CDCR $1.8M Data Breach Class Action Settlement

If your protected health information or personally identifiable information was stored on a California Department of Corrections and Rehabilitation (CDCR) server accessed during a data incident in January 2022, you may be eligible to claim a cash payment from a class action settlement.

The CDCR has agreed to pay $1,800,000 to settle a class action lawsuit due to alleged unauthorized access to sensitive data.

Who can claim compensation?

You are considered a class member if your protected health information (PHI) and/or personally identifiable information (PII) was stored on the CDCR platform accessed during the incident.

Notifications were sent to class members in August 2022, and additional notices about the settlement may have been mailed directly.

• You are a class member if you received a postcard notice.
• If you did not receive a postcard but believe you are a class member, you must submit a valid claim form.

How much are the payouts?

All class members are eligible to receive a cash payment. The amount depends on the number of valid claims submitted.

If you received a postcard notice, no action is required to receive your payment. If you did not receive a notice, you must submit a claim form.

How to file a claim

Class members can file a claim online or download the PDF claim form and mail it to the settlement administrator at Thomas v. California Department of Corrections and Rehabilitation, c/o CPT Group, Inc., 50 Corporate Park, Irvine, CA 92606.

Claim instructions

1. Visit the settlement website to file a claim online or download the PDF claim form.
2. Complete the form with your name, address, and CDCR number if applicable.
3. Submit the form online or mail it to the settlement administrator.

$1.8 Million Settlement fund

The settlement fund of $1,800,000 will cover:

• Cash payments to class members
• Costs of notice and claims administration
• Attorneys' fees and costs of $630,000
• Service awards to the plaintiffs of $2,500 x 4

Important dates

• Deadline to File a Claim: February 14, 2025
• Final Approval Hearing: March 7, 2025

When is the Thomas v. CDCR payout date?

The court will hold a final approval hearing on March 7, 2025. If the settlement is approved, payments will be distributed to eligible class members.

Why was there a class action settlement?

The lawsuit arose from a data incident in January 2022, where an unauthorized user accessed CDCR's platform. Although CDCR denies any wrongdoing, they agreed to settle to avoid the risks and costs associated with continued litigation.