People notified about Susan B. Allen Memorial Hospital's July 2025 data incident may claim two years of medical identity-protection services and up to $100 in combined expense and lost-time benefits. A claim is required even for the monitoring service.
The proposed settlement addresses allegations that a cyberattack exposed files containing private information. The court has not decided whether the hospital is liable. Online and mailed claims are due November 12, 2026.
The class is tied to the hospital's notice list
The class includes people who were sent written notification of the Susan B. Allen Memorial Hospital data incident. According to the settlement notice, the accessed files may have contained names, dates of birth, health-insurance and billing information, and medical-treatment information.
The assigned judge and the judge's family or staff are excluded, as is anyone who perpetrated the incident. People who are unsure whether they were included can contact the settlement administrator.
Because the class definition is based on receiving the hospital's written notice, a generic concern about the incident does not by itself establish eligibility.
Two years of medical identity protection are available
Class members may claim two years of CyEx Medical Shield Complete. The service includes $1 million of medical identity-theft insurance and monitoring for health-insurance ID exposure, medical-record-number exposure and unauthorized Health Savings Account spending.
The service also provides access to a fraud-resolution agent if suspicious activity is detected. Monitoring is separate from the cash benefits, so an approved claimant can enroll in the service and also request qualifying cash reimbursement.
Cash benefits share one $100 ceiling
The settlement offers reimbursement for documented out-of-pocket losses caused by the incident. Eligible costs can include fraud or identity-theft losses, credit-report or monitoring fees, credit-freeze costs, replacement identification and postage used to contact financial institutions.
The settlement also values time spent responding to the incident at $25 per hour, for up to four hours. Examples in the notice include changing passwords, investigating suspicious account activity and researching the incident. Claimants must briefly describe the tasks for which they seek time compensation.
These are not two separate $100 awards. The notice places a single $100 aggregate cap on the combined expense and time benefits. A claimant seeking the full four hours of time, for example, would reach that cash cap before adding an expense claim.
Receipts are needed for expenses, but time is attested
Expense reimbursement requires proof such as receipts or bank statements showing the amount and connection to the incident. A claimant can submit a self-prepared note to explain supporting evidence, but the notice says personal notes alone are insufficient for an expense claim.
The time benefit uses a different standard: the claimant must describe time spent on incident-related tasks. Expenses must have occurred from July 14, 2025, through November 12, 2026, and cannot already have been reimbursed by a third party.
That makes it important to separate documented expenses from attested time on the claim form while keeping the shared $100 maximum in mind.
Claims are due November 12
Claims may be submitted on the official settlement website or mailed to the administrator. Online submissions are due November 12, 2026; mailed forms must be completed, signed and postmarked by that date, with documentation included where required.
Doing nothing yields no settlement benefit. Requests to opt out and objections are due October 13, 2026. Staying in the class means giving up the right to pursue the released claims separately if the settlement becomes final.
The District Court of Butler County, Kansas, has scheduled a final approval hearing for December 7, 2026, at 9 a.m. Central. Payments and services will not begin until final approval and the resolution of any appeals.
The agreement is not a finding of wrongdoing
The lawsuit alleges that private information was accessed during the July 2025 attack. The settlement notice says both sides agreed to resolve the case to avoid the cost and uncertainty of trial, and the court has not ruled in favor of either side.
Class counsel intends to ask the court for $150,000 in attorneys' fees and costs. The court will consider that request and the overall fairness of the proposed settlement at the final approval hearing.