Centrelake Medical Group Data Breach Settlement
Last verified July 13, 2026Source: claimdepotHow ClaimWatch verifies cases
This settlement is closed to new claims — the deadline was June 12, 2026. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
In early 2019, cybercriminals bypassed Centrelake Medical Group's cybersecurity systems and encrypted data as part of a ransomware attack. The attackers potentially gained access to patients' personal information including names, dates of birth, and Social Security numbers. Centrelake denies liability or wrongdoing.
Do you qualify?
Centrelake Medical Group patients with a California address who received a Data Incident notification letter on or about April 16, 2019 via email or mailed postcard.
What you can claim
Read from the official settlement notice. Confirm the terms that apply to you on the administrator's site before filing.
Credit monitoring and identity theft protection
Two years of free CyEx Medical Shield Complete credit monitoring and identity theft protection services for all Settlement Class Members who enroll.
Documented out-of-pocket expense reimbursement
$500 eachReimbursement for up to $500.00 in documented out-of-pocket expenses incurred as a result of the Data Incident, including bank fees, card reissuance fees, overdraft fees, late fees, phone charges, postage, gasoline, lost time at $20/hour (up to 3 hours), and credit monitoring purchases.
Extraordinary loss reimbursement
$3,500 eachReimbursement for up to $3,500.00 in documented extraordinary losses more likely than not caused by the Data Incident, including identity theft losses and costs to re-purchase services originally provided by Centrelake.
Security enhancements
Centrelake has provided equitable relief in the form of security enhancements made in part as a result of this lawsuit.
Who is in the class
You are part of this Settlement as a Settlement Class Member if you, as a Centrelake patient, and received a data incident notification letter on or about April 16, 2019.
Quoted from the settlement notice.
How to file
Submit a claim form by June 12, 2026 using the Notice ID and PIN found on the perforated postcard you received. The postcard contains the enrollment code needed to file a claim online.
Common questions
- What is the claim deadline for the Centrelake Medical Group Data Breach Settlement?
- This settlement is closed to new claims — the deadline was June 12, 2026. Once a claim deadline passes you generally forfeit your share, even if you qualified.
- Do I need proof of purchase for the Centrelake Medical Group Data Breach Settlement?
- Yes. This settlement asks for documentation supporting your claim — a receipt, an account record, or the notice you were sent. Check the official settlement website for exactly which documents are accepted.
- Is the Centrelake Medical Group Data Breach Settlement notice real, or a scam?
- Simpluris is the settlement administrator for this case. Claims are filed at centrelakedataincidentsettlement.com. Filing a class action claim is always free — no legitimate settlement charges you to claim, and no administrator will ask for payment, a gift card, or your full Social Security number by email or text. If a notice asks for any of those, it is not from the administrator. When in doubt, ignore the link you were sent and go to the official settlement website directly.
- When will payments from the Centrelake Medical Group Data Breach Settlement be sent?
- Class action payouts typically take 12 to 24 months after the claim deadline, and longer if the settlement is appealed. The final approval hearing for this case is set for July 14, 2026; no payments can be issued before a settlement receives final approval.
Who's involved
Parties and counsel from the public court docket. Listing an attorney here isn't an endorsement, and ClaimWatch isn't affiliated with any of them.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More data breach settlements
View all →Period Tracker Data Privacy Settlement (Flo, Google, Flurry)
Between November 2016 and February 2019, the Flo period and ovulation tracker app allegedly incorporated code from third-party software development kits (from Flurry, Meta, and Google) through which user information related to menstruation and pregnancy was allegedly shared without proper legal authorization. Google agreed to pay $48 million, Flo agreed to pay $8 million, and Flurry agreed to pay $3.5 million to settle. All defendants deny wrongdoing and assert they did nothing wrong.
…moreNot stated
Lands' End Data Breach Settlement
Lands' End experienced a data security incident in December 2024 that compromised certain files containing personal information of class members, including names, dates of birth, Social Security numbers, driver's license and passport information, and in some cases medical information. Lands' End denies wrongdoing, but has agreed to settle the lawsuit to avoid costs and risks of continued litigation.
…moreAmerican Vision Partners Data Breach Settlement
American Vision Partners suffered a cyberattack discovered in November 2023 that compromised personal information of approximately 1.6 million U.S. residents, including Social Security numbers for about 258,070 people. Plaintiffs allege personal information was compromised; the defendant denies this allegation.
…morePro-rata cash payments or out-of-pocket expense claims for Damages Settlement Class Members
Wayne Memorial Hospital Data Breach Settlement
Wayne Memorial Hospital had a data incident discovered on or around June 3, 2024, in which certain files may have been accessed without authorization between approximately May 30 and June 3, 2024. The hospital notified potentially impacted individuals on or around August 27, 2025. The lawsuit alleges the hospital was negligent in failing to prevent the data incident. The hospital denies all allegations.
…more