Mindpath Health Data Breach Settlement: $3.5M

Individuals who were notified by Mindpath Health that they may have been impacted by the data breaches occurring in March and July 2022. This includes patients who received a notice of the incidents in January 2023.

A California subclass includes those who were Mindpath patients residing in California at the time of one of the breaches.

Claimants may need to submit documentation of losses related to the breach, such as credit card or bank statements, bills, invoices, or receipts.

Mindpath Health has agreed to pay $3.5 million to settle a class action lawsuit alleging it failed to safeguard patient information during a 2022 cyberattack. According to the plaintiffs, the mental healthcare provider allowed unauthorized access to its Microsoft Office 365 email accounts in both March and July of that year.

The breach allegedly exposed sensitive personal and protected health information, including details shared by patients during treatment. Plaintiffs argued that Mindpath did not implement basic cybersecurity measures that could have prevented the breach.

Mindpath has denied liability but agreed to the settlement to resolve the legal claims without further litigation.

Eligible class members can receive monetary compensation for time spent managing the effects of the data breach, as well as reimbursement for documented losses. Additionally, class members may choose between three years of free credit monitoring or an alternative cash payment.

Members of the California subclass are entitled to an extra $50 statutory payment, although this amount may be adjusted depending on how many claims are filed.

To receive a payout or credit monitoring, claimants must file a valid claim form by January 5, 2026. The same date applies for exclusion or objection requests. Final approval of the settlement is scheduled to be reviewed at a hearing on February 19, 2026.