Integris Health Data Breach Settlement: $30M

Individuals whose personal information was accessed or potentially accessed during the Integris Health data breach on Nov. 28, 2023.

Claimants seeking reimbursement for documented losses must provide supporting records such as receipts, bank statements or other documentation showing breach-related expenses.

Oklahoma-based health care system Integris Health has agreed to pay $30 million to settle a lawsuit over a data breach that exposed patient information in late 2023.

The settlement ranks among the larger health care data breach resolutions in recent years and offers substantial compensation to those whose records were compromised.

Integris Health operates hospitals, clinics and specialty care facilities across Oklahoma, serving patients throughout the state. On Nov. 28, 2023, the organization discovered that unauthorized parties had gained access to its systems and potentially obtained sensitive patient data.

The lawsuit claimed Integris Health failed to take adequate steps to secure the personal and medical information it collected from patients. Plaintiffs argued that widely accepted cybersecurity practices could have blocked the attack or minimized its impact, but the health care system neglected to implement them.

Health care data breaches are particularly concerning because of the depth of information medical providers maintain. Beyond basic identifiers like names and addresses, patient records often contain Social Security numbers, insurance details, medical histories and other sensitive data that can be exploited for identity theft or insurance fraud.

Integris Health has not acknowledged any wrongdoing or admitted that its security measures were inadequate. The company agreed to the settlement to resolve the litigation and avoid the expense and uncertainty of a trial.

Compensation and Benefits Available

The settlement provides meaningful compensation options for those affected by the breach.

Class members who suffered financial harm can claim up to $25,000 for documented out-of-pocket expenses.

This covers costs you incurred as a direct result of the breach—things like fees for credit monitoring services you purchased on your own, expenses related to freezing or unfreezing your credit, costs to replace identification documents, professional fees for accountants or attorneys who helped you address fraud, and any unreimbursed losses from identity theft or fraudulent transactions.

You'll need receipts or other records to support your claim.

Those who didn't experience direct financial losses can still receive a cash payment. The settlement provides a pro rata share of the remaining fund after documented loss claims are paid, currently estimated at around $100 per person. The final amount will depend on how many claims are submitted.

All class members who file a valid claim also receive three years of credit monitoring covering all three major bureaus, along with up to $1 million in identity theft insurance.

The deadline to submit a claim is Dec. 22, 2025. A final approval hearing is scheduled for Dec. 16, 2025.