$3.5M Mindpath Health Settlement Resolves Class Action Lawsuit Over 2022 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Community Psychiatry Management has agreed to a $3,500,000 class action settlement to resolve a lawsuit that alleged the company failed to protect the private information of Mindpath Health patients from a 2022 data breach.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The Mindpath Health class action settlement received preliminary approval from the court on September 25, 2025 and covers all individuals whose private information may have been compromised in the data security incidents experienced by Mindpath in March 2022 and July 2022, including anyone who received notice about the data breaches.

According to court documents, an estimated 193,947 people are covered by the settlement.

The court-approved website for the Mindpath Health class action settlement can be found at https://www.MindpathSettlement.com/.

Mindpath settlement class members who submit a valid, timely claim form have multiple options for reimbursement. Per the settlement agreement, class members who submit with a valid claim form documented proof of ordinary out-of-pocket expenses and/or lost time are eligible to receive a one-time cash payment of up to $1,500. The agreement details that costs covered under the ordinary-expense reimbursement option include losses related to identity theft, credit monitoring, bank fees, and up to ten hours of lost time, at a rate of $30 per hour.

Class members who submit with a valid claim form documented proof of extraordinary out-of-pocket expenses are eligible to receive a one-time cash payment of up to $10,000, the settlement website continues. Reimbursable extraordinary costs must have been likely caused by the data breach and not be covered by an ordinary expense reimbursement, and the class member must have made reasonable efforts to prevent the loss or seek reimbursement for it, the agreement explains.

In addition to either monetary reimbursement option, class members also have the option to choose between three free years of one-bureau credit monitoring and identity theft protection from IDX OR a one-time, pro-rated alternative cash payment estimated to be $50, the settlement site shares.

Class members residing in California are also entitled to a one-time $50 cash payout, subject to pro-rated adjustment, in addition to other settlement benefits, in recognition of the California Confidentiality of Medical Information Act and California Consumer Privacy Act, the agreement adds.

Per the settlement agreement, class members may elect to receive their payouts by check or electronic payment, and IDX enrollment codes will be sent out via email to class members who opted for the benefit on their claim form. Settlement checks must be cashed within 180 days of issuance before expiration, and enrollment codes will only be valid for 90 days after issuance.

To submit a Mindpath claim form online, class members can head to this page and enter the class member ID and confirmation code found on their copy of the settlement notice. Consumers who believe they may be a class member but did not receive a class action settlement notice should contact the settlement administrator to confirm their identity and receive their login ID.

Alternatively, class members can download a PDF of the claim form to print, fill out, and return by mail to the address of the settlement administrator.

Mindpath settlement claim forms must be submitted online or by mail by January 5, 2026.

The court will determine whether to grant final approval to the Mindpath settlement at a hearing on February 19, 2026. Compensation will begin to be distributed to consumers only after final approval is granted and any appeals are resolved.

The Mindpath Health class action lawsuit alleged that the healthcare provider experienced a ransomware attack as a result of its failure to utilize proper security measures and employee security training, which supposedly allowed hackers to gain unauthorized access to two employee email accounts in March 2022 and June 2022. According to the litigation, the patient information impacted by the data breach included, but was not limited to, names, addresses, dates of birth, medical history, treatment information and Social Security numbers.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.