CPAP Medical Supplies Data Incident Settlement

You can claim both benefits. Medical Shield Complete includes monitoring for healthcare insurance ID exposure, medical record number exposure, and unauthorized health savings account spending. It also includes access to a fraud-resolution agent and $1 million in medical identity-theft insurance.

The cash benefit is for actual out-of-pocket losses caused by the Data Incident. It is separate from the monitoring benefit.

• Two years of CyEx Medical Shield Complete.
• Reimbursement of up to $5,000 for qualifying documented out-of-pocket losses.

The loss must be an actual out-of-pocket expense caused by the Data Incident and must have occurred from December 13, 2024 through November 26, 2026. You cannot claim an expense that another party has already reimbursed.

• Identity-theft or fraud losses.
• Fees for credit reports, credit monitoring, or freezing or unfreezing credit.
• Costs to replace identification.
• Postage used to contact banks by mail.

This documentation requirement applies to the documented-loss reimbursement benefit.

• Send records such as bank statements or receipts showing what you spent or lost.
• The materials should show that the expense was caused by the Data Incident.
• You may include your own notes to explain other records, but notes alone do not establish a valid claim.

The $500,000 limit is stated for the documented-loss benefit. The notice does not say it limits the medical monitoring benefit.

• No one can receive more than $5,000 for documented losses.
• CPAP's total payment obligation for this benefit is capped at $500,000.
• If valid documented-loss claims total more than $500,000, each approved payment will be reduced proportionally.

You can request a paper Claim Form by phone, email, or mail. The notice does not explain whether a person claiming only medical monitoring must submit any documentation with a mailed form.

• Submit a Claim Form online by November 26, 2026.
• Or download a form and mail it to the Settlement Administrator; mailed forms must be completed, signed, and postmarked by November 26, 2026.
• For a mailed claim, the notice says to include supporting documentation. Documented-loss claims specifically need the proof described above.

Opting out means formally leaving the Settlement. It is different from objecting: people who opt out cannot object because the Settlement no longer applies to them.

• If you do nothing, you receive no benefits or payment.
• If you remain in the Settlement without opting out, you give up claims against CPAP relating to the Data Incident that are covered by the Settlement.
• To leave the Settlement, submit a Request for Exclusion online or by mail by October 30, 2026. You will receive no Settlement benefits, but retain any rights you may have to sue CPAP yourself about these issues.

Benefits will be distributed only if the Court grants final approval and after any appeals are resolved. The notice does not give a payment date.

• The Court will hold the hearing on December 1, 2026, at 8:30 a.m. Eastern Time by Zoom.
• You do not have to attend.
• The hearing date or time may change, and the notice directs readers to check the settlement website for updates.