$525K Blackstone Valley Community Health Care Settlement Ends Class Action Lawsuit Over 2023 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Blackstone Valley Community Health Care (BVCHC) has agreed to a settlement of up to $525,000 to wrap up a class action lawsuit that alleged the medical provider failed to protect sensitive information on its systems from a November 2023 cyberattack.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The Blackstone Valley Community Health Care class action settlement received preliminary approval from the court on March 3, 2026. The deal covers all individuals whose private information was potentially compromised in the November 2023 data breach, including anyone to whom Blackstone Valley Community Health Care sent an individual notification letter regarding the incident.

Court documents state that approximately 34,000 people are covered by the class action settlement.

The court-approved website for the Blackstone Valley Community Health Care (BVCHC) data breach settlement can be found at BlackstoneValleySettlement.com.

According to the website, BVCHC settlement class members who file a valid, timely claim form can receive up to $250 for “ordinary” out-of-pocket losses incurred because of the data breach. This benefit covers fees paid for credit reports, credit monitoring and freezing or unfreezing credit, replacement ID costs, and postage to contact banks by mail.

The settlement agreement states that class members must provide third-party documentation, such as receipts, to receive an ordinary-loss payment.

Class members who incurred “extraordinary” losses due to the BVCHC data breach can receive up to $2,500. Per the settlement agreement, this benefit covers losses related to fraud or identity theft that were not covered under the “ordinary” loss option.

The settlement website says that documentation, such as receipts, must be included with a claim form in order to receive an extraordinary-loss payment.

“Ordinary” and “extraordinary” losses stemming from the Blackstone Valley Community Health Care data breach must have been incurred between November 11, 2023 and June 1, 2026, the settlement website says.

Class members can also file a claim form to receive compensation for up to four hours of lost time spent responding to the breach, at a rate of $20 per hour. According to the settlement agreement, this benefit covers time spent changing passwords, monitoring account activity, researching the breach, creating fraud alerts or requesting a credit freeze.

The settlement agreement states that class members may not receive compensation for any monetary losses, including lost time, that another source has already reimbursed.

In addition to monetary benefits, all settlement class members may file a claim form to receive an enrollment code for three years of CyEx Identity Defense Total, which includes one-bureau credit monitoring, dark web scanning, public records monitoring and identity theft insurance.

To file a BVCHC data breach settlement claim form online, class members can head to this page and enter the login ID and PIN found on their copy of the settlement notice. Alternatively, class members may download a PDF of the claim form to print, fill out, and return by mail to the settlement administrator.

All BVCHC settlement claim forms must be submitted online or by mail by June 1, 2026.

The court will determine whether to grant final approval to the Blackstone Valley Community Health Care settlement following a hearing on June 23, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Blackstone Valley Community Health Care class action lawsuit claimed that the Rhode Island-based multispecialty healthcare center failed to implement reasonable cybersecurity measures to protect sensitive information stored on its systems, which led to a targeted cyberattack discovered on or around November 11, 2023. Per court documents, private information that may have been compromised during the data breach included names and Social Security numbers.

Did you know that some class action settlements require no proof to submit a claim? Check out the latest open class action settlements.