Bone & Joint Clinic Data Breach Settlement
$75–$5,000
This settlement is closed to new claims — the deadline was October 15, 2025. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
A ransomware cyberattack on Bone & Joint Clinic was discovered on January 16, 2023, in which an unauthorized third party gained access to the company's systems. The breach potentially impacted the personally identifiable information and personal health information of approximately 105,094 individuals, including patients and employees. Bone & Joint denies any wrongdoing but has agreed to settle the lawsuit to avoid litigation costs.
Do you qualify?
You are a Settlement Class Member if you reside in the United States and your private information was potentially impacted by the Data Incident, including if you were mailed a notification by or on behalf of Bone & Joint regarding the Data Incident.
How to file
Submit a Claim Form by October 15, 2025, either by mail or online. For out-of-pocket expense reimbursement up to $5,000, provide supporting documentation of your losses. For the $75 pro rata cash payment, no documentation is required—you only need to attest that you suffered harm related to the data incident.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More privacy settlements
View all →WISP, Inc. Data Privacy Settlement
WISP, Inc. allegedly disclosed customers' personally identifiable information to third parties through Meta Pixel and other tracking technologies without consent, in violation of privacy laws including the Florida Security of Communications Act and California Invasion of Privacy Act. The defendant denies all claims and admits no wrongdoing but agreed to the settlement to avoid litigation costs and uncertainties.
Up to $18
Chattanooga Heart Institute Data Breach Settlement
Memorial Heart Institute experienced a cybersecurity incident between March 8 and March 16, 2023, that may have resulted in unauthorized access to or acquisition of individuals' private information including names, addresses, phone numbers, Social Security numbers, health insurance information, and clinical records.
Dayton Airport Parking FACTA Settlement
SP Plus Corporation allegedly printed the expiration dates of credit cards and debit cards on electronically printed paper receipts at Dayton International Airport parking facilities. The settlement provides parking vouchers to affected customers.
Up to $23
TRISTAR Data Settlement
TRISTAR Insurance Group, Inc. experienced a data breach in November 2022 in which unauthorized access occurred to personally identifiable information of certain TRISTAR customers. TRISTAR denies all claims and wrongdoing; the settlement is not an admission of liability but rather resolves disputed claims.