Concord Orthopaedics Settlement Ends Class Action Lawsuit Over November 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Concord Orthopaedics Professional Association has agreed to settle a class action lawsuit that alleged the healthcare group failed to protect the sensitive patient information stored on its systems from a November 2024 data breach.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Concord Orthopaedics class action settlement received preliminary approval from the court on February 24, 2026 and covers all individuals within the United States whose private information was accessed in the November 2024 data breach.

The court-approved website for the Concord Orthopaedics data breach settlement can be found at ConcordDataSettlement.com.

According to the website, Concord Orthopaedics settlement class members who file a valid, timely claim form are eligible to receive up to two cash payments and one year of medical data monitoring.

Class members who submit a claim form with proof of documented losses incurred between November 21, 2024 and July 8, 2024 are eligible to receive up to $3,000 in reimbursement. The settlement agreement explains that class members must submit proof, like receipts, to receive compensation for losses related to identity theft, fraud, obtaining credit reports, credit monitoring, freezing credit, replacing IDs and postage.

The agreement notes that class members cannot receive compensation for expenses that have already been reimbursed, including through the credit monitoring and identity theft protection product offered by Concord Orthopaedics in the data breach notice.

Furthermore, class members may also file a claim form to receive compensation for up to four hours of lost time spent responding to the breach, such as changing passwords, investigating suspicious account activity and researching the breach. Claims for lost time will be reimbursed at a rate of $25 per hour, up to a maximum of $100.

Finally, class members may file a claim form for an alternative $50 cash payment.

Importantly, the agreement outlines that class members may elect to receive a documented-loss payment and payment for either lost time or an alternative cash payment, but not both.

Class members may receive their settlement payout via check or electronic payment, and all checks must be cashed within 90 days of issuance before expiration, the agreement states.

In addition to any cash benefits, all settlement class members may also file a claim form to receive one free year of CyEx Medical Shield Monitoring, which monitors healthcare insurance IDs, medical record numbers and health savings account spending, per the agreement.

To file a Concord Orthopaedics settlement claim form online, class members can head to this page and log in using the unique ID and PIN found on their copy of the settlement notice. Alternatively, class members may download a PDF of the claim form from the site to print, fill out and return by mail to the address of the settlement administrator on the second page.

All Concord Orthopaedics data breach claim forms must be submitted online or by mail by July 8, 2026.

The settlement agreement recognizes that parents or legal guardians of minor class members may submit claims for documented losses and lost time for reimbursement. According to court documents, claims filed for CyEx Medical Shield Monitoring will be for the benefit of the minor child on whose behalf the claim was filed, not the parent or guardian who submitted the claim.

The court will determine whether to grant final approval to the Concord Orthopaedics data breach settlement following a hearing on June 23, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Concord Orthopaedics Professional Association class action lawsuit claimed that the New Hampshire-based chain of orthopedic healthcare providers failed to implement reasonable security measures to protect the sensitive patient information it stored from a cyberattack involving a third-party vendor used for patient check-ins, discovered on November 21, 2024. Per court documents, private information that may have been compromised in the data breach includes names, dates of birth, Social Security numbers, appointment information, health insurance information, and driver’s license or state identification numbers.

Did you know that some class action settlements require no proof to submit a claim? Check out the latest open class action settlements.