$18M Yale New Haven Settlement Ends Class Action Lawsuit Over Data Breach Discovered in March 2025

New to ClassAction.org? Read our Newswire Disclaimer

Yale New Haven Health Services has agreed to an $18,000,000 class action settlement to wrap up a lawsuit over a sizeable cyberattack discovered in March 2025 that allegedly compromised private patient information.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The Yale New Haven Health Services class action settlement received preliminary approval from the court on October 21, 2025 and covers approximately 5,383,557 United States residents who received notice of the Yale New Haven data breach, indicating that their sensitive information may have been involved in the incident.

The court-approved website for the Yale New Haven Health settlement can be found at https://YaleNewHavenSettlement.com/.

Per the official settlement website, Yale New Haven Health Services settlement class members who submit a valid, timely claim form have multiple options for reimbursement. Those who submit with their claim form documented proof of out-of-pocket losses are eligible to receive a one-time, pro-rated cash payment of up to $5,000, the website relays. The site further outlines that reimbursable losses must have been incurred as a result of the data incident, and include expenses related to identity theft, fraud, freezing credit and credit reports.

In lieu of a documented loss payment, class members may file a claim form to receive a one-time, pro-rated alternate cash payment of approximately $100, which may increase or decrease depending on the total number of valid claims submitted, the class action settlement website says.

According to the settlement agreement, class members may elect to receive their cash payout via check or electronic payment, and all checks must be cashed within 90 days after issuance before expiration.

In addition to either monetary reimbursement option, all class members are also eligible to receive two free years of one-bureau medical data monitoring from CyEx, which provides real-time credit monitoring, dark web scanning, security assistance, identity theft insurance and access to fraud resolution services.

As part of the class action settlement agreement, Yale New Haven Health Services has also agreed to make certain security changes to its systems to address the cyberattack and maintain proper security measures moving forward, court documents state.

To submit a Yale New Haven Health Services claim form online, class members can head to this page and enter the class member ID found on their copy of the settlement notice. Consumers who believe they may be a class member but did not receive a settlement notice should contact the settlement administrator to confirm their identity and receive their login information.

Alternatively, class members may download a PDF of the claim form to print, fill out and return by mail to the address listed near the top of the document.

All Yale New Haven Health Services data breach settlement claim forms must be submitted online or by mail by February 18, 2026.

The court will determine whether to grant final approval to the Yale New Haven settlement at a hearing on March 3, 2026. Compensation will begin to be distributed to consumers only after final approval is granted and any appeals are resolved.

The Yale New Haven Health Services class action lawsuit alleged that a criminal group gained unauthorized access to the healthcare provider’s systems, potentially compromising the private information of thousands of individuals. Per court documents, the private patient information impacted by the data breach, which was discovered on or around March 8 of this year, included, but was not limited to, names, addresses, contact information, race and ethnicity, Social Security numbers, patient types and medical histories.

Did you know that some class action settlements require no proof to submit a claim? Check out the latest open class action settlements.