Nova Recovery Center Data Breach Class Action Settlement

The Nova Recovery Center Data Breach Class Action Settlement compensates individuals whose personal information was compromised in a May 2025 cyberattack...

The Nova Recovery Center Data Breach Class Action Settlement compensates individuals whose personal information was compromised in a May 2025 cyberattack against Nova Recovery LLC, a substance abuse treatment facility. The settlement, filed as Glover v. Nova Recovery LLC in Hays County District Court, represents a legal resolution for patients and clients whose names, Social Security numbers, dates of birth, addresses, and financial documents were exposed during the breach.

If you received treatment at Nova Recovery Center or had any interaction with the facility that may have placed your information in their systems, you likely qualify to file a claim. This settlement is currently pending final court approval, which is scheduled for April 22, 2026. The case involves a targeted cyberattack that infiltrated Nova Recovery’s computer systems, affecting individuals who had trusted the organization with sensitive health and financial information. Unlike some breaches that remain undisclosed for months or years, Nova Recovery’s situation emerged publicly in August 2025 when legal investigators began examining the scope of the compromise.

Table of Contents

What Data Was Compromised in the Nova Recovery Center Breach?

The May 2025 cyberattack on Nova Recovery’s computer systems exposed a specific category of personal information that is particularly sensitive in a healthcare context. The compromised data includes first, middle, and last names; full addresses; dates of birth; Social Security numbers; and financial payment documentation. This combination of data is especially dangerous because it contains the core elements needed for identity theft, credit fraud, and medical identity fraud.

For context, this is similar to what was exposed in other healthcare data breaches like the UnitedHealth Change Healthcare incident in 2024, where payment information combined with personal identifiers created significant fraud risk. The fact that financial payment documentation was included means that individuals may have had credit card numbers, banking details, or payment account information compromised alongside their personal identifiers. This makes the breach more serious than a simple name-and-address leak, as criminals can potentially use the financial data immediately without needing to combine it with external sources. Recovery Center patients should monitor their financial accounts and credit reports closely, even after the settlement is finalized.

What Data Was Compromised in the Nova Recovery Center Breach?

Understanding the Settlement Status and Court Approval Timeline

The Nova Recovery center settlement has progressed through the initial agreement phase and is now awaiting final court approval at a hearing scheduled for April 22, 2026 at 9:00 a.m. in Hays County District Court. The settlement agreement has already been reached between Nova Recovery and the class representatives, meaning the terms have been negotiated and documented. However, class action settlements in Texas cannot be finalized without a federal or state court judge confirming that the settlement terms are fair, reasonable, and adequate for the affected class members.

This is an important consumer protection that ensures settlements aren’t secretly agreed upon with terms that heavily favor the defendant. Before the final approval hearing, there are two critical deadlines: April 13, 2026 is the deadline for both opting out of the settlement and filing objections. If you want to pursue your own legal claim outside of this settlement rather than accept the class settlement payment, you must submit an opt-out request by this date. Similarly, if you believe the settlement terms are unfair and want to object, you have until April 13 to notify the court. A limitation to keep in mind: once the final approval hearing occurs on April 22 and the judge approves the settlement, these opportunities to opt out or object are closed, even if you missed the deadline by just one day.

Nova Recovery Center Data Breach: Settlement TimelineData Breach Occurs32months after breachSettlement Agreement Reached24months after breachOpt Out/Objection Deadline19months after breachFinal Approval Hearing15months after breachClaim Submission Deadline10months after breachSource: Glover v. Nova Recovery LLC Settlement (Case 25-2312-DCE, Hays County District Court)

Who Qualifies as a Settlement Class Member and How to File a Claim?

Any individual who had personal information stored in Nova Recovery Center’s computer systems during the period when the breach occurred is eligible to claim compensation. This includes current and former patients, individuals who inquired about treatment services, and anyone else who had personal data in the facility’s systems. To claim compensation, you need to submit a claim form by the May 12, 2026 deadline to the Settlement AdministratorSettlement Administrator[contact via the official settlement website] or by calling (833) 647-9052. The official settlement website, novadatasettlement.com, provides the claim form and detailed instructions.

When filing your claim, you’ll need to verify your identity and demonstrate that you had a relationship with Nova Recovery Center during the relevant period. Keep any documentation you have, such as patient statements, appointment confirmations, or billing records showing your interaction with the facility. The Settlement Administrator will verify claims before payments are processed. It’s important to note that the specific individual payment amounts from this settlement have not yet been disclosed publicly, so you won’t know exactly how much you’ll receive until after the settlement is fully finalized and fund distributions are calculated.

Who Qualifies as a Settlement Class Member and How to File a Claim?

How Will Settlement Payments Be Distributed?

The Nova Recovery settlement will distribute compensation through multiple payment methods to accommodate different preferences and situations. Eligible class members can receive their settlement payment by check sent via mail, or through electronic deposit options including Zelle, PayPal, or Venmo. The electronic payment methods are typically faster than mailed checks, with deposits arriving within a few business days compared to one to two weeks for postal mail. However, if you choose electronic deposit, you’ll need to provide the necessary account information during the claims process.

One practical consideration: if you’ve moved since your involvement with Nova Recovery or changed contact information, update your address on file with the Settlement Administrator before submitting your claim. A mismatch between the address on file and your mailing address could result in delayed payment or a check being returned as undeliverable. For electronic payments, ensure your account information is current and correct. The Settlement Administrator is responsible for managing all payments once the court approves the settlement, and their contact information is available on the settlement website.

What Are the Important Deadlines You Cannot Miss?

The Nova Recovery settlement operates on several critical deadlines that vary by type of action, and missing any of them can affect your eligibility or rights. The Opt Out Deadline and Objection Deadline are both April 13, 2026—this is your last opportunity to remove yourself from the settlement or formally challenge its terms. The Final Approval Hearing occurs on April 22, 2026 at 9:00 a.m., after which the settlement becomes final and binding. The Claim Submission Deadline is May 12, 2026, which is when you must submit your claim form to receive payment.

A critical warning: do not assume you have additional time after the May 12 claims deadline. Settlements are different from regular legal claims with rolling statutes of limitations—once the claims deadline passes, the Settlement Administrator generally cannot accept late claims except in extraordinary circumstances. If you’re aware of the breach and believe you qualify, submit your claim well before May 12 to avoid any administrative delays. Mark these dates on your calendar: April 13 for opting out or objecting, April 22 for the final approval hearing, and May 12 for submitting your claim form.

What Are the Important Deadlines You Cannot Miss?

What Should You Do Now to Protect Your Information?

While the settlement process moves forward, affected individuals should take immediate steps to protect their compromised information from misuse. Place a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) to add extra verification requirements if someone attempts to open accounts in your name. Consider freezing your credit with each bureau if you want even stronger protection, though this requires separate requests to each company.

Monitor your credit reports using free services like AnnualCreditReport.com to spot unauthorized accounts or inquiries early. Additionally, keep alert for phishing emails or calls claiming to be from Nova Recovery or the Settlement Administrator. Scammers sometimes impersonate settlement administrators to steal personal information from victims. The legitimate settlement website is novadatasettlement.com, and the real Settlement Administrator will not ask you for money upfront or request information via unsolicited phone calls.

The Broader Context of Healthcare Data Breaches and Settlement Trends

The Nova Recovery Center breach reflects a growing pattern of cyberattacks targeting healthcare and treatment facilities, where sensitive personal data is particularly valuable to criminals. Healthcare data breaches have increased significantly over the past three years, with each incident exposing hundreds of thousands of records. Treatment facilities managing substance abuse and mental health records face particular risk because this information is especially sensitive and valuable in the black market for identity theft.

Looking forward, the healthcare industry is facing increased pressure from regulators and lawmakers to improve cybersecurity standards. Class action settlements like the Nova Recovery case serve as both compensation for victims and a financial incentive for healthcare organizations to invest in better data protection. If you’ve been affected by this breach, submitting a claim helps document the real impact of inadequate security practices and contributes to the broader accountability process.

Frequently Asked Questions

How much money will I receive from the Nova Recovery settlement?

The specific individual payment amounts have not yet been publicly disclosed. Payment amounts are typically calculated based on the total approved settlement fund divided among eligible claimants. Once the court approves the settlement on April 22, 2026, the Settlement Administrator will calculate individual payments based on verified claims received by the May 12 deadline.

What happens if I miss the May 12 claim deadline?

Once the May 12 claim submission deadline passes, the Settlement Administrator generally cannot accept new claims except in extraordinary circumstances. Missing this deadline means you would forfeit your opportunity to receive compensation from this settlement.

Do I need to pay anything to file a claim?

No. Filing a claim with the Settlement Administrator is free. Do not trust any communication claiming you need to pay money upfront or provide payment information to claim compensation.

How long will it take to receive my settlement payment after the court approves the settlement?

The timeline varies, but typically payments are distributed within 30 to 60 days after the settlement is fully approved and claims are processed. Check payments take longer (one to two weeks for delivery) than electronic transfers (a few business days).

Can I opt out of the settlement and sue Nova Recovery separately?

Yes. You have until April 13, 2026 to opt out by notifying the Settlement Administrator. However, because most individual claims would be small and attorney costs would be substantial, pursuing a separate lawsuit is usually not practical for individuals unless you have additional damages beyond what the settlement covers.

What should I do if my personal information was used fraudulently because of this breach?

File a report with the Federal Trade Commission at IdentityTheft.gov, monitor your credit reports for unauthorized accounts, and consider freezing your credit with each of the three major bureaus for added protection. Keep documentation of any fraud you discover in case you need it for identity theft resolution.


You Might Also Like

Leave a Reply