Medusind Data Breach Settlement: $5M

Individuals who were sent a data breach notification from Medusind stating their personal information may have been exposed during the security incident on Dec. 29, 2023.

Claimants seeking reimbursement for documented losses must provide supporting records such as telephone bills, receipts or correspondence. Personal statements alone are not sufficient but may be submitted alongside other documentation for context.

Medical billing company Medusind has agreed to pay $5 million to settle a lawsuit claiming it failed to protect sensitive patient and consumer data from hackers.

Anyone who received a breach notification letter from the company may be eligible for cash payments and free credit monitoring.

Medusind provides billing, coding and revenue cycle management services to medical and dental practices around the world. Because of the nature of its business, the company handles large volumes of protected health information, insurance records and payment data on behalf of its health care clients.

On Dec. 29, 2023, unauthorized parties accessed Medusind's systems and potentially obtained a broad range of sensitive information. Compromised data reportedly included names, home addresses, contact details, health insurance information, payment card data, medical records and government-issued identification numbers such as Social Security numbers.

Plaintiffs alleged Medusind failed to implement adequate cybersecurity protections despite the highly sensitive nature of the data it processes. Standard security measures, they argued, could have prevented the intrusion or limited the amount of information exposed.

Medusind has denied the allegations and has not admitted any wrongdoing. Rather than continue litigating, the company agreed to the settlement to resolve the dispute.

Compensation Options for Class Members

Those affected by the breach can choose between two compensation paths depending on whether they experienced direct financial harm.

Class members who incurred out-of-pocket expenses as a result of the breach can claim up to $5,000 in documented losses.

Covered expenses include unreimbursed fraud or identity theft losses, credit monitoring fees, costs for credit reports or freezes, phone charges and other breach-related costs.

You'll need records to back up your claim—receipts, phone bills, bank statements or similar documentation showing what you spent and why.

If you didn't suffer quantifiable financial harm, you can still receive an estimated $100 cash payment. This amount may be adjusted based on the total number of claims filed.

California residents get an additional benefit. Under state privacy laws, members of the California subclass can claim an extra $100 statutory payment on top of whatever other compensation they receive.

All class members who submit a valid claim are also entitled to two years of complimentary credit monitoring services.

Claims must be filed by Dec. 29, 2025. Those who wish to opt out or object to the settlement must do so by Dec. 14, 2025. A final approval hearing is scheduled for Jan. 12, 2026.