Hillcrest Convalescent Center Data Breach Settlement Up to 2500 for Exposed Medical Data
The Hillcrest Convalescent Center Data Breach Settlement Up to 2500 for Exposed Medical Data settlement, with individual payouts of $50 to $2.50K to eligible claimants who must be a class member whose private information was potentially exposed as a result of the june 2024 hillcrest convalescent center cyberattack. The deadline to file is August 26, 2026. Proof of purchase is required.
Deadline: August 26, 2026
Total amount allocated for all claims
Estimated amount per eligible claim
No proof is required to receive the one-time $50 Alternative Cash Payment (Group 1) or the two years of free credit monitoring benefit. Proof/documentation is required only if seeking reimbursement of up to $2,500 for documented out-of-pocket losses related to the breach.
Settlement Summary
Hillcrest Convalescent Center is a proposed class action settlement after a June 2024 cyberattack that may have exposed sensitive information belonging to patients and other affected individuals. According to the settlement notice, the data could include Social Security numbers and medical information—highly regulated details that can increase risks like identity theft and targeted fraud. The case, In re Hillcrest Convalescent Center, Inc. Data Breach Litigation (Superior Court of Durham County, North Carolina), centers on what happened after the breach and whether the company’s security practices and handling of personal data exposed class members to harm. The lawsuit was filed to give affected people a way to seek compensation and remedial protections when private medical and identity data may have been compromised. If the settlement is approved, class members can claim up to $2,500 for documented out-of-pocket losses and receive two years of free credit monitoring with $1 million in identity theft insurance; importantly, people in the subclass whose Social Security numbers were potentially impacted can instead choose a one-time $50 payment without needing to provide proof. This matters beyond just one incident, because data breaches involving health and identity information often trigger scrutiny under privacy and cybersecurity expectations, including the U.S. HIPAA framework for protected health information (and related state breach and consumer-protection laws), and have produced similar consumer compensation-focused outcomes in other breaches. Claims must be filed by August 26, 2026, with deadlines to opt out or object by July 27, 2026, and a final approval hearing scheduled for August 24, 2026, making this settlement a concrete example of how the legal system tries to balance cybersecurity accountability with practical remedies for affected individuals—especially in cases where medical records are involved.
Entities Involved
Related Topics
Eligibility Requirements
- Must be a class member whose private information was potentially exposed as a result of the June 2024 Hillcrest Convalescent Center cyberattack
- For the Group 1 subclass: Social Security number potentially impacted by the breach
- For reimbursement of up to $2,500: must have documentation of out-of-pocket losses related to the incident
Featured Investigations
Important Notice About Filing Claims
Submitting false information in a settlement claim is considered perjury and will result in your claim being rejected. Fraudulent claims harm legitimate class members and may result in legal consequences.
If you are unsure about your eligibility for this settlement, please visit the official settlement administrator’s website using the link provided above. Review the eligibility criteria carefully before submitting a claim.
Class Action Champion is an independent information resource and is not affiliated with any settlement administrator, law firm, or court. We provide settlement information as a service to help connect eligible class members with legitimate settlements.