Carespring Health Care Settlement Resolves Data Breach Lawsuit Over Oct. 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Carespring Health Care Management has agreed to settle a class action lawsuit claiming that the Ohio-based nursing and eldercare facility failed to protect sensitive patient information stored on its systems from an October 2023 cyberattack.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Carespring Health Care class action settlement received preliminary approval from the court on December 17, 2025 and covers all individuals who received notice from Carespring that their private information may have been impacted by the October 2023 data breach. Per court documents, approximately 44,000 individuals are set to be covered by the settlement.

The court-approved website for the Carespring Health Care data breach settlement can be found at CarespringDataSettlement.com/.

According to the website, Carespring settlement class members who submit a valid, timely claim form have multiple options for reimbursement.

Class members who submit with their claim form documented proof of out-of-pocket losses stemming from the breach are eligible to receive a one-time cash payment of up to $4,500. The settlement agreement stipulates that expenses must have been incurred due to the October 2023 data breach, and covered losses include those related to identity theft, fraud, credit reports, credit monitoring, and other miscellaneous costs.

In lieu of a documented loss payment, Carespring class members may file a claim to receive an alternative one-time cash payment of $50. The settlement site states that no proof or documentation is needed to claim this benefit.

The settlement agreement reports that class members may elect to receive their cash payouts via check or electronic payment, and all checks must be cashed within 90 days of issuance before expiration.

In addition to any monetary benefits, the settlement site notes that all Carespring settlement class members may file a claim to enroll in two free years of one-bureau credit monitoring, which includes $1,000,000 in identity fraud insurance.

To file a Carespring settlement claim form online, class members can head to this page and enter the unique ID and PIN as provided on their received copy of the settlement notice. Alternatively, class members may download a PDF of the claim form from the settlement site to print, fill out and return by mail to the address of the settlement administrator listed at the top of the document.

All Carespring Health Care settlement claim forms must be submitted online or by mail by April 16, 2026.

Consumers who believe they may be a Carespring settlement class member but did not receive notice can contact the settlement administrator to confirm their identity and obtain their login details.

The court will determine whether to grant final approval to the Carespring Health Care settlement at a hearing on April 28, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Carespring Health Care class action lawsuit alleged that the senior living and rehabilitation facility did not implement appropriate data security measures  to prevent a targeted cyberattack in October 2023. Court documents said that sensitive information that may have been compromised as a result of the data breach included names, dates of birth, Social Security numbers, financial information, health insurance information and medical information.

Looking for current class action lawsuits to join? Check out ClassAction.org’s class action lawsuit list.