A $1.3 million settlement resolves claims over the July 2024 cybersecurity incident at DAP Health, Inc., the Palm Springs nonprofit health provider. If DAP Health sent you a notice, you can claim a pro rata cash payment estimated at $25, an additional $75 if you were a California resident on July 22, 2024, and up to $5,000 for documented losses — plus two years of credit and medical record monitoring on top of all of it.
Current Status
Claims are open. The deadline to file is October 21, 2026, and the Notice gives that date without a cutoff time or timezone, so do not assume one. The Superior Court of California for the County of Riverside has granted preliminary approval, which means it found enough evidence to suggest the settlement is fair, reasonable and adequate — not that it has approved it. The Final Approval Hearing is scheduled for October 1, 2026 at 8:30 a.m. before Judge Harold W. Hopp, and no final approval order or payment date had been announced as of August 18, 2026. Two earlier deadlines are still live: requests for exclusion and objections must both be postmarked by September 1, 2026.What Changed Recently?
The Riverside Superior Court preliminarily approved the settlement in Donald Crosslin and Matthew Paone v. DAP Health, Inc., Case No. CVRI2500186, and notice has gone out to the class. The claim process is now running through Epiq, the settlement administrator, and class members who received a notice can file for benefits until October 21, 2026.DAP Health denies the legal claims and denies any wrongdoing or liability. The Notice states that the court has not made any determination that DAP Health did anything wrong or that any law was violated, and that the parties agreed to settle to avoid the risk, cost and time of continuing the lawsuit. Our glossary entry on preliminary approval explains what that first ruling does and does not settle.
Who Qualifies?
The Settlement Class is all individuals in the United States whose Private Information was compromised in the Data Incident, including everyone who received notice of it and who has not opted out. The class is nationwide rather than California-only, even though the case is in a California court and one of the four benefits is limited to California residents.Excluded from the class are the judges presiding over the lawsuit, Class Counsel and members of their families; DAP Health and its subsidiaries, parent companies, successors and predecessors, along with any entity in which DAP Health or its parents hold a controlling interest and its current or former officers and directors; anyone who properly submits a Request for Exclusion before the opt-out period expires; and the successors or assigns of any of those excluded people.
The underlying event is a cybersecurity incident that took place in July 2024 and resulted in the potential unauthorized access to or acquisition of class members' Private Information. The Notice defines that term broadly, and the list is longer than most data breach settlements carry: names, Social Security numbers, addresses, dates of birth, phone numbers, driver's license numbers, passport numbers, birth certificate numbers, vehicle license plate and VIN numbers, financial account numbers, Medicare and Medicaid numbers, health insurance plan and policy numbers, medical diagnoses, medical procedures and treatments, procedure and treatment dates and locations, treatment costs, laboratory test results and images, vital signs records, medical histories, allergies, prescription drugs taken and written, and medical provider names. DAP Health, Inc. is a nonprofit community health provider headquartered in Palm Springs, California, so the people who received notices are largely its patients. The July 22, 2024 date the settlement uses to fix California residency is the date associated with the incident in DAP Health's breach notification to the California Attorney General. If you are new to how these cases work, our data breach class action explainer walks through the stages from notice to payment.
How Much Can You Get?
Four benefits are on the table, and the structure here is more generous than the usual data breach settlement in one specific way: they are additive rather than alternatives. Most settlements make you pick between a flat cash payment and a documented-loss payment. This one does not.- Documented Loss Payment — up to $5,000 per class member for losses supported by reasonable documentation. The Notice names credit card statements, bank statements, invoices, telephone records, photographs and receipts as examples.
- Pro Rata Cash Payment — a cash payment estimated at $25, claimable in addition to the documented loss payment and with no documentation required.
- California Statutory Cash Payment — an additional $75 for anyone who was a resident of California on July 22, 2024 and to whom DAP Health sent Notice. It is claimable in addition to both of the payments above.
- Credit and Medical Record Monitoring — two years of free credit and medical record monitoring, available in addition to the cash payments rather than instead of them.
The $25 figure is an estimate and the Notice is explicit about why. The $1,300,000 Settlement Fund first pays administrative expenses, attorneys' fees and expenses, service awards, the cost of the credit and medical record monitoring, valid Documented Loss Payments and valid California Statutory Cash Payments. Whatever remains is the Net Settlement Fund, and the pro rata cash payments are paid out of that remainder — so the $25 moves up or down with how many people file and how large the claims ahead of it turn out to be. Our glossary entry on pro rata settlement payments explains how that division works.
The Notice also sets out what happens if the money runs short, and the order matters because it is not proportional across the four benefits. If there is not enough in the fund to fully pay for the monitoring services, the coverage period is shortened and no payments are made for Documented Loss Payments, Pro Rata Cash Payments or California Statutory Cash Payments at all. If the monitoring and documented loss claims together exceed the available funds, Documented Loss Payments are reduced equally, and no pro rata or California statutory payments are made. Read plainly, the monitoring sits first in line and the $25 sits last.
Class Counsel will ask the court to award attorneys' fees of up to one third of the Settlement Fund, or $433,333.33, plus reimbursement of costs, and service awards of up to $5,000 each for the class representatives. Both come out of the Settlement Fund if the court awards them, and the Notice states the court may award less. The court appointed John Nelson of Milberg PLLC and Kristen Lake Cardoso of Kopelowitz Ostrow P.A. as Class Counsel, and class members are not charged for their services.
What Proof or Notice ID Is Required?
Proof is required. The online claim portal opens with a login screen asking for the Unique ID and PIN printed on the notice mailed to class members, and both are required fields. That administrator-issued credential gates the entire online filing path, which makes this a proof-required settlement even for the $25 pro rata payment and the $75 California payment, neither of which needs any supporting documentation of its own. Our glossary entry on why you received a class action notice explains what that mailing is and why the code on it matters.The documented-loss tier carries a separate evidentiary requirement on top of the login. The Notice states that a loss cannot be documented solely by a personal certification, declaration or affidavit — you have to provide supporting documentation in addition to any such statement. Self-prepared documents such as handwritten receipts do not on their own count as reasonable documentation, though the Notice allows them to add clarity or support to other material you submit. If you do not submit reasonable documentation supporting a loss, or the Settlement Administrator finds your Claim Form invalid and you do not cure it, your claim is treated as if you had elected the Pro Rata Cash Payment rather than simply rejected.
If you cannot locate your Unique ID and PIN, request them through the contact page on the official settlement website. A paper Claim Form can also be downloaded from the settlement website and returned by mail to the Settlement Administrator using the instructions printed on the form.
What Is the Deadline?
Claim Forms must be submitted online by October 21, 2026, or mailed to the Settlement Administrator at the address printed on the Claim Form and postmarked by October 21, 2026. The Notice gives the date without specifying a cutoff time or timezone, so treat the full date as the deadline rather than assuming an end-of-day rule.Two other deadlines fall much earlier and are easy to miss because they sit almost seven weeks ahead of the claim date. A Request for Exclusion must be postmarked by September 1, 2026, and an objection must also be postmarked by September 1, 2026. The Notice adds a practical warning about postmarks: mail is not necessarily postmarked the day it goes into a mailbox, because the postmark happens when the item reaches a processing facility, so it suggests mailing at least a week early, getting a manual postmark in person, or using Certified Mail.
One more piece of the schedule is worth flagging, because it runs the opposite way to most settlements. The Final Approval Hearing is set for October 1, 2026, three weeks before the claim window closes on October 21. The court may therefore decide whether to approve the settlement while claims are still coming in. That does not shorten the claim window.
How Do You Take Action?
File through the official DAP Health data settlement website. The online claim form opens after you enter the Unique ID and PIN from your notice, and filing there directly is the fastest route.Because the benefits stack, there is no either-or decision to make before you start. Claim the pro rata cash payment, add the $75 if you were a California resident on July 22, 2024 and were sent notice, add the credit and medical record monitoring, and add a documented-loss claim if you have losses you can support with statements, invoices or receipts. Gather that documentation before you open the form, since a documented-loss claim submitted without it is processed as a pro rata claim instead.
If you prefer paper, download the Claim Form from the same website, fill it out, sign it, date it, attach any supporting documentation, and mail it to the Settlement Administrator so that it is postmarked by October 21, 2026. Filing on the official settlement website is free — do not pay a third-party site to file for you. If your mailing or email address changes after you file, the Notice makes it your responsibility to tell the Settlement Administrator.
What Happens Next?
The next milestone is the Final Approval Hearing on October 1, 2026 at 8:30 a.m. before Judge Harold W. Hopp in Department 1 of the Riverside Historic Courthouse in Riverside, California. At that hearing the court will consider whether the settlement is fair, reasonable and adequate, and will rule on Class Counsel's application for attorneys' fees, costs and service awards. It will also consider any objections filed by the September 1 deadline. The Notice states that the date and time may change without further notice, that the court may hold the hearing by video conference or telephone, and that class members should check the settlement website to confirm. Nobody has to attend.Settlement benefits are provided only after the court approves the settlement and it becomes final. The Notice asks class members to be patient and check the settlement website for updates, and gives no payment date. We will update this page when a final approval order or a payment schedule is entered.
Doing nothing has a cost here. A class member who neither files a claim nor opts out receives no benefit and is still bound by the release described in the Settlement Agreement, which means giving up the right to sue or to be part of any other lawsuit against the released parties over the Data Incident and the claims made in the complaint. Our glossary entry on opting out of a class action explains the trade-off in the other direction.
Sources and Verification
• Official settlement website — DAP Data Incident Settlement• Notice of Proposed Class Action Settlement (long-form notice)
• Official settlement website — Frequently Asked Questions
• Official settlement website — Documents, including the Settlement Agreement and Claim Form
• Official claim portal — claim instructions and login requirements
• California Attorney General — data breach notification database
• Donald Crosslin and Matthew Paone v. DAP Health, Inc., Case No. CVRI2500186, Superior Court of California, County of Riverside
Questions
Can I claim the $25, the $75 and the documented losses together?
Yes. The Notice describes these as additive rather than alternatives, which is unusual for a data breach settlement. The pro rata cash payment, estimated at $25, is available in addition to a Documented Loss Payment; the $75 California Statutory Cash Payment is available in addition to both; and the two years of credit and medical record monitoring can be claimed on top of all of them. One Claim Form covers whichever you are eligible for. The catch is at the bottom of the page rather than in the choice: if claims exceed the money available, the Notice describes a specific order in which the payments shrink or disappear.
Why is the final approval hearing before the claim deadline?
That ordering is set by the schedule the court approved, and it is worth noticing because it is the reverse of what most settlements do. The Final Approval Hearing is set for October 1, 2026, while the claim window runs to October 21, 2026. So the court may decide whether to approve the settlement while claims are still being filed. It does not shorten your claim window: the Notice gives October 21, 2026 as the date a Claim Form must be submitted online or postmarked, and the hearing date is subject to change without further notice.
Who qualifies for the extra $75 California payment?
The Notice sets two conditions for the California Statutory Cash Payment. You must have been a resident of California on July 22, 2024, and DAP Health must have sent you Notice. Both have to be true, and you claim it on the same Claim Form as the other benefits. Residency at some later point does not qualify you, because the date the Notice fixes is July 22, 2024 rather than the date you file. The $75 is paid from the Settlement Fund alongside the Documented Loss Payments, so it sits ahead of the pro rata cash payment in the order the fund is spent.
What happens if the settlement fund runs short?
The Notice spells out an order, and it does not treat all four benefits the same way. The Settlement Fund first pays administrative expenses, attorneys' fees and expenses, service awards, the cost of the credit and medical record monitoring, valid Documented Loss Payments and valid California Statutory Cash Payments. What is left is the Net Settlement Fund, and the pro rata cash payments come out of that, which is why the $25 is described as an estimate rather than a fixed amount. If monitoring and documented loss claims together exceed the money available, the Notice says Documented Loss Payments are reduced equally and no pro rata or California statutory payments are made. If there is not enough even for the monitoring, the coverage period is shortened and no cash payments of any kind are made.
What if I never received a notice or lost the Unique ID?
The online claim portal will not open without the Unique ID and PIN printed on the notice mailed to class members, so those credentials are what gate the entire online filing path. If you did not receive a notice or cannot find yours, request the information through the contact page on the official settlement website. A paper Claim Form can also be downloaded from the settlement website, completed, signed and returned by mail to the Settlement Administrator using the instructions printed on the form, and it must be postmarked by October 21, 2026.
Is it too late to opt out or object?
Not yet, but that window closes well before the claim window. Both a Request for Exclusion and an objection must be postmarked by September 1, 2026, roughly seven weeks before the October 21, 2026 claim deadline. The two options are mutually exclusive: you can object only if you stay in the class, and excluding yourself means you cannot object and cannot receive any settlement benefit. Excluding yourself keeps whatever right you have to sue DAP Health separately over the incident.
