$1M Charleston Area Medical Center Settlement Ends Class Action Over October 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Charleston Area Medical Center has agreed to a $1,000,000 settlement to resolve a class action lawsuit that alleged the West Virginia hospital failed to protect sensitive patient information stored on its systems from an October 2024 data breach.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The $1 million Charleston Area Medical Center class action settlement received preliminary approval from the court on February 12, 2026 and covers all United States residents whose personal information was potentially compromised in the October 2024 data breach and who received notice of the breach from the healthcare provider.

Court documents estimate that approximately 67,413 individuals may have been affected by the data breach.

The court-approved website for the Charleston Area Medical Center (CAMC) data breach settlement can be found at CAMCDataBreachSettlement.com.

According to the settlement website, all CAMC settlement class members are automatically eligible to enroll in four free years of credit monitoring and identity theft protection services with no claim form required.

The settlement agreement states that class members will be provided a unique enrollment code for the credit monitoring service through a separate settlement summary notice.

CAMC settlement class members who file a valid, timely claim form also have multiple options for monetary reimbursement from the settlement.

Class members who submit with their claim form proof of documented monetary losses stemming from the breach are eligible to receive a one-time cash payment of up to $6,000. The agreement explains that class members must submit third-party documentation, like receipts or bank statements, to receive compensation for unreimbursed losses related to fraud, identity theft, credit monitoring costs and miscellaneous expenses such as postage or travel.

The agreement further states that class members may also submit a claim form to receive compensation for up to four hours of time spent responding to the breach, at a rate of $20 per hour, with a written attestation of how such time was spent.

Per the agreement, the lost-time benefit is intended to cover activities such as changing passwords on potentially impacted accounts, monitoring suspicious activity, or researching the data breach.

In lieu of claims for documented losses and/or lost time, CAMC class members may file a claim form to receive a one-time, pro-rated alternative cash payment. The final amount of this payment, the agreement notes, will depend on the number of valid claims filed and the amount remaining in the net settlement fund following payment of attorneys’ fees, administration costs, lead plaintiff service awards and all other settlement benefits.

Class members may receive their settlement payout via check or electronic payment, and the agreement says all checks must be cashed within 120 days of issuance before expiration.

To file a CAMC data breach claim form online, class members can head to this page and log in using the ILYM ID and passcode found on their copy of the settlement notice. Alternatively, class members may download a PDF of the claim form to print, fill out and return by mail to the address of the settlement administrator on the first page of the document.

Consumers who did not receive a settlement notice but believe they are included in the class may still file a claim form on this page by entering their name, email address and any other relevant information required to determine settlement eligibility.

All CAMC settlement claim forms must be submitted online or by mail by June 10, 2026.

Finally, CAMC has agreed to implement improved data security measures for a period of four years following the effective date of the settlement.

The court will determine whether to grant final approval to the CAMC data breach settlement following a hearing on June 23, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The Charleston Area Medical Center class action lawsuit alleged that the multi-specialty hospital in West Virginia failed to enact proper cybersecurity measures to prevent an email phishing attack in October 2024 that granted an unauthorized user access to protected patient information by way of an employee’s email account. Per court documents, private information that may have been compromised in the data breach includes full names, dates of birth, Social Security numbers, contact information, driver’s license information, medical information and health insurance information.

Check out ClassAction.org’s free legal resources to learn how to file a class action lawsuit.