Kitsap Mental Health Services Settlement Resolves Class Action Suit Over Oct. 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Kitsap Mental Health Services has agreed to settle a class action lawsuit that claimed the Washington mental healthcare provider failed to properly protect sensitive patient information from a targeted cyberattack in October 2024.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Kitsap Mental Health Services class action settlement received preliminary approval from the court on October 3, 2025 and covers approximately 70,759 individuals whose private information may have been compromised as a result of the October 2024 data breach.

The court-approved website for the Kitsap Mental Health Services (KMHS) settlement can be found at https://www.KMHSDataSecuritySettlement.com/.

According to the website, KMHS settlement class members who submit a timely, valid claim form have multiple options for reimbursement. Those who submit with their claim form documented proof of out-of-pocket losses are eligible to receive a one-time cash payment of up to $3,000, which is referred to as Cash Payment A. The settlement agreement adds that data breach-related losses must have occurred between October 17, 2024 and February 5, 2026, and reimbursable expenses include those related to identity theft, fraud, credit report fees, freezing credit, and costs to replace identification.

In addition to, or in lieu of, a documented-loss payment, KMHS settlement class members may also file a claim for reimbursement for lost time spent remedying issues related to the data breach, at a rate of $25 per hour for a maximum of four hours, which is referred to as Cash Payment B.

The settlement agreement relays that KMHS class members may elect to receive their payout via check or electronic payment, and checks must be cashed before the listed date of expiration.

In addition to monetary relief, all KMHS class members are also eligible to enroll in two free years of CyEx Medical Shield Complete, which provides monitoring for healthcare insurance information, medical records, and health savings account spending. Per the settlement agreement, the settlement administrator will send activation codes via email to class members who enrolled in this benefit.

To submit a Kitsap Mental Health Services settlement claim form online, class members can head to this page and enter the unique class member ID and PIN listed on their copy of the settlement notice. Consumers who believe they may be a class member but did not receive a notice should contact the settlement administrator to confirm their identity and receive their login information.

Alternatively, class members may download a PDF of the claim form from the KMHS settlement website to print, fill out and return by mail to the address listed on the second page of the document.

All Kitsap Mental Health Services data breach claim forms must be submitted online or by mail by February 5, 2026.

The court will determine whether to grant final approval to the Kitsap Mental Health Services settlement at a hearing on March 6, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Kitsap Mental Health Services class action lawsuit alleged that the mental healthcare provider failed to implement reasonable cybersecurity measures to safeguard the private patient information stored on its systems, leading to a data breach between the approximate dates of September 17, 2024 and October 8, 2024. Per court documents, the patient data allegedly compromised as a result of the data breach included, but was not limited to, names, dates of birth, addresses, Social Security numbers, driver’s license and state ID numbers, medical records, treatment information and financial information.

Looking for current class action lawsuits to join? Check out ClassAction.org’s class action lawsuit list.