Published
July 7, 2026
If you got a notice about the April 2025 Esse Health cyberattack, you can file for a cash payment and enroll in two years of medical identity monitoring — the claim deadline is August 4, 2026.
What Is This Settlement About?
Esse Health, the largest independent physician group in the greater St. Louis area, has agreed to a $2,525,000 class action settlement to resolve claims arising from a cyberattack it detected on or about April 21, 2025. The attack knocked Esse Health's electronic medical record system, phone lines, and patient portal offline for weeks and, according to the notices sent to patients, may have exposed personal and protected health information.The lawsuit alleges that Esse Health failed to adequately protect patient information. Esse Health denies the allegations and any wrongdoing, and no court has found it liable. The two sides agreed to settle to avoid the cost and uncertainty of continued litigation. If you received a notice about this settlement, you can file a claim for a cash payment and enroll in medical identity monitoring.
Status
Claims Open
Claim Deadline
August 4, 2026
Estimated Payout
~$50 Cash
Pro-rata cash payment + 2 years of CyEx Medical Shield Complete monitoring with $1M medical identity theft insurance · no documented-loss tier
Proof Required
Yes
Login ID & PIN from your mailed or emailed settlement notice (no receipts needed for the cash payment)
What Happened?
On or about April 21, 2025, Esse Health detected unusual activity on its computer network. The incident disrupted its systems for roughly six weeks, with normal communications restored around early June 2025. Esse Health has described it as a cyberattack involving unauthorized network access; no group has publicly claimed responsibility, and it has not been publicly confirmed as ransomware.According to the notices and settlement documents, the information potentially involved varied by person but could include names, addresses, dates of birth, health insurance information, medical record numbers, patient account numbers, and certain medical or health information. Social Security numbers were involved for a smaller subset of roughly 5,000 individuals rather than the entire class.
Who Qualifies?
The settlement class is the 521,167 individuals who were sent notice that their personal or protected health information may have been affected by the Esse Health cyberattack detected on or about April 21, 2025. (Esse Health separately confirmed a smaller figure of 263,601 affected individuals to regulators; the 521,167 figure is the size of the settlement class.)If you received a mailed or emailed settlement notice with a unique Login ID and PIN, you have been identified as a class member. You will need that Login ID and PIN to file your claim online.
How Much Can You Get?
This settlement provides two benefits, and they are separate from each other:Pro-rata cash payment. Class members who file a valid claim receive a share of the net settlement fund as a one-time cash payment, estimated at around $50. Because it is pro-rata, the actual amount can be higher or lower depending on how many people file. No documentation of losses is required for this payment.
Two years of medical identity monitoring. Every class member is eligible to enroll in two years of CyEx Medical Shield Complete, which includes monitoring tied to your health insurance ID and medical record number, unauthorized-spending alerts, access to a fraud-resolution specialist, and $1,000,000 in medical identity theft insurance. Esse Health pays for this coverage separately, on top of the settlement fund, so enrolling does not reduce anyone's cash payment.
Unlike many data breach settlements, this one does not include a documented out-of-pocket loss reimbursement tier — the benefits are the pro-rata cash payment and the medical identity monitoring.
What Proof Do I Need?
You do not need receipts or proof of any out-of-pocket losses. However, filing the online claim requires the unique Login ID and PIN printed on your mailed or emailed settlement notice. Because the claim is gated on that administrator-issued identifier, this settlement is treated as proof-required: a person who never received a notice cannot simply file without it.If you believe you are a class member but cannot locate your Login ID and PIN, you can request them through the official settlement website's contact page rather than filing blind.
Important Dates
• Cyberattack Detected: On or about April 21, 2025
• Exclusion (Opt-Out) & Objection Deadline: July 5, 2026
• Final Approval Hearing: August 3, 2026
• Claim Deadline: August 4, 2026
Dates can change if the court adjusts the schedule. Check the official settlement website for the current deadlines before you file.
How to File a Claim
File your claim online at EsseHealthSettlement.com. You will need the Login ID and PIN from your settlement notice. The deadline to file is August 4, 2026. If you do nothing, you will not receive a payment or the monitoring, and you give up your right to sue Esse Health on your own over this incident.Related Data Breach Settlements
If you are tracking health-sector data breach settlements, several others are open right now, including the Serviceaide data breach settlement covering Catholic Health patients and the Lucent Health data breach settlement. You can also browse the full data breach settlements tracker to see which claim windows are still open.Sources
• Official Settlement Website — EsseHealthSettlement.com• Class Action Settlement Notice, Clausner, et al. v. American Multispecialty Group, Inc. d/b/a Esse Health, Case No. 2622-CC00414 (22nd Judicial Circuit Court, City of St. Louis, Missouri)
OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm.
For more class actions keep scrolling below.
Settlement Amount
$2,525,000
Case Title
Clausner, et al. v. American Multispecialty Group, Inc. d/b/a Esse Health
Case Number
2622-CC00414
Court
22nd Judicial Circuit Court, City of St. Louis, Missouri
Final Approval Hearing
August 3, 2026
Official Website
Esse Health Settlement.com
