$315K Rancho Family Medical Group Settlement Ends Class Action Lawsuit Over 2023 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Rancho Family Medical Group (RFMG) has agreed to a $315,000 class action settlement to resolve a lawsuit over a November 2023 data breach.

Get class action lawsuit and settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Rancho Family Medical Group class action settlement received preliminary court approval on August 29, 2025 and covers all United States residents whose personal information was compromised in the November 2023 KMJ Health Service data breach, which impacted RFMG and other healthcare providers. Court documents state that approximately 11,500 people were affected by the cyberattack.

The court-approved website for the Rancho Family Medical Group settlement can be found at RFMGDataSettlement.com.

Rancho Family Medical Group settlement class members who submit a timely, valid claim form will be able to receive up to $10,000 in compensation for out-of-pocket losses related to the data breach and compensation for up to four hours of lost time spent dealing with the effects of the data breach, at a rate of $17 per hour.

Per the settlement website, class members who submit a claim for compensation of out-of-pocket losses must submit reasonable documentation supporting each loss. These losses must have been incurred because of the KMJ data breach, cannot have been already reimbursed by another source, and may include, but are not limited to:

• Losses related to fraud or identity theft;
• Costs associated with freezing or unfreezing credit with any credit reporting agency;
• Credit monitoring costs incurred between November 19, 2023 and the date the claim is submitted;
• Professional fees such as attorneys’ fees, accountants’ fees and fees for credit repair services; and
• Miscellaneous expenses such as postage, fax, copying, mileage, notary and long-distance telephone charges.

Class members who submit a claim for compensation for lost time spent dealing with the effects or potential effects of the data breach must attest to how they spent that time and its relation to the incident. Per the settlement website, attested time may include time spent:

• Changing passwords on potentially impacted accounts;
• Contacting a medical provider or financial institution to discuss suspicious activity;
• Researching the KJM data breach, its impact or how to protect against the effects of such a breach;
• Monitoring for or investigating suspicious activity on potentially impacted medical, financial or other accounts; and
• Signing up for identity theft or fraud monitoring.

Additionally, the settlement offers a pro rata, or equal share, cash payment from the remainder of the $315,000 settlement fund after the payment of legal and administrative fees, lead plaintiff awards and other settlement payments. Though class members do not need to submit a claim form to receive this payment, they must indicate on a claim form the method by which they wish to receive this and any other payments from the settlement.

To submit a claim form online, class members can visit this page of the RFMG settlement website and log in with the unique ID and PIN found in their copy of the settlement notice.

Alternatively, a PDF claim form is available to print, fill out and mail back to the address listed in bold on the second page of the form.

All class action settlement claim forms must be submitted online or postmarked no later than December 29, 2025.

In addition to the available payments, RFMG settlement class members do not need to submit a claim form to receive access to credit monitoring services from the settlement, which will include three years of three-bureau credit monitoring, identity theft insurance and identity restoration services. The enrollment code for these services is provided in the Rancho Family Medical Group settlement notice.

A hearing is scheduled for January 28, 2026 to determine whether the settlement will receive final approval from the court. Settlement benefits will begin to be distributed only after final approval has been granted and any appeals have been resolved.

The Rancho Family Medical Group class action lawsuit claimed that the primary care practice was aware that its third-party tech partner, KMJ Health Solutions, experienced a data breach on November 9, 2023, but, despite knowing the danger the incident posed to  patients’ sensitive personal information, failed to warn consumers until nearly four months after the breach occurred.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.