ConnectOnCall was the after-hours answering platform a lot of doctors' offices used, and this $4,950,000 settlement covers people whose private information may have been caught when an intruder sat inside it for nearly three months in 2024 and took provider-patient communications. You do not need a notice or a receipt to claim the $75: the gate is a sworn statement that you contacted a provider after hours at some point in the ten years ending May 12, 2024.
Current Status
Claims are open. Claim Forms must be submitted online by November 2, 2026, or mailed with a postmark no later than that date; the notice states a date rather than a cutoff time. The deadline to opt out or to object is earlier, on October 19, 2026, and the final approval hearing is scheduled for 10:00 a.m. ET on November 17, 2026 in Central Islip, New York — so the court has not yet decided whether to approve the settlement, and no payment date had been announced as of August 30, 2026. The action to take now is to file a Claim Form, and you do not need the notice to do it: the claim portal carries a path for people who never received a Unique ID and PIN.What Changed Recently?
Notice has gone out and the claim window is now running toward its November 2, 2026 close. The case is captioned In re ConnectOnCall.com Data Breach Litigation, Case No. 2:24-cv-08790, before Judge Sanket J. Bulsara in the U.S. District Court for the Eastern District of New York. The defendants are ConnectOnCall.com, LLC and Phreesia, Inc.According to the court-authorized notice, ConnectOnCall was an after-hours on-call answering service used by healthcare providers across the United States. On or about May 12, 2024 the defendants learned that an unknown threat actor had gained access to the ConnectOnCall Platform between February 16, 2024 and May 12, 2024 and exfiltrated data from it, including certain provider-patient communications. Notification of potentially affected individuals began on or about December 11, 2024.
One line in the notice is worth quoting for what it rules out: the lawsuit does not allege that, as a result of the Data Incident, any individual's data was misused in any way. The claims pleaded were negligence, negligence per se, breach of third-party beneficiary contract, invasion of privacy and intrusion upon seclusion, unjust enrichment, and declaratory judgment. The defendants deny the legal claims and deny any wrongdoing or liability, and the court has made no determination that any law was violated.
Before final approval, the defendants are also required to give class counsel a written attestation describing the security measures put in place after the incident and estimating what those measures cost. The notice says the defendants bear that cost and that it does not reduce the settlement fund. Because the attestation goes to counsel rather than the public, the specific measures are not disclosed, and this page does not characterize them.
Who Qualifies?
The Settlement Class is every living individual residing in the United States whose Private Information may have been impacted in the Data Incident. Excluded are the directors, officers and employees of the defendants, and the judges assigned to the case along with their immediate family and court staff.That class definition is broad, and the notice does not publish a class size. The practical eligibility test for a cash payment is narrower and sits on the Claim Form itself: to claim either cash option, you must attest under penalty of perjury that you communicated after-hours with a healthcare provider or their office between May 12, 2014 and May 12, 2024.
Notice that the attestation window is ten years wide, while the breach window is under three months. The settlement is not asking you to prove you were on the platform during the intrusion — it is asking you to swear you were the kind of person whose messages the platform would have carried. If you ever called a doctor's office after hours in that decade and got an answering service, read the Claim Form carefully; if you did not, the attestation is not one to sign.
How Much Can You Get?
A $4,950,000 Settlement Fund pays for everything: all valid claims for monitoring and for cash, all settlement administration costs, and any attorneys' fees, costs and service awards the court awards. The notice estimates administration costs at $490,000 under current assumptions, and says class counsel will ask for fees of no more than $1,650,000 plus reimbursement of reasonable costs, along with service awards of up to $2,500 for each class representative. The court may award less.There are two cash options and you take one or the other:
- Cash Payment A — Documented Losses. Up to $5,000 for actual, documented, unreimbursed costs, expenses, losses or charges from identity theft or identity fraud, falsified tax returns, or other possible misuse of your information attributed to the incident.
- Cash Payment B — Alternate Cash. Up to $75, with no documentation required.
The pro rata mechanics here have an order to them that decides who absorbs a shortfall, and it is the single most useful thing to understand about the money. The notice says that if valid claims exhaust the fund, cash payments are reduced pro rata — and it fixes the sequence in which the administrator pays out of the fund: Dark Web and Medical Data Monitoring first, then Cash Payment A, then Cash Payment B. The $75 alternate cash is therefore last in line and the first thing to shrink. Treat it as a ceiling, not a promise.
Cash Payment A is limited to unreimbursed losses. The notice says you will not be reimbursed for a loss already covered by another source, and it names one specifically: the identity protection and credit monitoring services the defendants offered in the original notification letter.
What About the Monitoring?
Two years of Dark Web and Medical Data Monitoring through CyEx Medical Shield Complete is available, and it is additive — you can claim it alongside whichever cash option you choose rather than instead of one. The notice describes dark web monitoring, medical identity monitoring, real-time alerts, and insurance coverage of up to $1,000,000 for medical identity theft, and puts the value at $360 per class member for the two years.It is worth noting what is being monitored. This breach took provider-patient communications rather than payment-card data, so the product on offer is medical-identity focused rather than a standard credit-bureau watch. Medical identity theft is also the kind that tends to surface late, through a billing statement or an insurance denial rather than a credit alert — which is part of why a two-year monitoring benefit is on the table at all in a case where the complaint does not allege anyone's data was actually misused.
Like the cash, the monitoring requires a timely, valid Claim Form. Nothing here arrives automatically.
What Proof or Notice ID Is Required?
For the $75 and the monitoring, no proof is required. There is no receipt to produce and no administrator-issued code that gates the benefit — the requirement is the sworn attestation described above, made under penalty of perjury on the Claim Form.The online portal does ask for a Unique ID and PIN printed on the mailed or emailed notice, which is what makes this settlement look at first glance like the ID-gated data breach cases that dominate this category. It is not one. The same page carries a link for claimants who do not have a Unique ID or PIN, so someone who never received a notice, or who threw it away, can still file. That is the distinction OCA's standard turns on, and it is why this page is marked Proof Required: No rather than Yes.
Cash Payment A is the exception and it is a real one. To claim documented losses you must elect Cash Payment A on the form, make the after-hours attestation, and provide a description of the losses together with supporting documentation that is not self-prepared. The claim instructions say documents should be clear, readable copies, that nothing you submit is returned, and that you may redact unrelated transactions and all but the first and last four digits of an account number. Uploads must be under 20 MB per file in a common document or image format; if you cannot upload, you mail a printed form with the documentation attached.
And the fallback is unusually generous: if you do not submit reasonable documentation, or the administrator rejects your claim for any reason and you fail to cure it, the notice says the claim is converted to Cash Payment B rather than denied outright. Reaching for the $5,000 tier and missing does not leave you with nothing.
What Is the Deadline?
- File a Claim Form: online by November 2, 2026, or postmarked by November 2, 2026
- Exclude yourself (opt out): postmarked by October 19, 2026
- Object to the settlement: filed with the court by October 19, 2026, with copies mailed or couriered to class counsel, the defendants' counsel and the administrator by the same date
- Final approval hearing: 10:00 a.m. ET on November 17, 2026, Central Islip, New York
The notice gives dates without an accompanying cutoff time for filing, so we publish only the dates. The opt-out and objection deadline falls two weeks before claims close, so the decision about whether to stay in the class has to be made before the last day to file.
How Do You Take Action?
File through the official settlement website, Connect On Call Settlement.com. The Submit a Claim page starts with the Unique ID and PIN login, with a separate link below it for filing without them. From there you give your contact details, make the after-hours attestation, and select the monitoring, Cash Payment A, or Cash Payment B. If you are claiming documented losses, have your files ready before you start — the instructions warn that a partially completed online Claim Form is not saved if you leave and come back. After you submit, the administrator emails a confirmation code worth keeping.A printable Claim Form is available on the settlement website for anyone who would rather file on paper. If your mailing or email address changes after you file, the notice puts the burden on you to tell the administrator.
Staying in the class means releasing your claims against the released parties over the issues this settlement resolves; Section XIII of the settlement agreement sets out the releases in full. Opting out is the only way to keep the right to sue, and it requires a personally signed written request mailed to the administrator and postmarked by October 19, 2026, giving your name, address, telephone number and email address along with a statement asking to be excluded. The notice is explicit that you cannot opt out by telephone or email, that mass or group opt-outs signed by an attorney are not accepted, and that an opt-out forfeits both the cash and the monitoring — and that if you opt out and also file a claim, the opt-out controls.
What Happens Next?
The next milestone is the November 17, 2026 final approval hearing, at which the court will consider whether the settlement is fair, reasonable and adequate and will rule on the application for attorneys' fees, costs and service awards. The notice warns that the date and time are subject to change and that the court may hold the hearing by video conference or telephone, so the official settlement website is the place to confirm it. Class members do not have to attend, and a timely written objection is considered whether or not its author appears.A hearing being held is not the same as approval being granted. The notice says benefits are provided after the settlement is approved and becomes final, and asks class members to be patient because that can take time. No payment date had been announced as of August 30, 2026.
Sources and Verification
- In re ConnectOnCall.com Data Breach Litigation — Official Settlement Website
- Official Settlement FAQs — benefits, deadlines, opt-out and objection requirements
- Official Documents Page — settlement agreement, long form notice and paper Claim Form
- Official Claim Portal — Unique ID and PIN login, plus the file-without-an-ID link
- Court-Authorized Notice of Proposed Class Action Settlement (PDF)
Questions
Who qualifies for the ConnectOnCall data breach settlement?
The Settlement Class is every living individual residing in the United States whose Private Information may have been impacted in the Data Incident — the cybersecurity incident on the ConnectOnCall Platform between February 16, 2024 and May 12, 2024. To claim either cash payment you also have to attest under penalty of perjury that you communicated after-hours with a healthcare provider or their office between May 12, 2014 and May 12, 2024. Excluded are the directors, officers and employees of the defendants, and the judges assigned to the case along with their immediate family and court staff.
How much does the ConnectOnCall settlement pay?
You choose one of two cash options. Cash Payment A reimburses up to $5,000 for documented, unreimbursed losses from identity theft, identity fraud, falsified tax returns or other misuse attributed to the incident. Cash Payment B is an alternate cash payment of up to $75 that requires no documentation. Separately, and in addition to whichever cash option you pick, you can claim two years of Dark Web and Medical Data Monitoring, which the notice values at $360. Everything comes out of a $4,950,000 Settlement Fund.
Do I need proof to file a ConnectOnCall claim?
Not for the $75 alternate cash or the monitoring. Those need a sworn attestation that you communicated after-hours with a healthcare provider or their office between May 12, 2014 and May 12, 2024 — not a receipt and not an administrator-issued code. The online portal asks for the Unique ID and PIN from your notice, but it also links a claim form for people who do not have them, so a class member who never received a notice can still file. Cash Payment A is the exception: it requires a description of the losses plus supporting documentation that is not self-prepared.
What happens if my documented-loss claim is rejected?
It converts rather than dies. The notice says that if you do not submit reasonable documentation supporting a loss, or your claim is rejected for any reason and you fail to cure it, the claim is converted to Cash Payment B — the alternate cash payment of up to $75. That means trying for the documented-loss tier does not risk leaving you with nothing, which is unusual; most settlements simply deny a deficient claim.
What is the deadline for the ConnectOnCall data breach settlement?
Claim Forms must be submitted online by November 2, 2026, or mailed with a postmark no later than November 2, 2026. The separate deadline to opt out or to object is October 19, 2026, two weeks earlier.
Could the $75 payment be reduced?
Yes, and it is first in line to be cut. The notice says cash payments are reduced pro rata if valid claims exhaust the fund, and it sets the order the administrator pays from the fund: Dark Web and Medical Data Monitoring first, then Cash Payment A documented losses, then Cash Payment B alternate cash. So the $75 is a maximum rather than a guaranteed figure, and it absorbs the shortfall before the other two benefits do.
Is ConnectOnCallSettlement.com legit?
Yes. ConnectOnCallSettlement.com is the court-authorized settlement website for In re ConnectOnCall.com Data Breach Litigation, Case No. 2:24-cv-08790, in the U.S. District Court for the Eastern District of New York, and it is administered by Epiq. ConnectOnCall.com, LLC and Phreesia, Inc. deny the claims and deny any wrongdoing or liability, and the court has made no determination that any law was violated. File only through the official settlement website.
When will ConnectOnCall settlement payments be sent?
Benefits are provided after the court approves the settlement and it becomes final, which the notice says can take time. The final approval hearing is scheduled for 10:00 a.m. ET on November 17, 2026 in Central Islip, New York, and the notice warns the date and time may change and that the court may hold it by video or telephone. No payment date had been announced as of August 30, 2026.
Watch Out for Scams
A court-appointed administrator never charges a fee to release a class action payment and will not ask for banking passwords or a "processing payment" by text or phone. Use only the official settlement website linked on this page. Healthcare vendors and medical practices keep producing settlements on similar terms — the Modernizing Medicine settlement and the Palomar Health settlement are two open examples, and the Wellstar pixel tracking settlement covers a related kind of medical privacy claim. For a wider view, see our roundup of open data breach settlements and our explainer on how a data breach class action works.Official Settlement Notice
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
