Hillcrest Convalescent Center Settlement Ends Class Action Lawsuit Over June 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Hillcrest Convalescent Center has agreed to a settlement to wrap up a class action lawsuit that alleged the nursing and assisted living provider failed to protect the private information of current and former patients and employees from a June 2024 data breach.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The Hillcrest Convalescent Center class action settlement received preliminary approval from the court on April 27, 2026. The agreement covers all living individuals in the United States whose private information was implicated in the June 2024 data breach.

Court documents state that the private information of approximately 106,194 people was accessible in the data breach, including 20,000 individuals whose Social Security numbers were potentially compromised (the Group 1 settlement subclass).

The court-approved website for the Hillcrest Convalescent Center data breach settlement can be found at HCCDataSettlement.com.

Hillcrest settlement class members who file a valid, timely claim form can receive up to $2,500 for documented out-of-pocket losses incurred between June 27, 2024 and August 26, 2026 due to the data breach. This benefit covers losses from fraud or identity theft and the costs of credit reports, credit monitoring, freezing or unfreezing credit, replacement IDs, and more.

Class members must submit proof, such as receipts or bank statements, to receive a documented-loss payment.

Additionally, class members can file a claim form to receive two years of CyEx Identity Defense Complete, which includes one-bureau credit monitoring and identity theft insurance.

In lieu of any other benefit, Group 1 settlement class members can instead file a claim form to receive an estimated $50 cash payment, with no proof required. 

Court documents state that class members whose Social Security numbers were not among the private information potentially compromised in the incident cannot submit a claim for the alternative cash payment, but can still submit a claim form for CyEx credit monitoring services and/or a documented-loss payment.

To file a Hillcrest Convalescent Center settlement claim form online, class members can head to this page and log in using the unique ID and PIN found on their copy of the settlement notice. Alternatively, class members can download a PDF of the claim form to print, fill out, and return by mail to the settlement administrator.

All Hillcrest settlement claim forms must be submitted online or by mail by August 26, 2026.

The court will determine whether to grant final approval to the Hillcrest Convalescent Center settlement following a hearing on August 24, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Hillcrest Convalescent Center class action lawsuit alleged that the North Carolina-based operator of nursing homes and medical centers failed to implement adequate cybersecurity safeguards to protect current and former patients’ and employees’ sensitive information, which allegedly led to a data breach on or around June 27, 2024.

Per court documents, private information potentially exposed due to the breach included names, addresses, financial account information, dates of birth, driver’s license and government-issued ID numbers, medical information, health insurance information, and for a subset of class members, Social Security numbers.

Check out ClassAction.org’s lawsuit list for current class action lawsuits.