Up To $1M Seven Counties Services Settlement Ends Class Action Lawsuit Over 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Seven Counties Services has agreed to pay at least $1,000,000 to resolve a class action lawsuit that alleged the Kentucky-based mental health provider failed to implement adequate cybersecurity safeguards to protect sensitive patient information stored on its networks from a data breach between July 2024 and August 2024.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The Seven Counties Services class action settlement received preliminary approval from the court on December 16, 2025 and covers all individuals impacted by the data breach that occurred from July 19, 2024 to August 12, 2024, including those who received notice of the breach.

Per court documents, approximately 132,609 individuals are set to be included in the settlement class.

The court-approved website for the Seven Counties Services (SCS) data breach settlement can be found at SCSSettlement.com.

According to the website, SCS settlement class members who file a timely, valid claim form have multiple options for reimbursement. The agreement notes that benefits to class members are subject to an aggregate $1 million cap, and all administrative expenses will be paid independently of this restriction.

Class members who submit a claim form with proof of documented losses stemming from the data breach are eligible to receive a cash payment of up to $5,000 from the settlement. According to the agreement, claims for documented loss must be supported by documentation prepared by a third party, and reimbursable expenses include those related to fraud, identity theft, professional fees, credit repair services, credit freezes, credit monitoring and other miscellaneous expenses such as postage or mileage.

In addition to a documented-loss payment, the site reports that SCS class members may also file a claim for reimbursement for up to four hours of lost time spent mitigating the effects of the data breach at a rate of $25 per hour, subject to the $5,000 documented-loss cap.

In lieu of a documented loss or lost-time payment, SCS settlement class members may instead submit a claim form to receive an alternative cash payment of up to $75.

SCS class members may choose to receive their cash payouts via check or electronic payment upon filing a claim, the agreement notes, and all checks must be cashed within 90 days of issuance before expiration.

In addition to any monetary benefits, all SCS settlement class members may file a claim to receive an enrollment code for three free years of CyEx credit monitoring which, per the agreement, includes one-bureau credit monitoring and identity theft protection.

To file an SCS settlement claim form online, class members can head to this page and enter the notice ID and confirmation code as provided on their received copy of the settlement notice. Alternatively, class members can download a PDF of the claim form to print, fill out and return by mail to the address of the settlement administrator listed on the first page of the document.

All Seven Counties Services settlement claim forms must be submitted online or by mail by April 20, 2026.

Finally, as part of the settlement, SCS has also agreed to implement certain business practice enhancements to better secure its network and computer systems following the data breach.

The court will determine whether to grant final approval to the Seven Counties Services settlement following a hearing on April 20, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals are resolved.

The Seven Counties Services class action lawsuit claimed that the mental health and therapy services provider, which operates throughout Kentucky, failed to implement proper cybersecurity safeguards to protect confidential patient information, which led to a data breach between July 19, 2024 and August 12, 2024. Per court documents, private information that may have been compromised during the data breach included full names, dates of birth, Social Security numbers, addresses, contact information, medical history, diagnoses, dates of service and other clinical health information.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.