Gryphon Healthcare Data Settlement – File by April 16, 2026
If your personal or medical information was exposed in the July 2024 Gryphon Healthcare cyberattack, you may be entitled to up to $5,000 in reimbursement or a $100 cash payment — plus two years of medical identity theft protection.
At a glance
What happened
Class period: Early July 2024 (date of the Data Incident)
- In early July 2024, a targeted cyberattack struck a business associate for which Gryphon Healthcare, LLC provides medical billing services
- Certain files were accessed that may have contained names, dates of birth, addresses, Social Security numbers, diagnosis information, health insurance information, medical treatment and prescription information, and medical record numbers — basically, the stuff you'd least want a stranger to read
- A class action lawsuit was filed in the District Court for Harris County, Texas: Morris, et al., v. Gryphon Healthcare, LLC, Case No. 2024-77384
- Gryphon denies wrongdoing; the parties agreed to settle to avoid the costs and uncertainty of trial
What you can get
Out-of-Pocket Losses
Up to $5,000
Documented proof required; covers identity theft losses, credit monitoring fees, ID replacement costs, and related postage
Cash Payment
Est. $100
No proof required; amount may increase or decrease based on total valid claims filed
Identity Theft Protection & Medical Data Monitoring
2 years
CyEx Medical Shield Complete with $1M medical identity theft insurance
Key dates
| Action | Date | What it means |
|---|---|---|
| Submit / Claim | April 16, 2026 | Last day to submit |
| Opt out | March 17, 2026 | Keep your right to sue separately |
| Object | March 17, 2026 | Tell the court you disagree |
| Final hearing | August 31, 2026 | Judge decides whether to approve |
Who may qualify
- Received a breach notification letter from Gryphon Healthcare
- Are a U.S. resident whose personal information was potentially exposed in the July 2024 Data Incident
- Are not Gryphon Healthcare, one of its officers or directors, or the presiding judge (sorry, your honor)
How to file
- Visit the official claim form at https://gryphonhealthcaredatasettlement.com/form/claim
- Log in using the Unique ID and PIN from your breach notification letter (lost it? Email the administrator to request a new one)
- Choose your benefit: Out-of-Pocket Losses reimbursement or the $100 Cash Payment
- Complete and submit your form online by April 16, 2026, or mail it with a postmark no later than April 16, 2026
Proof required
- Out-of-Pocket Losses: Bank statements, receipts, or invoices showing expenses tied to the Data Incident
- Cash Payment option: No proof required
- Note: Personal notes alone are not sufficient for the out-of-pocket loss claim — they must support other documentation
Payment timing
Payments will be distributed after the Court grants final approval at the August 31, 2026 hearing and after any appeals are resolved. Specific payment method not yet announced.
Important links
Contact
Extra details
- You cannot claim reimbursement for expenses already covered by a third party
- Personal notes or self-prepared papers alone are not sufficient proof for out-of-pocket loss claims — supporting documentation is required
- If you do nothing, you will not receive any benefits AND you will give up your right to sue Gryphon over these issues separately
- Watch for scams: only use the official settlement website at gryphonhealthcaredatasettlement.com
FAQ
Who is included in the Settlement?
Do I need proof to file a claim?
What if I can't find my Unique ID and PIN?
What happens if I do nothing?
When will I get paid?
Can I opt out of the Settlement?
Info only. Verify details on the official site. Not legal, financial, or tax advice. Legal
Share this: