Covenant Health Data Security Settlement

The settlement covers a defined group of people who received notice about the Covenant Health data incident. Receiving a notice alone does not guarantee a payment; cash benefits require a valid claim.

• You must reside in the United States.
• Your Private Information must have been compromised in the Data Incident.
• You must have been sent notice of the Data Incident.
• The notice excludes defendants’ directors and officers, the assigned judges and their immediate family members and court staff, and people who properly opt out.

The cash amounts are not guaranteed. They may be adjusted up or down based on valid claims and the money available in the settlement fund.

• Cash Payment A: up to $5,000 for documented, unreimbursed losses and expenses related to the incident.
• Cash Payment B: a proportional cash payment estimated at $75.
• Two years of CyEx Medical Shield Complete credit monitoring.
• The defendants also describe security improvements to their systems.

Cash Payment A can reimburse up to $5,000 in documented losses or expenses related to the Data Incident. Records you created yourself, such as a handwritten receipt, are not enough on their own. If this claim is not supported or is rejected and not corrected, the notice says it will be treated as a Cash Payment B claim.

• Select Cash Payment A on the Claim Form.
• Attest under penalty of perjury that you incurred documented losses.
• Submit reasonable third-party records, such as receipts, invoices, credit-card statements, or phone bills.
• Do not seek reimbursement for the same loss if another source has already reimbursed it.

Cash Payment B is the notice’s pro rata cash option. “Pro rata” means the amount can be adjusted based on valid claims and available settlement money.

• Select Cash Payment B on the Claim Form.
• You do not need to submit documentation of a loss for this payment.
• The estimated amount is $75, but it may change proportionally.

A valid and timely Claim Form is required to seek either cash payment. The notice provides online and mail submission options.

• Submit online by 11:59 p.m. ET on December 30, 2026.
• Or mail the form so it is postmarked by December 30, 2026.
• For a cash payment, select the relevant cash-payment option on the Claim Form.

The notice describes the monitoring features and says the service becomes active after final approval. Its instructions about whether a Claim Form is needed are inconsistent, so the notice does not give one clear answer on that point.

• Credit monitoring through CyEx Medical Shield Complete is for two years.
• The notice lists credit monitoring, dark-web monitoring, authentication alerts, high-risk transaction monitoring, lost-wallet protection, and up to $1 million in identity-theft insurance coverage.
• A mailed Postcard Notice included a unique activation code. People without that notice or code are told to contact the Settlement Administrator.

The $2 million fund is not reserved only for cash payments. This funding order helps explain why the estimated cash payment may change.

• Administration costs and any court-awarded attorneys’ fees, costs, expenses, and service awards are paid from the $2 million fund.
• The remaining money is allocated first to credit monitoring, then documented-loss claims, and then pro rata cash claims.
• Any money left after pro rata cash payments goes to a nonprofit agreed to by the parties and approved by the court.

No final approval hearing date has been set in this notice. A claim deadline does not mean payment will be sent by that date.

• The court must grant final approval.
• Any appeals must be resolved.
• Benefits will be distributed as soon as possible after those steps, if the settlement is approved.

Opting out means leaving the settlement. Objecting means asking the court not to approve some or all of it while remaining in the settlement. The notice gives detailed requirements for an objection, including filing or mailing it to the court and sending copies to the listed counsel and administrator.

• To opt out, mail a signed written request by December 15, 2026.
• Include a statement that you want to be excluded, your full name, address, telephone number, and email address if you have one.
• Opting out means you will receive no settlement benefits but keep your right to bring your own lawsuit about the claims resolved here.
• If you remain in the settlement, you may object by December 15, 2026. An objection does not prevent you from submitting a claim.