When Payments May Be Issued
No reimbursement, pro rata cash payment, or credit-monitoring benefit is presently guaranteed because the $685,000 settlement remains proposed. The court has not determined that Equinox committed wrongdoing or is legally liable.
Benefits can be distributed only if the court grants final approval and any required settlement-administration steps are completed. The court-authorized notice published by Angeion Group on July 24, 2026, provides the settlement terms and deadlines. Equinox’s November 15, 2024 incident notice provides the organization’s account of the security event and the categories of information that may have been involved.
Frequently Asked Questions
Is this settlement connected to Equinox fitness clubs?
No. The defendant is Equinox, Inc., an Albany, New York nonprofit provider of counseling and health services, not the fitness-club company.
Is every Equinox client eligible?
No. The published class definition is limited to living U.S. residents who were sent notice that their private information may have been affected.
Will every valid claimant receive $100?
No. The approximately $100 cash benefit is a pro rata estimate that may rise or fall based on valid claims, approved amounts, and other payments from the fund.
Can a claimant receive as much as $5,000?
A valid claimant may request up to $5,000 for documented monetary losses related to the incident. Approval depends on the settlement terms and the supporting evidence submitted.
What happens if a class member does nothing?
The person will receive no settlement benefits and will release covered claims if the settlement becomes final.
What are the important deadlines?
Exclusion and objection requests are due September 23, 2026. Online claims must be submitted, and mailed claim forms postmarked, by October 23, 2026.
Sources
- Equinox Data Breach Settlement — Up to $5,000 or ~$100 — OpenClassActions.com’s full settlement breakdown, with eligibility, payout tiers and filing steps.
You Might Also Like
- CVS Health Data Privacy and Consumer Rights Claims Explained for Patients
- CVS Health Data Privacy Fee or Refund Claims: Potential Options for Patients
- Walgreens Prescription Privacy Privacy and Consumer Rights Claims Explained for Pharmacy Customers