$2.5M General Physician P.C. Settlement Ends Class Action Lawsuit Over Mid-2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

General Physician P.C. has agreed to a $2,500,000 settlement to resolve a class action lawsuit that alleged the New York-based healthcare provider failed to protect sensitive patient information stored on its systems from a data breach between April and June 2024.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The General Physician class action settlement received preliminary approval from the court on January 23, 2026 and covers all individuals residing in the United States whose private information may have been accessed and/or acquired by an unauthorized third party as a result of the data breach reported by the healthcare provider in October 2024.

Per court documents, approximately 490,210 individuals are covered by the settlement.

The court-approved website for the General Physician data breach settlement can be found at GeneralPhysicianDataIncidentSettlement.com.

According to the site, General Physician settlement class members who file a timely, valid claim form have multiple options for reimbursement.

The settlement agreement states that class members who submit a claim form with proof of documented losses stemming from the data breach are eligible to receive a one-time cash payment of up to $5,000, also referred to as “Cash Payment A” in all court documents.

The site explains that claims for Cash Payment A must be submitted with documentation prepared by a third party and cannot have already been reimbursed by another source in connection with the identity protection services offered by General Physician as part of the data breach notice letter.

In lieu of a documented-loss payment, General Physician settlement class members may file a claim to receive an alternative cash payment of approximately $60, also referred to as “Cash Payment B” on all court documents. The agreement explains that this payment will be a pro-rated share of what remains in the net settlement fund after all attorneys’ fees, settlement administration costs, lead plaintiff service awards and other settlement benefits have been paid.

Class members may elect to receive their cash payouts via check or electronic payment, the agreement notes, and all checks must be cashed within 120 days of issuance before expiration.

In addition to either cash payment, the agreement states, all General Physician class members may file a claim form to receive an enrollment code for two free years of CyEx Medical Shield Complete, which includes one-bureau credit monitoring, medical identity monitoring and identity theft insurance.

The agreement states that credit and medical monitoring benefits will be available to all class members regardless of whether they previously enrolled in a monitoring product offered by General Physician in response to the data breach.

To file a General Physician data breach claim form online, class members can head to this page and log in using the class member ID found on their received copy of the settlement notice.

Alternatively, class members can download a PDF of the claim form from the settlement site to print, fill out and return by mail to the address of the settlement administrator listed on the first page of the document.

All General Physician settlement claim forms must be submitted online or by mail by May 27, 2026.

The court will determine whether to grant final approval to the General Physician settlement following a hearing on June 4, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The General Physician class action lawsuit claimed that the multi-disciplinary medical group based in Buffalo, New York, failed to implement reasonable cybersecurity safeguards to protect sensitive patient information stored on its systems from a data breach that occurred sometime between April 6, 2024 and June 12, 2024. Per court documents, private information that may have been accessed in the breach includes names, dates of birth, addresses, Social Security numbers, financial account information, medical history, treatment information, diagnoses, medical record numbers and health insurance information.

Check out ClassAction.org’s free legal resources to learn how to file a class action lawsuit.