Serviceaide Data Breach Settlement Up to 5000 for Identity Theft and Fraud Losses

Serviceaide, a healthcare-related technology provider, disclosed a data incident that may have exposed sensitive personal information between September 19, 2024 and November 5, 2024. The affected details described in the notice vary by person and could include names, Social Security numbers, dates of birth, medical record and patient account identifiers, medical/health information, insurance data, prescription or treatment details, and even emails, usernames, and passwords—information that can be used for identity theft and fraud. The settlement class is estimated at about 480,000 people, most of them current and former Catholic Health patients, and it includes anyone who received notice on or after May 9, 2025. A lawsuit—Nancy Balzer, et al. v. Serviceaide, Inc.—was filed as a class action to resolve claims tied to this exposure and the risk or resulting harm it caused. Its significance is practical for individuals: the settlement fund totals $1.8 million and offers two main cash options. Claimants can request “Cash Payment A” up to $5,000 for documented fraud or identity theft losses traceable to the breach, or choose “Cash Payment B,” a smaller pro rata amount of about $50 without documentation; both amounts may be adjusted based on how many valid claims are filed. To participate, people generally must file a claim by September 1, 2026 (and opt out or object by August 17, 2026), and if they do nothing they won’t receive money but will remain in the class and give up the right to sue over these resolved claims. Broader implications reflect an industry-wide pattern: healthcare systems and their vendors are frequent targets because they hold large volumes of highly sensitive data, and breaches can create downstream consumer risk. While regulations like HIPAA in the U.S. focus on protecting health information, breaches involving personally identifiable data often trigger additional expectations around safeguarding credentials and prompt notification under state privacy laws and related requirements. Cases like this—where a breach prompts a class action settlement that trades litigation for structured compensation—mirror similar consumer privacy disputes that continue to shape how healthcare organizations manage vendor security, incident response, and customer notice in a world where data theft can rapidly translate into fraudulent financial activity.