Filing a claim in the Capital Health data breach settlement starts at capitalhealthdatabreachsettlement.com, where affected individuals can submit their claim online using the Unique ID and PIN printed on the settlement notice they received by mail. The process takes roughly ten minutes if you have your documents ready, and the deadline to file is April 6, 2026. You can claim either a flat cash payment estimated at around $100 or up to $5,000 if you have documented losses from identity theft or fraud tied to the breach. Capital Health Systems, Inc., a New Jersey-based hospital network, suffered a ransomware attack between November 11 and 26, 2023, when a criminal cyber actor infiltrated its network and encrypted files. The LockBit ransomware group claimed responsibility, saying it exfiltrated 7 terabytes of data.
The breach affected 503,071 individuals and exposed sensitive information including names, Social Security numbers, dates of birth, clinical information, and more. The resulting class action lawsuit, *Bruce Graycar, et al. v. Capital Health Systems, Inc.*, filed in the U.S. District Court for the District of New Jersey, produced a $4.5 million settlement. This article walks through every step of the online claim process, explains the two compensation options, covers common pitfalls, and lays out what you need to know about deadlines and documentation.
Table of Contents
- How Do You File the Capital Health Data Breach Settlement Claim Online Step by Step?
- What Compensation Can You Claim and What Are the Limitations?
- What Information Was Exposed and Why It Matters for Your Claim
- Flat Cash Payment vs. Documented Losses — Which Option Should You Choose?
- Common Mistakes That Can Delay or Disqualify Your Claim
- What Happens After You Submit Your Claim
- The Broader Picture for Capital Health Breach Victims
- Frequently Asked Questions
How Do You File the Capital Health Data Breach Settlement Claim Online Step by Step?
The online filing process is straightforward, but each step matters. First, go to capitalhealthdatabreachsettlement.com and click “Submit a Claim.” You will be prompted to enter your Unique ID and PIN, both of which appear on the physical settlement notice mailed to affected individuals. These codes verify your eligibility, so without them you cannot proceed online. Once authenticated, you fill out the claim form with your current personal details — name, address, email, and phone number. Then you select your compensation option: either the flat cash payment or the documented losses reimbursement up to $5,000.
If you choose documented losses, you upload supporting evidence such as receipts, bank statements, or identity theft reports. After reviewing everything for accuracy, you submit. For example, say you noticed fraudulent charges on a credit card two months after the breach and spent $45 on a credit monitoring service before the settlement was announced. You would select the documented losses option, upload your credit card statement showing the unauthorized charges and the receipt for the monitoring service, and describe the timeline in the form. Someone who experienced no direct financial harm but wants compensation for the exposure of their data would simply select the flat cash payment option instead. If you do not have access to the internet or prefer paper, you can download the claim form from the website, complete it by hand, and mail it — but it must be postmarked by April 6, 2026.
What Compensation Can You Claim and What Are the Limitations?
The settlement offers two paths. Option 1 is a flat cash payment estimated at approximately $100 per class member. That figure is not guaranteed — it is pro rata, meaning the actual amount depends on how many people file claims. If a large number of the 503,071 affected individuals submit claims, the per-person payment shrinks. If relatively few file, it could stay near the estimate or potentially increase slightly, though $100 is the current projection based on anticipated participation rates. Option 2 covers documented, unreimbursed losses up to $5,000 per class member.
This includes out-of-pocket costs from identity theft, fraudulent transactions, fees for credit monitoring or identity protection services you purchased on your own, and time spent dealing with fraud — provided you can back it up with receipts, bank statements, police reports, or similar documentation. However, if your losses were already reimbursed by your bank or insurance company, you cannot double-dip by claiming them here. Only unreimbursed amounts qualify. And if your documentation is incomplete or does not clearly connect the loss to the Capital Health breach, the claims administrator may reduce or deny that portion of your claim. In addition to either compensation option, all class members are eligible for three years of free credit monitoring and identity protection services, valued at roughly $90 per year. You can enroll in this regardless of whether you choose the flat payment or the documented losses route.
What Information Was Exposed and Why It Matters for Your Claim
The data compromised in the Capital Health breach included names, addresses, dates of birth, Social Security numbers, email addresses, telephone numbers, and clinical information. That combination is particularly dangerous because it gives criminals enough detail to open new credit accounts, file fraudulent tax returns, or commit medical identity theft — where someone uses your health information to obtain medical care or prescriptions under your name. Consider a scenario where someone’s Social Security number and date of birth were both exposed.
A fraudster could use those two pieces of information to apply for a credit card or personal loan. If you discovered an unfamiliar hard inquiry on your credit report in the months following the breach, that could be evidence of attempted identity theft directly linked to this incident. Documenting that kind of activity — pulling your credit reports, noting the dates and inquiries, and filing an identity theft report with the FTC — strengthens a claim for documented losses significantly. Clinical information exposure adds another layer of risk, since medical identity theft is notoriously difficult to detect and can result in incorrect entries in your medical records that affect future care.
Flat Cash Payment vs. Documented Losses — Which Option Should You Choose?
The decision comes down to whether you have evidence of actual financial harm. The flat cash payment of approximately $100 requires no documentation beyond proving you are a class member, which your Unique ID and PIN already establish. You fill out the form, select that option, and submit. It is the faster and simpler route, and for many people whose data was exposed but who have not experienced identity theft or fraud, it is the practical choice. The documented losses option is worth pursuing if you have real, provable expenses.
Someone who spent $200 on a credit monitoring subscription, $150 dealing with fraudulent charges, and several hours on the phone with creditors could potentially recover all of that up to the $5,000 cap. But the tradeoff is effort and uncertainty. You need to gather and upload documentation, and the claims administrator reviews each submission, which means there is no guarantee you will receive the full amount you request. If your documented losses total less than $100, you are actually better off taking the flat payment since it requires less work for a comparable or higher payout. A good rule of thumb: if your provable, unreimbursed losses exceed $150, go the documentation route. Below that, the flat payment is likely the smarter move.
Common Mistakes That Can Delay or Disqualify Your Claim
The most frequent problem is not having the Unique ID and PIN from the settlement notice. Without these, the online system will not let you proceed. If you lost the notice or never received one, check the settlement website for instructions on how to request a replacement or verify your eligibility through an alternative method. Do not wait until the last week before the April 6 deadline to figure this out — replacement notices take time. Another common issue is submitting a documented losses claim without adequate proof. Vague statements like “I think someone used my information” without any supporting records will not result in reimbursement.
You need specifics: dates, dollar amounts, and third-party documentation. Bank statements should show the fraudulent transactions highlighted or noted. Credit reports should show unfamiliar inquiries with dates that fall after the November 2023 breach. Also watch for a simple but costly error — entering incorrect personal information on the claim form. If your name or address does not match what Capital Health has on file, the claims administrator may flag your submission for additional review, which delays payment. Double-check every field before hitting submit.
What Happens After You Submit Your Claim
Once your claim is submitted online, the claims administrator reviews it for completeness and eligibility. The final fairness hearing for the settlement is scheduled for July 14, 2026, and payments will not be distributed until after the court grants final approval. This means even if you file your claim tomorrow, you should not expect a check or direct deposit for several months.
For context, in similar data breach settlements, payments have typically arrived anywhere from three to nine months after the final approval hearing, depending on the volume of claims and whether any objections were filed. If the claims administrator needs additional information or finds an issue with your submission, they will contact you using the information you provided on the form. This is another reason to make sure your email address and mailing address are current and accurate.
The Broader Picture for Capital Health Breach Victims
The March 9, 2026 deadline for objections and opt-outs has essentially arrived, which means the settlement is moving toward finalization. If you have not opted out, you are part of the class and should file a claim to receive compensation rather than letting the deadline pass. Failing to file by April 6, 2026 means forfeiting your share of the $4.5 million fund.
Data breach settlements of this size have become more common as ransomware attacks on healthcare organizations continue to escalate. The Capital Health incident — with the LockBit group exfiltrating 7 terabytes of data and affecting over half a million people — is part of a broader pattern that shows no sign of slowing. For affected individuals, the settlement provides some financial remedy, but the three years of credit monitoring may prove equally valuable as a long-term safeguard. Taking advantage of both the cash compensation and the monitoring services is the most complete response available to class members.
Frequently Asked Questions
What if I lost my settlement notice and do not have my Unique ID and PIN?
Visit capitalhealthdatabreachsettlement.com for instructions on obtaining your credentials. The site typically offers a way to look up your eligibility or request a replacement notice, but act quickly since the filing deadline is April 6, 2026.
Can I file a claim both for the flat cash payment and for documented losses?
No. You must choose one compensation option. If you have documented losses exceeding approximately $100, the documented losses option likely yields a higher payout. Otherwise, the flat cash payment is simpler and requires no additional evidence.
When will I receive my payment?
Payments will not be distributed until after the final fairness hearing on July 14, 2026, and only if the court grants final approval. Expect several months after that date before checks or deposits arrive.
Is the $100 flat payment guaranteed?
No. The $100 figure is an estimate. The actual amount is pro rata, meaning it depends on how many class members file claims. If an unusually high number of people file, the per-person amount could decrease.
Do I need a lawyer to file a claim?
No. The online claim process is designed for individuals to complete on their own. You do not need legal representation to file, and there is no cost to submit a claim.
What if I already have credit monitoring through another service?
You can still enroll in the three years of free credit monitoring offered through this settlement. Having multiple monitoring services is not prohibited, and the settlement’s monitoring is provided at no cost to you regardless of which compensation option you select.
You Might Also Like
- Step By Step: Filing The SiriusXM Robocall And Telemarketing Settlement Claim Online
- Can You Claim Cash From The Capital Health Data Breach Settlement Without Proof
- Capital Health Data Breach Settlement: Opt Out, Object, Or File A Claim