AACOM $700,000 Data Breach Class Action Settlement - Last Chance to File a Claim

AACOM $700,000 Data Breach Class Action Settlement - Last Chance to File a Claim

By Steve Levine

AACOM $700,000 Data Breach Class Action Settlement 2026 - File Claim by March 4 2026 for Up to $3,500 or $50 Cash Plus Free Credit Monitoring

Published: March 3, 2026

Claim Form Deadline: March 4, 2026

Payout: Up to $3,500 (documented losses) or ~$50 (cash payment)

Proof required: No (for cash payment); Yes (for out-of-pocket losses)


What is the AACOM Data Breach Settlement?

If your personal information was compromised in the AACOM data breach discovered in September 2024, you may be eligible for a cash payment of up to $3,500 for documented losses, an estimated $50 alternative cash payment with no documentation required, and 24 months of free 3-bureau credit monitoring from a $700,000 class action settlement. The deadline to file a claim is March 4, 2026.

The lawsuit alleged that an unauthorized individual gained access to an AACOM employee's email account in September 2024, compromising the names, Social Security numbers, and medical information of approximately 67,804 individuals. AACOM denies any wrongdoing. The Court has not decided who is right or wrong. The parties agreed to settle to avoid the cost and risk of a trial.

What is AACOM?

AACOM stands for the American Association of Colleges of Osteopathic Medicine. It is a professional association that represents the nation's osteopathic medical schools. AACOM provides services to member institutions, including data collection, analysis, and the operation of the centralized online application service used by students applying to osteopathic medical schools in the United States.

Because AACOM handles applications from medical school students, it collects and stores sensitive personal information including names, Social Security numbers, and health-related data. When the breach occurred in September 2024, this type of information was exposed, which is particularly concerning because Social Security numbers and medical records can be used for identity theft and medical fraud.

Osteopathic medicine is one of two types of medical education in the United States (the other being allopathic medicine, or M.D. programs). Students applying to osteopathic medical schools (D.O. programs) use AACOM's centralized application system, which is how the organization came to possess the personal information at issue in this data breach.

What Happened in the AACOM Data Breach?

On or about September 26, 2024, an unauthorized individual gained access to the email account of an AACOM employee. Through that compromised email account, the intruder was able to access the names, Social Security numbers, and medical information of approximately 67,804 individuals.

AACOM subsequently sent data breach notification letters to affected individuals. If you received one of these notification letters, you are very likely a class member and eligible for settlement benefits.

Who Qualifies for the AACOM Settlement?

You qualify if you are an individual residing in the United States whose personally identifiable information (PII) or personal health information (PHI) was identified as at issue in the data breach discovered by AACOM in September 2024. This includes all individuals who received a notice of the data incident from AACOM.

How Much Money Will I Get?

You have two payment options. You can choose one but not both:

Option 1 - Out-of-Pocket Losses (up to $3,500): If you incurred expenses as a direct result of the data breach, such as costs for fraud protection, identity theft services, professional fees, or credit repair services, you can claim up to $3,500 with supporting documentation. Expenses must have been incurred between the date you received the breach notice and the end of the claims period.

Option 2 - Alternative Cash Payment (estimated $50): If you do not have documented out-of-pocket losses, you can file a claim for a cash payment with no documentation required. The estimated amount is $50 per person, but the final amount will be calculated on a pro rata basis depending on how many people file claims.

In addition to either option, you can also receive 24 months of free 3-bureau credit and identity theft monitoring that includes real-time monitoring at all three major credit bureaus, $1,000,000 in identity theft insurance with no deductible, and access to fraud resolution agents.

How Do I File a Claim?

Submit a claim form online at AACOMDataSettlement.com or by mail to the settlement administrator. If you want to receive an electronic or ACH payment, you must file your claim online. All claims must be submitted or postmarked by March 4, 2026.

If you are claiming out-of-pocket losses, you will need to provide supporting documentation such as receipts or statements showing the expenses you incurred. If you are choosing the alternative cash payment, no documentation is required.

What are the Important Dates?


Claim Form Deadline: March 4, 2026
Opt-Out Deadline: February 2, 2026 (passed)
Objection Deadline: February 2, 2026 (passed)
Final Approval Hearing: March 25, 2026 at 10:00 AM ET, United States District Court, 6500 Cherrywood Lane, Greenbelt, MD 20770

When Will Payments Be Sent?

Payments will be sent after the Court approves the settlement at the final approval hearing on March 25, 2026 and after all appeals are resolved. It takes time for claim forms to be processed, so the settlement administrator asks for patience.

What Happens If I Do Nothing?

If you do nothing, you will not receive any settlement benefits. You will remain a class member and give up the right to sue AACOM over the same data breach claims.

Can I Opt Out of the AACOM Settlement?

The deadline to opt out was February 2, 2026 and has passed. If you previously submitted an opt-out request, you will not receive any payment but you keep your right to sue AACOM separately. If you did not opt out, you are bound by the settlement terms.

What is a Data Breach and Why Does It Matter?

A data breach occurs when an unauthorized person gains access to sensitive personal information stored by a company or organization. In this case, someone accessed an AACOM employee's email account and was able to view personal data belonging to tens of thousands of individuals.

Data breaches involving Social Security numbers and medical information are particularly serious because this type of data can be used for identity theft, tax fraud, and medical fraud. Unlike a credit card number, which can be canceled and replaced, a Social Security number cannot easily be changed. Once exposed, it creates a long-term risk for the affected individuals.

That is why this settlement offers credit monitoring in addition to cash payments. The 24-month credit monitoring benefit is designed to help you detect any unauthorized use of your personal information going forward.

Case Information


Caption: In re AACOM Data Breach Litigation, Case No. 8:25-cv-01239-TJS
Court: United States District Court for the District of Maryland
Judge: Honorable Deborah L. Boardman
Class Counsel: David K. Lietz, Milberg PLLC; Raina Borrelli, Strauss Borrelli PLLC; Leanna Loginov, Shamis & Gentile, P.A.; Leigh Montgomery, EKSM, LLP

How Do I Find Class Action Settlements?

Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:


Official Settlement Notice (PDF)

Your browser does not support viewing PDFs inline. Download the PDF.



Claim Form Website: AACOMDataSettlement.com


Submit Claim


Sources

Official Settlement Site

Filing Class Action Settlement Claims

Please note that your claim form will be rejected if you submit a settlement claim with any fraudulent information. By providing this information and your sworn statement of its veracity, you agree to do so under the penalty of perjury. If you are not sure whether you qualify, visit the class action administrator's website. OpenClassActions.com is a consumer advocacy and class action news site, and is not a class action administrator or a law firm.
For more class actions keep scrolling below.


AACOM Data Breach Settlement Summary
Status Open — File Claim
Claim Deadline March 4, 2026
Opt-Out / Objection Deadline February 2, 2026 (passed)
Final Approval Hearing March 25, 2026 at 10:00 AM ET (Greenbelt, MD)
Settlement Amount $700,000
Estimated Payment Up to $3,500 (losses) or ~$50 (cash) + 24 months credit monitoring
Proof Required No (for $50 cash); Yes (for out-of-pocket losses up to $3,500)
Who Qualifies U.S. residents whose PII/PHI was compromised in the Sept 2024 AACOM data breach (~67,804 individuals)
Website AACOM Data Settlement
Claims Administrator Kroll Settlement Administration LLC