Data Breach · Payments Issued

Gryphon Healthcare $2.8M Data Breach Settlement Payments Are Arriving by Venmo and Other Methods

Published October 20, 2026

People who filed approved claims in the $2.8 million Gryphon Healthcare data breach settlement began receiving payments in October 2026, after a Harris County, Texas judge granted final approval on August 18, 2026. One Venmo payment reviewed by OpenClassActions.com was $154.84, above the $100 estimate in the settlement notice; the claim deadline passed on April 16, 2026.

Hands counting cash, illustrating Gryphon Healthcare data breach settlement payments

Gryphon Healthcare Settlement Payments Are Being Sent

Payments in Morris, et al., v. Gryphon Healthcare, LLC, the $2.8 million class action settlement over Gryphon Healthcare's July 2024 data breach, are reaching people who filed approved claims. A Venmo payment notice reviewed by OpenClassActions.com in October 2026, labeled "Morris, et al., v. Gryphon Healthcare Settlement," showed a deposit of $154.84. That is about 55% more than the $100 the settlement notice estimated for the cash payment option.

The settlement is in Case No. 2024-77384 in the 61st Judicial District Court of Harris County, Texas. Judge Lee Kathryn Shuchart signed the Final Order and Judgment approving it on August 18, 2026, after granting preliminary approval on December 17, 2025. Gryphon Healthcare, a medical billing company, denied any wrongdoing and agreed to settle to avoid the cost and risk of continued litigation; the court did not decide who was right.

Status Payments Issued final approval signed August 18, 2026 · payments arriving October 2026
Payment Seen $154.84 by Venmo cash option was estimated at $100 · adjusted pro rata by number of claims
Can I Claim? No — the deadline was April 16, 2026 only people who filed a valid claim are being paid

Why the Payment Is More Than $100

The settlement offered two cash options. Class members could claim reimbursement of documented out-of-pocket losses caused by the breach, up to $5,000, or instead take a flat cash payment that required no proof. The notice estimated the cash payment at $100, and the settlement agreement says that amount would be increased or decreased pro rata so the approved claims, plus costs, fees and service awards, use up the fund. A payment above $100 means the fund stretched further than the estimate assumed.

The court approved $933,333.33 in attorneys' fees (one-third of the fund), $17,796.74 in expenses and $2,500 service awards for each of the nine class representatives, all paid from the $2.8 million fund along with the costs of running the settlement. Payments to individual claimants vary with the option each person chose, so $154.84 is one claimant's amount, not a figure the administrator has announced for everyone.

How Payments Are Being Sent

The claim form let each claimant pick PayPal, Venmo, Zelle or a physical check, so payments arrive by whichever method was selected. A Venmo payment shows up as a deposit labeled with the case name. Claimants who also checked the box for credit and medical monitoring could enroll in two years of CyEx Medical Shield Complete, which the notice describes as including $1 million of medical identity theft insurance and monitoring for exposure of health insurance IDs and medical record numbers.

If some payments go uncashed, the settlement agreement provides for the leftover money to be redistributed to claimants who cashed their first payment, when a second round is economically feasible. Otherwise any remainder goes to St. Jude Children's Research Hospital.

What Happened in the Gryphon Healthcare Data Breach

According to the settlement, a cyberattack in or around early July 2024 involving a business associate for which Gryphon provides medical billing services exposed files containing patients' private information. The settlement agreement puts the number of patients whose information was potentially exposed at about 393,358. The files may have included names, dates of birth, addresses, Social Security numbers, dates of service, diagnosis and treatment information, health insurance information, prescription and provider information, and medical record numbers. Gryphon reported the incident to the Maine Attorney General on or about October 11, 2024 and began mailing notice letters around the same time.

Patients then filed several related lawsuits that were consolidated in Harris County. The settlement class covers residents of the United States whose personal information was potentially exposed in the incident, including everyone who was sent a breach notification letter. The court's final judgment records one valid request to be excluded. Class counsel were Gary M. Klinger of Milberg PLLC, A. Brooke Murphy of Murphy Law Firm and Tyler J. Bean of Siri & Glimstad, LLP.

Questions

Is the Gryphon Healthcare settlement payment legitimate?

Yes. Morris, et al., v. Gryphon Healthcare, LLC, Case No. 2024-77384 in the District Court for Harris County, Texas, is a real class action settlement administered by Simpluris. The court signed a Final Order and Judgment approving it on August 18, 2026, and payments to people who filed approved claims are now being sent. A payment labeled Morris, et al., v. Gryphon Healthcare Settlement in Venmo, PayPal or Zelle, or a mailed check, matches the payment methods offered on the settlement claim form.

How much is the Gryphon Healthcare settlement payment?

The cash payment option was estimated at $100, with the settlement agreement providing that it would rise or fall pro rata depending on the number of claims. A Venmo payment notice reviewed by OpenClassActions.com in October 2026 showed $154.84. People who claimed documented out-of-pocket losses instead could be reimbursed up to $5,000, so amounts differ by the option each person chose.

Can I still file a Gryphon Healthcare claim?

No. The claim deadline was April 16, 2026, and the deadline to opt out or object was March 17, 2026. Only people who filed a valid claim by the deadline receive a payment.

What if I filed a claim but have not been paid?

Payments are being issued by the method each claimant chose on the claim form: PayPal, Venmo, Zelle or a physical check. Someone who filed a claim and has not received a payment can contact the settlement administrator through the contact page on the official settlement website. Under the settlement agreement, money from uncashed payments may be redistributed to claimants who cashed their first payment, if a second distribution is economically feasible.

Sources

• Final Order and Judgment, Morris, et al., v. Gryphon Healthcare, LLC, Cause No. 2024-77384 (61st Dist. Ct., Harris County, Tex.), signed August 18, 2026 — posted on the official settlement website
• Settlement Agreement and Long Form Notice — official settlement website: GryphonHealthcareDataSettlement.com
• A Venmo payment notice for $154.84 labeled "Morris, et al., v. Gryphon Healthcare Settlement," reviewed by OpenClassActions.com in October 2026

For more class actions keep scrolling below.
Status Payments Issued final approval signed August 18, 2026
Settlement Fund $2,800,000
Case Title Morris, et al., v. Gryphon Healthcare, LLC
Case Number 2024-77384
Court 61st Judicial District Court, Harris County, Texas
Claim Deadline April 16, 2026 (passed)
Administrator Simpluris

More Data Breach Settlement Payment News