Concord Orthopaedics Data Breach Settlement: Up to $3,000 or $50 Cash Plus Medical Monitoring
PublishedJune 23, 2026
If you received a breach notice from Concord Orthopaedics, you can claim up to $3,000 in documented losses, up to $100 for lost time or a flat $50, plus a year of medical data monitoring before the July 8, 2026 deadline.
Concord Orthopaedics Professional Association, a New Hampshire orthopedic and sports-medicine practice, has agreed to a class action settlement to resolve litigation over a November 2024 data breach. The case is Montambeault, et al. v. Concord Orthopaedics Professional Association, pending in the Superior Court of Hillsborough County, New Hampshire (Northern District).
According to the lawsuit, a targeted cyberattack on Concord Orthopaedics' computer systems in November 2024 allowed an unauthorized party to access files that may have contained patients' personal and protected health information. The complaint alleges Concord Orthopaedics failed to adequately protect that information. Concord Orthopaedics denies the allegations and any wrongdoing, and no court has found that the practice did anything wrong. The two sides agreed to settle to avoid the cost and risk of continued litigation.
StatusClaims Open
Claim DeadlineJuly 8, 2026
Estimated PayoutUp to $3,000Documented losses · plus up to $100 lost time or $50 cash · plus 1 yr medical monitoring
Proof RequiredYesUnique ID & PIN from the Concord Orthopaedics notice are required to file online
What Happened?
Concord Orthopaedics experienced a targeted cyberattack on its computer systems in November 2024. A forensic investigation determined that an unauthorized actor accessed files that could have contained personal and protected health information. Concord Orthopaedics later began notifying affected individuals.
About 72,815 people were affected. The information involved varied by person and may have included names, dates of birth, Social Security numbers, driver's license or state identification numbers, appointment information, and health insurance information. If you received a notice letter from Concord Orthopaedics about this incident, your information was among the data the practice identified as potentially affected.
Who Qualifies?
The settlement class includes all individuals within the United States who were notified that their personal information may have been accessed in the November 2024 Concord Orthopaedics data security incident. In practical terms, if Concord Orthopaedics mailed or emailed you a breach notice about this incident, you are a class member and may file a claim.
You will need the unique ID and PIN printed on your notice to log in to the claim portal, so keep that notice handy. If you believe you were affected but cannot locate your ID or PIN, you can request help through the official settlement website's contact page.
How Much Can You Get?
The settlement offers class members documented-loss reimbursement, a choice of a lost-time payment or a flat cash payment, and one year of medical data monitoring that everyone can claim.
Documented loss reimbursement. You can claim up to $3,000 for documented, unreimbursed out-of-pocket losses for fraud and identity theft fairly traceable to the breach, for losses incurred between November 21, 2024 and July 8, 2026. This can include losses such as bank or other fees, professional charges, and the cost of credit monitoring or a credit freeze you purchased. You must provide supporting documents showing the loss and the date it occurred.
Lost time, or a $50 cash payment. You can claim up to four hours of time spent dealing with the breach — such as changing passwords, investigating suspicious activity, or researching the incident — valued at $25 per hour, for a maximum of $100. Instead of the lost-time payment, you can choose a one-time $50 cash payment that requires no proof or explanation. You may select one of these two options, not both.
One year of medical data monitoring. In addition to the cash options, every class member can enroll in one year of CyEx Medical Shield Complete, which includes $1 million in medical identity theft insurance. No documentation is required to select this benefit.
Is Proof Required?
Yes. Filing online requires you to log in to the claim portal using the unique ID and PIN printed on the notice Concord Orthopaedics sent you, so the page is marked proof required. A claimant who never received a notice, or who discarded it, cannot file online without first requesting that information through the official settlement website.
Beyond the ID and PIN, the documentation needed depends on which benefit you choose. The $50 cash payment and the year of medical monitoring require no supporting documents. The up to $3,000 documented-loss reimbursement does require documentation — receipts, bank or credit card statements, or similar records showing the loss and that it was tied to the breach.
Important Dates
• Data breach: November 2024
• Preliminary approval: February 24, 2026
• Opt-Out (Exclusion) Deadline: May 26, 2026 (passed)
• Objection Deadline: May 26, 2026 (passed)
• Final Approval Hearing: June 23, 2026, at 10:00 a.m. ET (Superior Court of Hillsborough County, Manchester, NH)
• Claim Deadline: July 8, 2026 (online or mailed)
The opt-out and objection deadlines have already passed. If you are a class member, the remaining option that provides a benefit is to file a claim by July 8, 2026. The hearing date can change, so check the official settlement website for updates.
Attorneys' Fees and Service Awards
Class Counsel will ask the Court to approve $200,000 in attorneys' fees and litigation costs, and a service award of $1,500 for each of the class representatives. Concord Orthopaedics, not the class members, will pay these amounts, and they do not reduce the benefits available to claimants. The figures are subject to Court approval, and the Court may award less than requested.
How to File a Claim
File your claim online or by mail through the official settlement website, ConcordDataSettlement.com. You will need the unique ID and PIN from your notice to log in to the online claim form. Submit any documented losses up to $3,000, choose the lost-time payment (up to $100) or the flat $50 cash payment, add the year of medical monitoring if you want it, and upload supporting documents if you are claiming documented losses. The deadline is July 8, 2026.
Who qualifies for the Concord Orthopaedics data breach settlement?
The settlement covers individuals in the United States who were sent a notice that their personal or protected health information may have been accessed in the November 2024 Concord Orthopaedics data security incident. If you received a breach notice from Concord Orthopaedics, you are a settlement class member.
How much can I get from the Concord Orthopaedics settlement?
You can claim reimbursement of up to $3,000 for documented, unreimbursed losses fairly traceable to the breach. Separately, you can claim up to four hours of lost time at $25 per hour (a maximum of $100), or instead choose a one-time $50 cash payment that requires no proof. Every class member can also enroll in one year of CyEx Medical Shield Complete medical data monitoring with $1 million in medical identity theft insurance.
Is proof required to file a claim?
Yes. To file online, you must log in using the unique ID and PIN printed on your Concord Orthopaedics notice. No documentation is required for the $50 cash payment or the year of medical monitoring, but the up to $3,000 documented-loss option requires documents such as receipts, bank statements, or credit card records showing the loss and its date.
What is the deadline to file a Concord Orthopaedics settlement claim?
The claim deadline is July 8, 2026. Claims can be filed online or by mail through the official settlement website, ConcordDataSettlement.com.
What happens if I do nothing?
If you do nothing, you will not receive a payment or medical monitoring, and you will give up your right to sue Concord Orthopaedics over this data breach. The only way to receive a benefit is to file a claim by July 8, 2026.
Sources
• Official Settlement Website: ConcordDataSettlement.com
• Montambeault, et al. v. Concord Orthopaedics Professional Association, Case No. 217-2025-CV-00292, Superior Court of Hillsborough County, New Hampshire (Northern District)
OpenClassActions.com is a consumer news site and is not a settlement administrator or a law firm.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
Claims-made — up to $3,000 documented + up to $100 lost time or $50 cash + 1 yr medical monitoring
Case Title
Montambeault, et al. v. Concord Orthopaedics Professional Association
Case Number
217-2025-CV-00292
Court
Superior Court of Hillsborough County, New Hampshire (Northern District)
Final Approval Hearing
June 23, 2026, 10:00 a.m. ET Superior Court of Hillsborough County, Manchester, NH
Illinois Bone and Joint Institute: $4M fund — up to $5,000 documented or ~$50 cash plus 2 years of Kroll medical monitoring for an orthopedic-practice breach. See who qualifies →
Cardiovascular Consultants: $3.85M fund — ~$75 cash or up to $5,000 documented plus 2 years of medical monitoring. See who qualifies →
South Texas Oncology & Hematology: $1.075M fund — ~$100 pro rata cash or up to $5,000 documented plus 2 years of CyEx Medical Shield. See who qualifies →
Alabama Ophthalmology Associates: $850K fund — up to $5,000 documented or ~$60 cash plus 2 years of CyEx Medical Shield monitoring. See who qualifies →
Endue Software Data Breach: $65 cash or up to $2,500 documented plus 2 years of CyEx medical & credit monitoring for an infusion-center software breach. See who qualifies →