Asheville Eye Associates Data Breach Settlement: Claim Up to $1,250 for Exposed Patient Records

What happened

Class period: Individuals whose PII/PHI was compromised in the November 2024 AEA cyberattack (notifications sent beginning February 4, 2025)

• In November 2024, Asheville Eye Associates, PLLC (AEA) was hit by a cyberattack that compromised the personally identifiable information (PII) and protected health information (PHI) of current and former patients
• Exposed data types included names, addresses, health insurance information, Social Security Numbers, and medical treatment information
• AEA began notifying affected individuals on February 4, 2025
• Plaintiffs filed a class action lawsuit in the North Carolina Business Court alleging AEA failed to adequately protect patient data; AEA denies any wrongdoing and no court has found liability

What you can get

Key dates

Who may qualify

• You are a current or former patient of Asheville Eye Associates, PLLC
• Your personal or health information (PII/PHI) was compromised in the November 2024 data breach
• You received a data breach notification from AEA on or after February 4, 2025
• You are not an officer, director, employee, or legal affiliate of AEA
• You are not a member of the judiciary overseeing the case or their immediate family

How to file

1. 1. Visit the official settlement website at https://aeadatasettlement.com and click "Submit Claim"
2. 2. Complete the Claim Form with your personal information and a description of your documented losses
3. 3. Gather supporting documentation for each out-of-pocket expense you are claiming (bank statements, receipts, credit card statements, proof of credit monitoring purchases, etc.)
4. 4. Submit your Claim Form online by April 6, 2026 — or mail your completed paper Claim Form postmarked by April 6, 2026 to: Asheville Eye Associates Data Incident Litigation, c/o Kroll Settlement Administration LLC, PO Box 225391, New York, NY 10150-5391
5. 5. No Claim Form is needed for the $10 eyeglasses voucher or identity theft protection — those are issued automatically to all participating class members after final court approval

Proof required

• Supporting documentation for each out-of-pocket expense claimed (bank or credit card statements, receipts, invoices, etc.)
• Documentation must show the loss was actually incurred and plausibly connected to the November 2024 AEA data breach
• Eligible documented losses include: unreimbursed bank fees, card reissuance fees, overdraft fees, late fees, over-limit fees, charges from banks or credit card companies related to the breach, interest on payday loans due to card cancellation or over-limit situations, and costs of credit reports or credit monitoring products purchased in response to the breach
• Claims submitted without required supporting documentation will be denied

Payment timing

Settlement payments will be distributed after the Court grants final approval (hearing scheduled May 14, 2026) and any appeal period has expired. Online filers may receive electronic/ACH payment; paper Claim Form filers will receive a check.

Important links

• Official website
• Claim form
• Important dates
• FAQs
• Documents

Contact

Extra details

• The $10 eyeglasses voucher is valid at any Asheville Eye Associates location except 21 Medical Park Drive, Asheville, NC 28803
• Identity theft protection enrollment codes will be distributed to all participating class members only after the Court grants final approval — do not expect codes before May 2026 at the earliest
• Class Counsel is Gary M. Klinger of Milberg Coleman Bryson Phillips Grossman PLLC; you may also hire your own attorney at your own expense
• Attorneys' fees and expenses are capped at $500,000 and will be paid separately by AEA — they do not reduce class member benefits
• Service awards for named plaintiffs are capped at $1,250 each ($6,250 total), also paid separately by AEA
• The case is pending before Judge Mark A. Davis in the North Carolina Business Court, Case No. 25CV000809-100
• If you exclude yourself from the settlement, you will not receive any benefits but retain the right to pursue your own legal action against AEA related to the breach

FAQ