Deadline: May 5, 2026
Last updated: 2026-03-26
Your Cardiologist Was Watching Your Heart. Apparently, Not Their Servers. | CVA Data Breach Settlement 2026
Cardiovascular Associates (CVA) excels at monitoring hearts — turns out, monitoring their own network was a different story. A November–December 2022 breach exposed patients' and employees' Social Security numbers, financial accounts, and health data. A $4.85 million settlement is now available: claim up to $5,000 in cash reimbursements plus three years of free credit and medical monitoring before the May 5, 2026 deadline.
Deadline: May 5, 2026
File Your Claim →
Applies to
Nationwide
Main deadline
May 5, 2026
Benefit
Valid claimants can receive up to $5,000 in cash reimbursements for documented losses, a pro rata cash payment (estimated $50+) with no documentation required, and three years of complimentary credit and medical data monitoring services.
Official site
Nationwide
What happened
Class period: November 28, 2022 – December 5, 2022
- Between November 28 and December 5, 2022, an unauthorized third party accessed computer systems belonging to Baptist Health Centers, LLC, d/b/a Cardiovascular Associates (CVA)
- CVA discovered the breach on or about December 5, 2022 and began notifying affected individuals in February and March 2023
- Exposed data included names, dates of birth, addresses, Social Security Numbers, passport and driver's license numbers, credit and debit card information, and financial account details
- A class action lawsuit was filed alleging Negligence/Wantonness and Negligence Per Se
- CVA denies all wrongdoing, but the parties agreed to a $4,850,000 non-reversionary settlement fund
What you can get
Pro Rata Cash Payment
$50+ (estimated)
No documentation required — just submit a valid claim form Documented Monetary Losses
Key dates
| Action | Date | What it means |
|---|---|---|
| Claim deadline | May 5, 2026 | Last day to file a claim |
| Final hearing | May 11, 2026 at 1:00 p.m. CT — Circuit Court of Jefferson County, Birmingham Division, 716 Richard Arrington Jr. Blvd. N., Room 650, Birmingham, Alabama 35203 | Judge decides whether to approve |
Who may qualify
- U.S. residents whose Personal Information was accessed during the CVA Data Security Incident (November 28 – December 5, 2022)
- Current and former CVA patients
- Current and former CVA employees
- Individuals who received a notice letter from CVA in early 2023
- Those who have a Settlement Claim ID (though filing without one is also possible)
How to file
- 1. Visit the official claims portal at https://cvasettlement.eagclaims.com/
- 2. Enter your Settlement Claim ID if you have one (found on your CVA notice letter) — or select the option to file without one
- 3. Complete the Claimant Information and Claim Information sections
- 4. If claiming Documented Monetary Losses, upload supporting documentation (third-party receipts, bank statements, professional invoices — self-prepared documents alone are not sufficient)
- 5. Select your payment preference and submit before May 5, 2026 at 11:59:59 PM CST
- 6. Alternatively, download the paper Claim Form at https://www.cvasettlement.com/wp-content/uploads/2026/01/CVA-Claim-Form.pdf and mail it to the Settlement Administrator so it is postmarked by May 5, 2026
Proof required
- No documentation required to claim the Pro Rata Cash Payment or Credit and Medical Data Monitoring Services
- For Documented Monetary Losses: third-party receipts, bank statements, professional invoices, or other records not self-prepared by the claimant
- Self-prepared documents (e.g., handwritten receipts) may be submitted as supporting context but are not sufficient on their own
Payment timing
Payments will be distributed after Final Approval is granted (hearing scheduled May 11, 2026) and any appeal period has passed. Payment method options are selected during claim submission.
Important links
Contact
Phone: 1-833-402-7061
Email: info@CVASettlement.com
Mail: CVA Settlement Administrator, P.O. Box 3314, Baton Rouge, LA 70821
Extra details
- The settlement fund is non-reversionary — CVA does not get any leftover money back
- Any remaining funds after all valid claims are paid will go to the Alabama Civil Justice Foundation as a cy pres distribution
- Attorneys' fees are capped at one-third of the settlement fund (\~$1.6 million); litigation expenses capped at $25,000
- Named plaintiffs may receive service awards up to $3,500 each ($21,000 total)
- Do not contact the Court or Defendant's counsel (Alston & Bird LLP) with claim questions — contact the Settlement Administrator only
- Case: Samuel Lee, et al. v. Baptist Health Centers, LLC, d/b/a Cardiovascular Associates, Case No. 01-CV-2023-904352.00
FAQ
Who is eligible for this settlement?
Anyone residing in the U.S. whose Personal Information was accessed during the CVA Data Security Incident (November 28 – December 5, 2022) is potentially eligible. This includes current and former CVA patients and employees who received a notice from CVA in early 2023.
Do I need documentation to file a claim?
Not necessarily. The Pro Rata Cash Payment and Credit & Medical Data Monitoring Services require no documentation — just a valid claim form. If you want reimbursement for Documented Monetary Losses (up to $5,000), you'll need third-party records like receipts, bank statements, or professional invoices.
What if I don't have a Settlement Claim ID?
You can still file. The claims portal at cvasettlement.eagclaims.com has an option for claimants without a Claim ID. You can also call 1-833-402-7061 or email info@CVASettlement.com for help.
How much will I actually receive?
The Pro Rata Cash Payment is estimated at $50 or more per valid claimant, but the exact amount depends on how many people file. If fewer people file, payments go up. If you have documented losses, you can claim up to $5,000 total (combined monetary cap).
What happens if I do nothing?
You'll receive no payment and lose your right to sue CVA over the claims resolved in this settlement. Filing a claim is the only way to get any benefit.
Can I still sue CVA if I file a claim?
No. Participating in the settlement releases your claims against CVA related to this data breach. If you want to preserve your right to sue independently, you must opt out — but opting out means you receive no settlement benefits.
What data was exposed in the breach?
The exposed personally identifiable information (PII) and protected health information (PHI) may include names, dates of birth, addresses, Social Security Numbers, passport and driver's license numbers, credit and debit card numbers, and financial account information.
Use the official website
Always confirm details on the official site. If something feels off, stop and verify before sharing personal info.
Info only. Verify details on the official site. Not legal, financial, or tax advice. Legal
Share this: