Published
June 23, 2026
Updated
July 9, 2026
This settlement offered breach-notice recipients up to $3,000 in documented losses, up to $100 for lost time or a flat $50, plus a year of medical data monitoring. The claim deadline passed on July 8, 2026, and claims are no longer being accepted.
What Is This Settlement About?
Concord Orthopaedics Professional Association, a New Hampshire orthopedic and sports-medicine practice, has agreed to a class action settlement to resolve litigation over a November 2024 data breach. The case is Montambeault, et al. v. Concord Orthopaedics Professional Association, pending in the Superior Court of Hillsborough County, New Hampshire (Northern District).According to the lawsuit, a targeted cyberattack on Concord Orthopaedics' computer systems in November 2024 allowed an unauthorized party to access files that may have contained patients' personal and protected health information. The complaint alleges Concord Orthopaedics failed to adequately protect that information. Concord Orthopaedics denies the allegations and any wrongdoing, and no court has found that the practice did anything wrong. The two sides agreed to settle to avoid the cost and risk of continued litigation.
Status
Claims Closed
Claim Deadline
July 8, 2026 (Passed)
Estimated Payout
Up to $3,000
Documented losses · plus up to $100 lost time or $50 cash · plus 1 yr medical monitoring
Proof Required
Yes
Unique ID & PIN from the Concord Orthopaedics notice are required to file online
What Happened?
Concord Orthopaedics experienced a targeted cyberattack on its computer systems in November 2024. A forensic investigation determined that an unauthorized actor accessed files that could have contained personal and protected health information. Concord Orthopaedics later began notifying affected individuals.About 72,815 people were affected. The information involved varied by person and may have included names, dates of birth, Social Security numbers, driver's license or state identification numbers, appointment information, and health insurance information. If you received a notice letter from Concord Orthopaedics about this incident, your information was among the data the practice identified as potentially affected.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
Who Qualifies?
The settlement class includes all individuals within the United States who were notified that their personal information may have been accessed in the November 2024 Concord Orthopaedics data security incident. In practical terms, if Concord Orthopaedics mailed or emailed you a breach notice about this incident, you are a class member and may file a claim.You will need the unique ID and PIN printed on your notice to log in to the claim portal, so keep that notice handy. If you believe you were affected but cannot locate your ID or PIN, you can request help through the official settlement website's contact page.
How Much Can You Get?
The settlement offers class members documented-loss reimbursement, a choice of a lost-time payment or a flat cash payment, and one year of medical data monitoring that everyone can claim.Documented loss reimbursement. You can claim up to $3,000 for documented, unreimbursed out-of-pocket losses for fraud and identity theft fairly traceable to the breach, for losses incurred between November 21, 2024 and July 8, 2026. This can include losses such as bank or other fees, professional charges, and the cost of credit monitoring or a credit freeze you purchased. You must provide supporting documents showing the loss and the date it occurred.
Lost time, or a $50 cash payment. You can claim up to four hours of time spent dealing with the breach — such as changing passwords, investigating suspicious activity, or researching the incident — valued at $25 per hour, for a maximum of $100. Instead of the lost-time payment, you can choose a one-time $50 cash payment that requires no proof or explanation. You may select one of these two options, not both.
One year of medical data monitoring. In addition to the cash options, every class member can enroll in one year of CyEx Medical Shield Complete, which includes $1 million in medical identity theft insurance. No documentation is required to select this benefit.
Is Proof Required?
Yes. Filing online requires you to log in to the claim portal using the unique ID and PIN printed on the notice Concord Orthopaedics sent you, so the page is marked proof required. A claimant who never received a notice, or who discarded it, cannot file online without first requesting that information through the official settlement website.Beyond the ID and PIN, the documentation needed depends on which benefit you choose. The $50 cash payment and the year of medical monitoring require no supporting documents. The up to $3,000 documented-loss reimbursement does require documentation — receipts, bank or credit card statements, or similar records showing the loss and that it was tied to the breach.
Important Dates
• Data breach: November 2024
• Preliminary approval: February 24, 2026
• Opt-Out (Exclusion) Deadline: May 26, 2026 (passed)
• Objection Deadline: May 26, 2026 (passed)
• Final Approval Hearing: June 23, 2026, at 10:00 a.m. ET (Superior Court of Hillsborough County, Manchester, NH)
• Claim Deadline: July 8, 2026 (online or mailed)
The opt-out and objection deadlines have already passed. If you are a class member, the remaining option that provides a benefit is to file a claim by July 8, 2026. The hearing date can change, so check the official settlement website for updates.
Attorneys' Fees and Service Awards
Class Counsel will ask the Court to approve $200,000 in attorneys' fees and litigation costs, and a service award of $1,500 for each of the class representatives. Concord Orthopaedics, not the class members, will pay these amounts, and they do not reduce the benefits available to claimants. The figures are subject to Court approval, and the Court may award less than requested.How to File a Claim
File your claim online or by mail through the official settlement website, ConcordDataSettlement.com. You will need the unique ID and PIN from your notice to log in to the online claim form. Submit any documented losses up to $3,000, choose the lost-time payment (up to $100) or the flat $50 cash payment, add the year of medical monitoring if you want it, and upload supporting documents if you are claiming documented losses. The deadline is July 8, 2026.File a Claim
Frequently Asked Questions
Who qualifies for the Concord Orthopaedics data breach settlement?
The settlement covers individuals in the United States who were sent a notice that their personal or protected health information may have been accessed in the November 2024 Concord Orthopaedics data security incident. If you received a breach notice from Concord Orthopaedics, you are a settlement class member.
How much can I get from the Concord Orthopaedics settlement?
You can claim reimbursement of up to $3,000 for documented, unreimbursed losses fairly traceable to the breach. Separately, you can claim up to four hours of lost time at $25 per hour (a maximum of $100), or instead choose a one-time $50 cash payment that requires no proof. Every class member can also enroll in one year of CyEx Medical Shield Complete medical data monitoring with $1 million in medical identity theft insurance.
Is proof required to file a claim?
Yes. To file online, you must log in using the unique ID and PIN printed on your Concord Orthopaedics notice. No documentation is required for the $50 cash payment or the year of medical monitoring, but the up to $3,000 documented-loss option requires documents such as receipts, bank statements, or credit card records showing the loss and its date.
What is the deadline to file a Concord Orthopaedics settlement claim?
The claim deadline is July 8, 2026. Claims can be filed online or by mail through the official settlement website, ConcordDataSettlement.com.
What happens if I do nothing?
If you do nothing, you will not receive a payment or medical monitoring, and you will give up your right to sue Concord Orthopaedics over this data breach. The only way to receive a benefit is to file a claim by July 8, 2026.
Sources
• Official Settlement Website: ConcordDataSettlement.com• Montambeault, et al. v. Concord Orthopaedics Professional Association, Case No. 217-2025-CV-00292, Superior Court of Hillsborough County, New Hampshire (Northern District)
OpenClassActions.com is a consumer news site and is not a settlement administrator or a law firm.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
Claims-made — up to $3,000 documented + up to $100 lost time or $50 cash + 1 yr medical monitoring
Case Title
Montambeault, et al. v. Concord Orthopaedics Professional Association
Case Number
217-2025-CV-00292
Court
Superior Court of Hillsborough County, New Hampshire (Northern District)
Final Approval Hearing
June 23, 2026, 10:00 a.m. ET
Superior Court of Hillsborough County, Manchester, NH
Administrator
Simpluris, Inc.
Official Website
Concord Data Settlement.com
