.png)
Current and former patients who received a notice in early 2023 stating a data breach involving Heritage Provider Network or its affiliates may have exposed their personal or medical information could qualify to claim a cash payment and medical monitoring from a class action settlement. The settlement class consists of an estimated 3,413,000 individuals.
Heritage Provider Network Inc. and several affiliated medical entities agreed to pay $49,995,000 to settle a class action lawsuit. The lawsuit alleged the defendants failed to adequately protect sensitive patient and member data, resulting in a large-scale data breach in December 2022 that potentially exposed names, Social Security numbers, addresses, dates of birth, medical information and other personal details.
Who is eligible for a data breach payout?
Class members are individuals who received a notice from Heritage Provider Network or its affiliates in or around February or March 2023 regarding the December 2022 data incident.
The settlement includes the following medical practices:
- Regal Medical Group
- Lakeside Medical Group
- ADOC Medical Group
- Greater Covina Medical Group
- Affiliated Doctors of Orange County Medical Group
- Arizona Priority Care
- Community Surgery Center of Glendale
- Pacific Family Hospice
- Valley’s Best Hospice
How much is the class action settlement payment?
Class members can submit a claim to receive one or more of the following benefits:
- Fraud/out-of-pocket costs payment: Class members can claim up to $10,000 for documented, unreimbursed losses or costs fairly traceable to the breach. This includes losses due to identity theft or fraud, such as late fees, overdraft fees, card cancellation and replacement fees, costs of purchasing credit reports or freezing/unfreezing credit, and any credit or medical monitoring services purchased after the data breach. If the total claims in this category exceed $2,000,000, the settlement administrator will reduce payments on a pro rata basis.
- Documented time payment: Class members can claim up to seven hours of time spent dealing with issues traceable to the data breach at $30 per hour up to a total of $210. If the total approved claims in this category exceed $1,000,000, the settlement administrator will reduce payments on a pro rata basis.
- Monetary payment: All class members can submit a claim to receive a pro rata cash payment from the remaining net settlement fund after the settlement administrator pays any fraud/out-of-pocket and documented time claims. The settlement administrator will determine the final payment amount by the number of approved claims. It is estimated to be between $68.72 and $357.97.
- Identity theft monitoring: Class members can elect to receive three years of CyEx identity theft monitoring services, which includes credit monitoring, health care ID monitoring, dark web monitoring, $1 million identity theft insurance and other features.
How to claim a data breach class action rebate
To receive a settlement payment or identity theft monitoring, class members must submit a claim form by Dec. 22, 2025. They can do this in several ways:
- File a claim online using the online claim form
- Print and mail the PDF claim form to the settlement administrator
- Email an electronic image of the claim form to the settlement administrator
Settlement administrator's mailing address: Regal Medical Data Breach Litigation, c/o Settlement Administrator, P.O. Box 25412 Santa Ana, CA 92799-9958
Settlement administrator's email address: info@RegalMedicalSettlement.com
Required proof and claim information
- To submit an online claim, class members must provide the unique ID and PIN from their settlement notice.
- Fraud/out-of-pocket cost claims require supporting documentation, such as credit card and bank statements, invoices for services, receipts, police reports and other proof of identity theft and fraudulent transactions or loans.
Payout options
Claimants can choose to receive payment by:
- PayPal
- Venmo
- Zelle
- Virtual prepaid card
- Paper check mailed to the address provided
$49.99 million data breach settlement fund
The $49,995,000 settlement fund will include:
- Settlement administration costs: $2,450,000 to $4,210,804.83
- Attorneys' fees: Up to $16,665,000
- Attorneys' expenses: Approximately $138,766.80
- Service awards to class representatives: $7,500 each for seven representatives ($52,500 total)
- Payments to approved claimants: Remaining settlement funds
The defendants will pay for identity theft monitoring services separate from the settlement fund.
Important dates
- Opt out deadline: Nov. 24, 2025
- Claim deadline: Dec. 22, 2025
- Final approval hearing: Jan. 28, 2026
When is the Regal Medical Group settlement payout date?
The settlement administrator will issue payments and identity theft enrollment instructions to approved claimants 60 days after the court grants final approval of the settlement or after claim processing is complete, whichever is later.
Why is there a class action settlement?
The class action lawsuit alleged Heritage Provider Network and its affiliates experienced a December 2022 data breach that exposed personal and medical information belonging to millions of members and patients. The plaintiffs alleged the defendants failed to adequately protect this sensitive information, resulting in harm and risk of identity theft.
Heritage Provider Network and the medical groups involved deny any wrongdoing but agreed to settle to avoid further litigation and the possibility of a trial.
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.svg)
Comments