Discovery Practice Management Settlement Ends Class Action Lawsuit Over June 2020 Data Breach
Magallanes et al. v. Discovery Practice Management, Inc. et al.
Filed: August 26, 2025 ◆§ 30-2021-01213556-CU-MC CXC
Discovery Practice Management will offer cash payments and identity protection services to settle a class action lawsuit over a June 2020 data breach.
California Unfair Competition Law California Confidentiality Of Medical Information Act California Consumer Records Act
California
Discovery Practice Management (DPM) has agreed to settle a class action lawsuit over a June 2020 data breach that potentially compromised individuals’ names, Social Security numbers and other private information.
Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.
The Discovery Practice Management class action settlement received preliminary approval from the court on August 26, 2025 and covers 5,668 individuals who received mailed notice from DPM that their personal information was potentially compromised.
The court-approved website for the DPM data breach settlement can be found at DPMDataSettlement.com.
To receive a DPM settlement cash payment, eligible class members must submit a valid claim form online or by mail by November 24, 2025.
To submit a DPM settlement claim form online, class members can head to this page and enter the unique settlement claim ID found on their copy of the settlement notice.
Alternatively, class members can download a PDF claim form to print, fill out and return by mail to the settlement administrator.
As part of the deal, the website relays that DPM settlement class members who submit a valid, timely claim form are eligible to receive reimbursement of up to $250 per person for “ordinary” out-of-pocket expenses that are reasonably linked to the June 2020 data breach and supported by documentation. Per the site, qualifying expenses must be unreimbursed and may include charges related to obtaining credit reports or freezing credit, bank or credit card fees, costs associated with credit monitoring or identity theft insurance services, overlimit or late fees and other miscellaneous expenses.
Consumers can also file a claim for compensation for up to four hours of lost time spent dealing with issues related to the incident, at a rate of $15 per hour, the website shares. Any claims for lost time will be subject to the $250 cap for reimbursement of ordinary expenses, the settlement agreement adds.
Moreover, the website states that class members who submit a claim form may receive reimbursement of up to $1,000 per person for documented “extraordinary” losses, provided that the charges were caused by the data breach and have not been reimbursed through another source. Covered losses must have been incurred between June 20, 2020 and November 24, 2025, the site notes.
In addition to reimbursement benefits, class members are eligible to enroll in three years of complimentary fraud and identity theft protection services provided by CyEx, the site says. Per the website, though a claim form is not required, class members must enroll by December 9, 2025 to receive these services.
Class members can enroll on this page using their email address and the activation code sent in the settlement notice.
Consumers who believe they may be a class member but did not receive a class action settlement notice can contact the settlement administrator to confirm their identity and receive their login information.
The court will determine whether to grant final approval to the DPM settlement at a hearing on February 5, 2026. The agreement states that, should the deal be ultimately approved, settlement payments will be issued to eligible class members within 60 days following the date the deal goes into effect, or within 30 days of the date their claim is approved, whichever is later.
The Discovery Practice Management class action lawsuit alleged that inadequate cybersecurity on the part of the California-based healthcare provider resulted in unauthorized access to two employee email accounts in June 2020. According to court documents, the personal information potentially impacted by the data breach included names, dates of birth, addresses, medical information, insurance information, contact information and Social Security numbers.
Check out ClassAction.org’s free legal resources to learn how to file a class action lawsuit.
Video Game Addiction Lawsuits
If your child suffers from video game addiction — including Fortnite addiction or Roblox addiction — you may be able to take legal action. Gamers 18 to 22 may also qualify.
Learn more:Video Game Addiction Lawsuit
Depo-Provera Lawsuits
Anyone who received Depo-Provera or Depo-Provera SubQ injections and has been diagnosed with meningioma, a type of brain tumor, may be able to take legal action.
Read more: Depo-Provera Lawsuit
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.