WebTPA Data Breach Settlement: $13.75M

Anyone in the U.S., including a subclass of California residents, who received a data breach notification from WebTPA about the April 18–23, 2023 incident.

Required only for reimbursement claims, such as bank statements, credit card records, police reports, or other documents showing financial harm caused by the breach.

WebTPA has agreed to a $13.75 million class action settlement to resolve allegations that it failed to implement adequate cybersecurity protections to prevent a data breach in April 2023. The breach affected millions of individuals, whose names, Social Security numbers, and other sensitive information may have been exposed.

The lawsuit alleges that WebTPA, a third-party health plan administrator and subsidiary of The Hartford Financial Services Group Inc., was negligent in securing patient data, leaving individuals vulnerable to identity theft and fraud.

Although WebTPA denies any wrongdoing, it agreed to the multimillion-dollar settlement to end the litigation.

What Class Members Can Receive

Class members may choose one of the following benefits:

• Documented Loss Payment: Up to $5,000 for verifiable out-of-pocket losses directly tied to the breach. Requires submission of supporting documentation.

• Flat-Rate Payment: Around $100 (estimated) for class members who prefer not to or cannot document their losses.

• Additional $50: Available to members of the California subclass affected during the breach window.

Plus:

• Two Years of Free Medical Identity Monitoring through CyEx Medical Shield, which includes:

  • Real-time alerts

  • Ongoing medical ID tracking

  • Up to $1 million in identity theft insurance coverage