$725K Granite Wellness Centers Ends Class Action Lawsuit Over Jan. 2021 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Granite Wellness Centers has agreed to a $725,000 settlement to wrap up a class action lawsuit that alleged the California-based rehabilitation centers failed to properly safeguard the sensitive patient information stored on its systems, leading to a data breach in or around January 2021.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Granite Wellness Centers class action settlement received preliminary approval from the court on November 12, 2025 and covers all individuals residing in the United States whose personally identifying and private health information may have been accessed by an unauthorized third party during the January 2021 data breach.

The court-approved website for the Granite Wellness Centers data breach settlement can be found at GraniteWellnessDataSettlement.com.

According to the website, Granite Wellness Centers (GWC) settlement class members who file a valid, timely claim form have multiple options for reimbursement.

The settlement site states that class members who submit a claim form with documented proof of out-of-pocket losses traceable to the data breach are eligible to receive a one-time cash payment of up to $5,000.  Court documents explain that reimbursable expenses include costs related to identity theft or fraud, credit monitoring services or credit reports purchased after January 5, 2021, and other justified miscellaneous fees.

In lieu of a documented loss payment, GWC class members may instead file a claim form to receive a one-time, pro-rated payment of approximately $750. The final amount of this payment, the agreement reports, will depend on the total number of valid claims filed and what remains in the net settlement fund after the payment of attorneys’ fees, settlement administration costs, lead plaintiff service awards, and all other settlement benefits.

In addition to either payout option, the settlement site states that GWC class members who resided in California at any point between January 5, 2021 and April 27, 2026 are eligible to receive an additional one-time, prorated cash payment of approximately $100 due to California-specific statutory provisions.

Class members may elect to receive their cash payouts via check or electronic payment, the agreement relays, and all checks must be cashed within 120 days of issuance before expiration.

Finally, as part of the settlement, GWC has agreed to implement business practice changes to better secure the personal information stored in its servers, including limiting internal access to data, system security assessments, recovery plans, firewalls, and new security training.

To submit a Granite Wellness Centers settlement claim form online, class members can head to this page and enter the Notice ID and confirmation code as listed on their received copy of the settlement notice. Alternatively, class members can download a PDF of the claim form from the settlement site to print, fill out and return by mail to the address of the settlement administrator listed near the top of the document.

All Granite Wellness Centers claim forms must be submitted online or by mail by April 27, 2026.

Consumers who believe they may be a GWC class member but did not receive a notice can contact the settlement administrator to confirm their identity and obtain their login information.

The court will determine whether to grant final approval to the GWC data breach settlement at a hearing on April 28, 2026. Compensation will begin to be distributed to consumers only after final approval is granted and any appeals have been resolved.

The Granite Wellness Centers class action lawsuit alleged that the behavioral health services provider did not implement proper cybersecurity measures to protect sensitive information and prevent an unauthorized party from accessing its systems during the January 2021 data breach. Per court documents, patient information that may have been impacted by the data breach included names, dates of birth, home addresses, dates of care, treatments, medical histories, health insurance information, driver’s license numbers, Social Security numbers and bank account numbers.

Looking for current class action lawsuits to join? Check out ClassAction.org’s class action lawsuit list.