Staten Island University Hospital Settlement Resolves Class Action Lawsuit Over January 2024 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Staten Island University Hospital (SIUH) has agreed to settle a class action lawsuit alleging the hospital failed to protect sensitive patient information that was compromised during a January 2024 cyberattack at Medibase, a technology company that provided SIUH with software solutions.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Staten Island University Hospital class action settlement received preliminary approval from the court on December 18, 2025 and covers living individuals in the United States whose private information was compromised as a result of the January 2024 Medibase data breach.

The court-approved website for the Staten Island University Hospital and Medibase data breach settlement can be found at MedibaseSIUHDataBreachSettlement.com.

According to the website, SIUH settlement class members who submit a valid, timely claim have multiple options for reimbursement.

Those who experienced out-of-pocket losses related to the data breach may submit a claim with documented proof of their losses to receive reimbursement of up to $1,000. Per the settlement site, covered losses must have been incurred between January 26, 2024 and March 16, 2026 and may include those related to identity theft, fraud, credit reports, credit monitoring, and other miscellaneous expenses.

In addition to the documented-loss payment, class members may file a claim to receive a cash payment of $35 without needing to provide any proof, the agreement reports.

Class members may elect to receive their settlement cash payout via check or electronic payment, the agreement notes, and all checks must be cashed within 90 days of issuance.

In addition to any monetary benefits, all SIUH class members may also file a claim to receive an enrollment code for two free years of CyEx Medical Shield Complete, which includes identity theft insurance and monitoring of health insurance IDs, medical record numbers and unauthorized health savings account (HAS) spending, according to the settlement site.

Finally, the settlement agreement notes that SIUH has terminated its business agreement with Medibase.

To file a SIUH settlement claim form online, class members can head to this page and enter the unique ID and PIN as provided on their copy of the settlement notice. Alternatively, class members may download a PDF of the claim form from the settlement website to print, fill out and return by mail to the address of the settlement administrator on the second page of the document.

Consumers who believe they may be a settlement class member but did not receive notice should email the settlement administrator to confirm their identity and obtain their login details.

All SIUH claim forms must be submitted online or by mail by March 16, 2026.

The court will determine whether to grant final approval to the SIUH data breach settlement at a hearing on March 31, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Staten Island University Hospital class action lawsuit alleged that Medibase, a healthcare software company, experienced a data breach on or around January 26, 2024 that potentially compromised the private information of current and former patients of the New York City-based hospital. Per court documents, the sensitive data that may have been impacted by the breach included, but is not limited to, names, dates of birth, Social Security numbers, admit and discharge dates, outstanding account balances, and health insurance information.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.