Dakota Eye Institute Data Breach Settlement: $1M

Individuals whose private information was compromised in the Dakota Eye Institute data breach that was discovered and disclosed on Oct. 31, 2023.

Claimants seeking reimbursement for out-of-pocket losses must provide supporting documentation such as bank statements, credit card statements, receipts, invoices or bills.

Patients of a North Dakota eye care provider may be entitled to compensation after a data breach exposed their personal information. Dakota Eye Institute has agreed to pay $1 million to settle claims that it failed to adequately protect patient data from hackers.

Dakota Eye Institute provides comprehensive eye care services including routine exams, cataract surgery, LASIK procedures and glaucoma treatment. The practice disclosed in October 2023 that unauthorized parties had accessed its systems and potentially obtained sensitive patient records.

Among the compromised data were Social Security numbers—one of the most valuable pieces of information for identity thieves. When criminals obtain Social Security numbers alongside other personal details typically found in medical records, they can open fraudulent accounts, file fake tax returns or commit medical identity theft.

Patients who filed suit argued the breach was preventable. Their complaint alleged Dakota Eye Institute neglected to implement standard cybersecurity protections that could have kept intruders out or at least limited what they could access.

By failing to safeguard the sensitive data entrusted to it, plaintiffs claimed the eye care provider violated its legal obligations to patients.

Dakota Eye Institute has not acknowledged any security failures or admitted wrongdoing. The practice agreed to the settlement to resolve the matter without further litigation.

Multiple Compensation Options Available

Affected patients have several choices for how to receive settlement benefits, depending on their circumstances and preferences.

Those who spent money dealing with the breach aftermath can claim up to $1,000 for ordinary out-of-pocket expenses. Covered costs include bank fees, charges for credit reports or monitoring services you purchased on your own, and other unreimbursed losses directly tied to the breach. You'll need receipts, statements or other records documenting what you spent.

Patients who suffered more severe harm qualify for higher compensation. If you experienced identity theft, fraudulent charges or other significant financial damage as a result of the breach, you can claim up to $5,000 for these extraordinary losses. Documentation connecting the harm to the breach will strengthen your claim.

Class members who prefer not to track down paperwork, or who simply didn't incur specific expenses, can opt for a flat $45 cash payment instead of reimbursement. This amount may be adjusted based on how many people file claims.

There's also a credit monitoring option. All class members can receive two years of single-bureau monitoring along with at least $1 million in fraud insurance coverage. If you choose the cash payment, you won't receive the credit monitoring benefit.

Claims must be filed by Jan. 12, 2026. The deadline to opt out or object is Dec. 13, 2025. A final approval hearing is scheduled for Jan. 12, 2026.