$4.5M Capital Health Data Breach Settlement — Claims Closed

View Open Settlements
Data Breach · Claims Closed

$4.5M Capital Health Data Breach Settlement — Claims Closed

Published March 28, 2026
Updated July 25, 2026

Capital Health Systems agreed to a $4.5 million settlement over a November 2023 data breach. The April 6, 2026 claim deadline has passed.

Capital Health Systems data breach class action settlement
Source: Official settlement materials
Status Closed to New Claims April 6, 2026 deadline passed
Claim Deadline April 6, 2026 Filing period is closed
Former Benefits $100 or Up to $5,000 Plus three years of credit monitoring
Proof Required Conditional Required for documented-loss claims
Between November 11 and November 26, 2023, Capital Health Systems experienced a cybersecurity incident in which an unauthorized third party may have gained access to files containing the private information of patients, former patients, guarantors, and employees. The exposed data includes some combination of names, addresses, dates of birth, Social Security numbers, email addresses, telephone numbers, and clinical information.

Capital Health agreed to pay $4.5 million to settle the class action lawsuit that followed. Capital Health denied any wrongdoing or liability, and the court has not made any determination that the company violated the law. Both sides agreed to settle to avoid the cost and risk of further litigation.

Who Was Included?

The settlement class included patients, former patients, guarantors, and employees whose private information was potentially compromised in the Capital Health data breach between November 11 and November 26, 2023.

People who received a notification from Capital Health about the breach were identified as class members. Historical case information remains available at CapitalHealthDataBreachSettlement.com.

What Benefits Were Available?

Class members could request one of two cash-payment options, but not both.

Option A -- Documented Losses (up to $5,000): Class members could request reimbursement of up to $5,000 per person for documented expenses or losses related to the breach. Examples included identity-theft or fraud losses, falsified tax returns, credit-monitoring or identity-protection costs, credit freezes, and certain miscellaneous expenses. This option required supporting documentation that was not self-prepared. Claims without adequate documentation could be processed under Option B.

Option B -- Alternative Cash Payment ($100): Class members could request a flat $100 payment without documenting breach-related losses. The amount could be adjusted depending on the number of valid claims and settlement costs.

Three Years of Free Credit Monitoring

In addition to either cash-payment option, class members could request three years of credit monitoring valued at $90 per year by selecting that benefit on the claim form.

How Were Claims Filed?

Claim forms had to be submitted online or postmarked by April 6, 2026. The filing period is closed.

Documented-loss claims under Option A also had to include the required supporting records.

What Personal Information Was Exposed?

The breach exposed some combination of names, addresses, dates of birth, Social Security numbers, email addresses, telephone numbers, clinical information, and potentially other data stored in Capital Health's IT systems. Not every affected person had the same types of data exposed. The specific data involved in your case should be described in the breach notification you received.

The exposure of Social Security numbers and clinical information is particularly serious because it creates risks of both financial identity theft and medical identity fraud that can persist for years.

What Are the Important Dates?


Claim Deadline: April 6, 2026 (passed)
Objection Deadline: April 3, 2026 (passed)
Final Approval Hearing: Was scheduled for July 14, 2026 at 11:00 AM, U.S. District Court, District of New Jersey, 402 E. State Street, Trenton, NJ 08608, before Hon. Justin T. Quinn

Case Information


Case: Bruce Graycar, et al. v. Capital Health Systems, Inc., Civil Action No. 3:23-CV-1418-MAS-JTQ
Court: U.S. District Court, District of New Jersey
Judges: Hon. Michael A. Shipp and Hon. Justin T. Quinn
Defendant: Capital Health Systems, Inc.
Settlement Fund: $4,500,000
Data Breach Period: November 11 through November 26, 2023
Data Exposed: Names, addresses, DOB, SSN, email, phone, clinical info
Affected Persons: Patients, former patients, guarantors, and employees
Option A (Documented): Up to $5,000 per person with proof
Option B (No Proof): Flat $100 cash payment
Credit Monitoring: 3 years free (valued at $90/year)
Claim Deadline: April 6, 2026 (passed)
Objection Deadline: April 3, 2026 (passed)
Final Approval Hearing: Was scheduled for July 14, 2026 at 11:00 AM
Attorney Fees: Up to one-third of the settlement fund
Service Awards: Up to $4,000 per class representative
Class Counsel: Kopelowitz Ostrow P.A., Carella Byrne Cecchi Olstein Brody & Agnello P.C., Hausfeld LLP
Settlement Website: CapitalHealthDataBreachSettlement.com


Official Settlement Notice (PDF)

Your browser does not support viewing PDFs inline. Download the PDF.



Official Settlement Website: CapitalHealthDataBreachSettlement.com


Sources

Official Settlement Website -- CapitalHealthDataBreachSettlement.com
• Court-authorized settlement notice, Bruce Graycar, et al. v. Capital Health Systems, Inc., Civil Action No. 3:23-CV-1418-MAS-JTQ (D.N.J.)

For more class actions keep scrolling below.
Status Closed to New Claims
Claim Deadline April 6, 2026 Passed
Settlement Amount $4.5 Million
Former Benefits $100 or up to $5,000 Plus three years of credit monitoring
Proof Required Conditional Required for documented-loss claims
Case Graycar et al. v. Capital Health Systems, Inc. No. 3:23-CV-1418-MAS-JTQ

More Data Breach Settlement Resources