Published
July 29, 2026
This $1 million settlement covers the June 2024 breach at Clay-Platte Family Medicine Clinic and three affiliated Kansas City-area practices, which exposed Social Security numbers and medical information for about 53,916 patients. If you got a notice, you can claim up to $15,000 in documented losses or a pro rata cash payment, and either way add three years of medical and credit monitoring.
Current Status
Claims are open. The deadline to file is September 30, 2026, and the deadline to exclude yourself or object is earlier — September 6, 2026. The court granted preliminary approval and authorized the notice program, but final approval has not been granted: the final approval hearing before Judge Stephen R. Bough in the U.S. District Court for the Western District of Missouri is scheduled for September 29, 2026. No payment date has been announced, and no money goes out until the settlement is approved and becomes effective. If a notice reached you with a Notice ID and Confirmation Code, filing before the September 30 deadline is the step that matters now.
Status
Claims Open
Final approval hearing September 29, 2026 · opt out or object by September 6, 2026
Claim Deadline
September 30, 2026
Submitted online or postmarked by mail
Estimated Payout
Up to $15,000 or pro rata cash
Documented losses up to $15,000 OR an equal share of what remains of the $1M fund · plus 3 years of CyEx Medical Shield Total monitoring for every valid claimant
Proof Required
Yes
Notice ID and Confirmation Code from your mailed or emailed notice · documentation also required for the documented-loss option
What Changed Recently?
The court approved a notice program and the claim window is now running, with notices carrying a Notice ID and Confirmation Code sent to identified class members and a claim portal live at the official settlement website. The settlement was reached after an all-day mediation on September 2, 2025, and after the court ruled on the defendants' motion to dismiss on November 30, 2025, granting it in part and denying it in part — meaning some claims survived and the case continued before the parties resolved it.The defendants deny all liability and deny that they did anything wrong. No court has found that any of them violated the law; the settlement resolves the claims without any admission.
What Happened in the Breach?
On June 26, 2024, Clay Platte Family Medicine detected suspicious activity in the network environment it shares with three affiliated practices. According to the clinics' notice, they secured the network and hired a cybersecurity firm, which determined that an unauthorized actor had potentially accessed and acquired files stored on the network. The clinics then reviewed the affected data and, on September 10, 2024, identified the individuals whose information was involved.The information potentially involved included names, Social Security numbers, dates of birth, addresses, medical information, gender, and telephone numbers. That combination is why this settlement pairs cash with medical identity monitoring rather than plain credit monitoring: a stolen Social Security number paired with a medical record can be used to obtain treatment or prescriptions in someone else's name, which is harder to detect than a fraudulent credit card charge.
The complaint alleged the clinics failed to encrypt the data and failed to maintain reasonable security, and it criticized the roughly three-month gap between detecting the intrusion and identifying who was affected. Those were allegations, contested by the defendants, and the court never ruled on whether they were true.
Who Qualifies?
The settlement class is the approximately 53,916 people in the United States who were sent notification by the defendants that their personal information or protected health information was potentially compromised in the incident. Receiving that notice is what puts you in the class.Four affiliated practices are covered, which is the part most likely to confuse patients: Clay-Platte Family Medicine Clinic, P.C.; Summit Family and Sports Medicine; Cobblestone Family Medicine Clinic, doing business as Clay Platte Family Medicine Clinic P.C.; and Barry Pointe Family Care. They shared patients and a network environment, so a notice may have come from a practice name you do not immediately associate with the breach. Excluded from the class are the defendants, the judge and magistrate presiding over the case along with their immediate families and judicial staff, and anyone who timely opts out.
How Much Can You Get?
The fund is $1,000,000 and is non-reversionary, meaning no unclaimed portion returns to the clinics. Every class member who files a valid claim chooses one of two cash options, and may add the monitoring on top of either.• Documented Loss Payment — up to $15,000. Reimbursement for unreimbursed out-of-pocket costs fairly traceable to the breach: losses from fraud or identity theft, professional fees for attorneys, accountants or credit repair, the cost of credit monitoring or other mitigation services bought on or after June 26, 2024, and miscellaneous expenses such as notary, fax, postage, copying, mileage and long-distance charges. This option requires an attestation under penalty of perjury plus supporting documentation; a personal statement alone will not carry a claim.
• Cash Fund Payment — pro rata. Instead of documenting losses, you can take an equal share of whatever remains in the fund after administration costs, taxes, court-approved fees and service awards, the monitoring costs, and all approved documented loss claims are paid. No per-person estimate exists, because the amount depends entirely on how many people file.
• Three years of medical and credit monitoring. Available to every valid claimant regardless of which cash option they choose. The service is CyEx Medical Shield Total, which the settlement agreement describes as including three-bureau credit monitoring, monitoring of healthcare identifiers such as health plan numbers and medical record numbers, dark web monitoring, high-risk transaction alerts, security freeze assistance, and identity theft insurance with limits up to $1,000,000.
One protection worth knowing about: if the total of approved documented loss claims exceeds the net fund, those payments are reduced pro rata and nothing is left for cash payments. Conversely, if your documented loss claim is denied, the administrator is directed to treat an otherwise valid claim form as an election for the Cash Fund Payment — so a rejected receipt does not automatically mean walking away empty-handed.
What Proof or Notice ID Is Required?
Proof Required: Yes, on two separate levels. First, the online claim portal requires the Notice ID and Confirmation Code printed on the postcard notice, directly above your name and address, or included in the emailed notice. The instructions say to enter the Notice ID exactly as it appears, letters and numbers included. A person who never received a notice, or who threw it away, cannot simply log in and file.Second, the documented loss option requires actual documentation — credit card statements, bank statements, invoices, telephone records, screenshots, receipts, police reports, or similar records — plus an attestation. The settlement agreement states expressly that a claim cannot be documented solely by a personal certification, declaration, or affidavit.
The pro rata Cash Fund Payment and the monitoring do not require receipts, but they still run through the same Notice ID gate. If you believe you are a class member and cannot find your notice, use the contact page on the official settlement website to reach the administrator well before the deadline rather than waiting.
What Is the Deadline?
Claim forms must be submitted online or postmarked no later than September 30, 2026. The published materials give the date without specifying a time zone for the online cutoff, so we are not publishing one.The other two deadlines land earlier, on September 6, 2026, and this catches people out. Exclusion requests must be received or postmarked by that date, and objections must be submitted by then as well. Excluding yourself means no payment but preserves your right to sue individually; objecting keeps you in the class while telling the court why you think the deal is unfair. If you are weighing either option, note that you have roughly three fewer weeks to decide than you have to file a claim.
How Do You Take Action?
Go to the official settlement website, CPFM Settlement.com, open the Submit a Claim section, and log in with the Notice ID and Confirmation Code from your notice. The site also hosts the long-form notice, the settlement agreement, the preliminary approval order, the operative complaint, and the full 28-question FAQ. A paper claim form can be downloaded from the same site and mailed instead.When you file, you select how you want to be paid. The settlement offers PayPal, Venmo, or Zelle as electronic options; claimants who do not pick one receive a paper check by mail. If you elect the monitoring, you will be sent an activation code within 30 days after the settlement's effective date and will have at least 90 days to activate it, so watch for that message rather than assuming enrollment is automatic.
You do not need to attend the hearing to be paid, and you do not need your own lawyer — the court appointed Stueve Siegel Hanson LLP, McShane & Brady, LLC, and Norman & Graves LLC as class counsel. You may hire your own attorney at your own expense.
The Administrator Transparency Terms Attached to This Case
This settlement is small in dollar terms but has drawn outsized attention for a reason unrelated to the breach. Judge Bough ordered public disclosure of the settlement administrator's fees, including any rebates or other financial rewards, and in May 2026 Angeion Group agreed on the record to a set of conditions: no rebates, awards, credits, or financial compensation from any vendor, subcontractor, or bank connected to the administration; selection of the settlement bank through competitive bidding including at least two banks with no existing relationship to the administrator; and no prepaid cards, with class members paid by check or by digital methods that carry no rebate or incentive schemes.That last commitment is why the payment menu here is PayPal, Venmo, Zelle, or a check rather than a prepaid debit card. For a class member the practical effect is simple: more of the fund reaches people, and the payment method is not quietly generating revenue for someone else. We covered the broader shift in our report on settlement administrator transparency benchmarks, where this case is the clearest example of the new standard.
What Happens Next?
The next milestone is the final approval hearing on September 29, 2026 in Kansas City, where the court will decide whether the settlement is fair, reasonable and adequate and will rule on class counsel's fee request — up to one-third of the fund plus costs — and service awards of up to $2,500 for each named plaintiff. The hearing can be moved without further notice, so the settlement website is the authority on the current date.If approval is granted and the settlement becomes effective after any appeal period, the administrator processes claims and issues payments. Settlement checks expire if not negotiated within 90 days of issue, and the administrator is directed to chase uncashed checks and undeliverable mail before any residual funds are handled under state unclaimed property law. We will update this page when the court rules.
Sources and Verification
• Official Settlement Website — CPFM Settlement• Long Form Notice of Proposed Class Action Settlement, Highfill, et al. v. Clay-Platte Family Medicine Clinic, P.C., et al., No. 4:24-cv-00704-SRB (W.D. Mo.) — embedded below
• Settlement Agreement and Release (Dkt. 82-1, filed April 7, 2026), including the claim form and notice exhibits
• Plaintiffs' First Amended Complaint (Dkt. 13, filed January 27, 2025)
• Preliminary Approval Order, available on the official settlement website's documents page
OpenClassActions.com is a consumer news site and is not the claims administrator or a law firm.
Questions
Which clinics are covered by the Clay-Platte settlement?
The settlement covers patients of four affiliated Kansas City-area practices that shared a network environment: Clay-Platte Family Medicine Clinic, P.C.; Summit Family and Sports Medicine; Cobblestone Family Medicine Clinic, doing business as Clay Platte Family Medicine Clinic P.C.; and Barry Pointe Family Care. If any of those practices mailed or emailed you a notice about the June 2024 incident, you are in the class of approximately 53,916 people.
Can I claim both the documented loss payment and the cash payment?
No. The documented loss payment of up to $15,000 and the pro rata Cash Fund Payment are alternatives, and you choose one. Everyone who files a valid claim can also elect three years of medical and credit monitoring on top of whichever cash option they pick, so the monitoring is not an either-or choice against the money.
What happens if my documented loss claim is rejected?
You are not simply left with nothing. The administrator must notify you of a deficiency and give you 21 days to cure it. If a documented loss claim is denied outright after that, the settlement directs the administrator to treat an otherwise timely and valid claim form as an election for the Cash Fund Payment instead. The agreement also provides that if the calculated cash payment ends up larger than an approved documented loss award, you receive the larger cash payment.
How much will the Clay-Platte cash payment be?
No per-person figure has been announced, and none can be calculated in advance. Cash Fund Payments are paid from whatever remains of the $1 million fund after administration costs, taxes, court-approved attorneys' fees and service awards, the cost of the monitoring services, and all approved documented loss claims are paid. Whatever is left is divided into equal shares among everyone who elects that option, so the amount depends on how many people file.
Why is the final approval hearing before the claim deadline?
The final approval hearing is set for September 29, 2026 and the claim deadline is September 30, 2026, so the hearing falls one day earlier. That ordering is unusual but not a problem for claimants: the claim window runs to its own deadline regardless of the hearing, and no payments go out until the settlement is approved and becomes effective, which is after any appeal period runs. Check the official settlement website before relying on the hearing date, since it can be moved without further notice.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
$1,000,000
Non-reversionary · approximately 53,916 class members
Case Title
Highfill, et al. v. Clay-Platte Family Medicine Clinic, P.C., et al.
Case Number
4:24-cv-00704-SRB
Court
U.S. District Court, Western District of Missouri (Kansas City)
Final Approval Hearing
September 29, 2026
Judge Stephen R. Bough · attendance is not required · date may change
Administrator
Angeion Group
Official Website
CPFM Settlement.com
