Published
September 17, 2026
People who were sent notice that their private information was compromised in the August 2025 cyberattack on Inotiv Inc. may qualify to claim a flat $45 with no documentation, or up to $4,580 in documented losses and lost time, from the Inotiv data breach class action settlement, plus two years of identity theft protection. Claims close December 2, 2026, and the LoginID and PIN from the mailed notice are required to file online.
Current Status
Claims are open. A Claim Form has to be submitted online or postmarked no later than December 2, 2026. There is an earlier date that is easy to miss: November 2, 2026 is the deadline both to exclude yourself and to object. The Court has scheduled a final approval hearing for December 3, 2026 at 11:45 a.m. Eastern Time, to be held by videoconference — the day after claims close. No final approval order has been entered and no payment date had been announced as of September 17, 2026.Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
Status
Claims Open
Claim Deadline
December 2, 2026
Online or postmarked · opt-out and objection deadline is earlier, November 2, 2026
Estimated Payout
$45 or up to $4,580
Flat cash with no documentation, or documented losses and lost time instead · plus 2 years of CyEx Medical Shield Complete for everyone who claims
Proof Required
Yes
LoginID and PIN from the mailed notice to file online
What Changed Recently?
The Marion Superior Court in Indianapolis authorized notice to the class, which opened the claim window and put the December 3, 2026 final approval hearing on the calendar. The case is Doyal v. Inotiv Inc., Cause No. 49D01-2604-CE-020713, in the Superior Court for Marion County, Indiana.The lawsuit alleges that during a cyberattack on Inotiv's computer systems in August 2025, certain files containing private information may have been compromised, and that those files may have held personal information such as Social Security numbers, dates of birth and financial information. Inotiv is a West Lafayette, Indiana contract research organization serving the pharmaceutical and biotechnology industries. The Settlement Agreement dates the unauthorized access to on or about August 5–8, 2025, and states that Inotiv began notifying affected individuals on December 2, 2025. Reporting on Inotiv's regulatory breach notifications put the number of people notified at roughly 9,500, and described the affected population as current and former employees, family members of those employees, and other individuals who had dealings with Inotiv or with companies it acquired.
The case took an unusual route to this settlement. It began in federal court in August 2025, was consolidated there, and the defense moved to dismiss in part on the ground that the plaintiffs lacked standing to bring certain claims in federal court. That motion was never ruled on. After a March 2026 mediation and further negotiation, the parties agreed to dismiss the federal case and refile in Indiana state court specifically to take the federal standing question off the table, and the settlement was filed there in May 2026.
Inotiv denies that it did anything wrong, and the Court has not decided who is right. The parties agreed to settle to avoid the costs, risks, disruptions and uncertainties of continuing to litigate.
Who Qualifies?
The Court defined the Class as all persons in the United States who were sent a notice by Inotiv informing them that their private information was compromised in the data breach. The test is whether Inotiv sent you that notice — not where you live, and not whether you ever worked there.That makes this settlement narrower and more self-identifying than most. Nothing about being a customer, a patient or a website visitor puts someone in the class; the notice mailed from Inotiv's records does. The Settlement Agreement also requires Inotiv to hand the administrator a Settlement Class List of names and last known addresses, so the administrator is verifying claims against that list.
Three groups are excluded:
- The Judge in the case, and the Judge's family and staff;
- Inotiv and its officers, directors and related companies; and
- Anyone who validly excludes themselves from the Settlement.
How Much Can You Get?
The benefits come in two parts, and the relationship between them is the thing most often misread on pages like this: the identity theft protection is additive, and the cash options are not all additive with each other.- Identity theft protection. Two years of CyEx Medical Shield Complete, which the Notice describes as carrying $1 million of medical identity theft insurance and monitoring for healthcare insurance ID exposure, Medical Record Number exposure and unauthorized Health Savings Account spending, with access to a fraud resolution agent if something surfaces. Every class member is eligible for it, and it can be claimed alongside any cash option.
- Ordinary losses — up to $500. Actual, documented out-of-pocket expenses caused by the breach, such as fees for credit reports, credit monitoring or credit freezes and unfreezes, the cost of replacing IDs, and postage to contact banks by mail.
- Extraordinary losses — up to $4,000. Money lost to identity theft or fraud, where the loss was more likely than not caused by the breach, is not already covered by the ordinary loss tier, and where you tried to prevent or recover the loss, including by using insurance you already have.
- Lost time — up to $80. Up to four hours at $20 an hour for time spent responding to the breach, such as changing passwords, investigating suspicious account activity or researching the incident. It needs a short written description and a signed attestation, not receipts.
- Alternative Cash Payment — $45. A one-time payment with no proof or explanation required. The Claim Form is explicit that this is taken instead of the ordinary loss, extraordinary loss and lost time benefits, not in addition to them.
So the ceiling for a class member who documents everything is $4,580 in cash plus the monitoring, and the floor for a class member who documents nothing is $45 plus the monitoring. There is no aggregate settlement fund, no per-claim cap beyond the tier limits, and no pro rata reduction described in the Notice — Inotiv pays valid claims as they are approved, and pays the administration costs separately.
Two limits apply to both documented cash tiers. The losses must have occurred between August 5, 2025 and September 10, 2026, and you cannot claim anything already reimbursed by a third party. The Notice permits self-prepared notes to explain or support other proof but states plainly that notes alone are not enough to make a valid claim. There is also a fallback worth knowing about: under the Settlement Agreement, a documented claim that is denied for any reason other than not being a class member, or approved for less than $45, is treated instead as a valid claim for the $45 Alternative Cash Payment.
One term here is favorable to the class. Class Counsel will ask the Court to approve $275,000 in attorneys' fees and litigation costs, plus service awards of $2,000 for each class representative, and the Notice states that Inotiv pays both. Because there is no common fund, neither reduces what class members receive.
What Proof or LoginID Is Required?
Filing requires an administrator-issued identifier. The online claim form is gated on the LoginID and PIN printed on the notice mailed to class members, and the login screen will not open the form without both. That makes this a proof-required settlement even for the $45 tier, where no receipts are requested — the $45 needs no documentation, but it still needs the code from your notice.If you cannot locate your LoginID and PIN, the settlement website states you can email the Settlement Administrator with your full name and mailing address to request them. A printable Claim Form can also be downloaded and mailed instead; its Login ID field is marked "if known," so a paper filing is the route for someone who no longer has the notice. Contact details are on the official settlement website.
The documented tiers add a heavier second layer on top of the login. Ordinary and extraordinary losses each require third-party documentation such as receipts or statements, itemized on the Claim Form with a description and an amount for each item. Lost time requires a written description and an attestation rather than documents. The Alternative Cash Payment adds nothing beyond the login and a signature.
What Are the Deadlines?
Three dates matter, and they are a month apart:- November 2, 2026 — exclusion and objection. A Request for Exclusion must be submitted or postmarked by this date and must carry the case name and number, your full name, mailing address, telephone number and email address, your personal signature, and the words "Request for Exclusion" or a clear equivalent. You may only exclude yourself, not another person. An objection has to be filed with the Clerk of Court by the same date, with a copy sent to the Settlement Administrator, and it carries a longer checklist — including every reason you object, any lawyer you hired for the objection and their background and fees, any objections you or that lawyer filed in the past five years, whether either of you wants to speak at the hearing, any witnesses or documents you intend to present, and your signature.
- December 2, 2026 — claim deadline. Online submissions must be completed by this date; mailed Claim Forms, including supporting documentation, must be postmarked no later than this date. Filing a Claim Form is the only route to any benefit, including the monitoring.
- December 3, 2026 — final approval hearing. The day after claims close.
Objecting and excluding are mutually exclusive: you can object only if you stay in, and a class member who opts out cannot object because the settlement no longer affects them. You can, however, object and still file a claim.
What Do You Give Up?
Class members who do not exclude themselves give up the right to be part of any other lawsuit against Inotiv about the issues this settlement covers. Section VIII of the Settlement Agreement sets out the released claims, which reach claims that arise out of or relate to the data breach, whether known or unknown, and extend to Inotiv's parents, subsidiaries, affiliates, directors, officers, employees, insurers and their successors.That release is why doing nothing is the worst of the available options. A class member who never files is still bound by it, and receives no monitoring and no cash in exchange. Excluding yourself is the only way to keep the right to sue on your own, and it has to be done by November 2, 2026.
One provision is worth knowing about because it can unwind the whole thing: the Settlement Agreement lets Inotiv terminate the settlement at its own discretion if more than 100 class members validly opt out, with written notice to Class Counsel within ten days of the opt-out deadline. On a class of roughly 9,500 people that is a low threshold.
How Do You Take Action?
Filing is done through the official Inotiv data breach settlement website, which hosts the claim form login, a downloadable printable Claim Form, the court-approved Notice, the Settlement Agreement, an important dates page and a contact page.To file online, log in with the LoginID and PIN from your notice and work through the form: check the box to enroll in the two years of identity theft protection, then either check the box for the $45 Alternative Cash Payment or complete the ordinary loss, extraordinary loss and lost time sections with your documentation attached. To file on paper, download the Claim Form, complete and sign it, attach supporting documentation for any documented tier, and mail it so that it is postmarked no later than December 2, 2026. Only one Claim Form per person is accepted, online or paper.
Select a payment method on the form as well — PayPal, Venmo, Zelle, a virtual prepaid card, or a physical check mailed to the address you give. Claim the monitoring on the same form; nothing arrives automatically.
OpenClassActions is not the settlement administrator and cannot look up your LoginID, confirm whether Inotiv's records list you, or tell you what your payment will be. Those answers come from the official settlement website.
What Happens Next?
The Court will hold the final approval hearing on December 3, 2026 at 11:45 a.m. Eastern Time by videoconference. It will decide whether to approve the settlement, how Class Counsel should be paid, whether to award the service awards, and will consider any objections. Attendance is optional — the Notice states that a timely filed objection is considered whether or not the objector appears. The Notice also warns that the date and time may change without further notice, so the settlement website is the place to confirm it.A hearing being held is not the same as approval being granted. If the Court does approve the settlement, the Notice states that payments will be distributed after final approval and after any appeals are resolved, and that it is not known whether appeals will be filed or how long they would take. Under the Settlement Agreement, the administrator mails payments within thirty days of the settlement becoming effective or within thirty days of a claim being approved, whichever is later. No payment date had been announced as of September 17, 2026.
Sources and Verification
- Court-approved Notice of Proposed Class Action Settlement in Doyal v. Inotiv Inc., Cause No. 49D01-2604-CE-020713 (Marion Super. Ct., Ind.) — embedded below.
- Settlement Agreement and Release filed May 27, 2026, including the release in Section VIII, the benefit terms in Section III and the termination threshold in Section VII.
- Claim Form and Release, and the official settlement website, including its FAQ, important dates and important documents pages.
- Inotiv's own notice regarding the cybersecurity incident, and contemporaneous reporting on the company's regulatory breach notifications for the scale of the incident.
- Case file for Cause No. 49D01-2604-CE-020713, available from the office of the Clerk of the Court in Marion County, Indiana.
The Court appointed Lynn A. Toops and Amina A. Thomas of CohenMalad, LLP as Class Counsel, and Simpluris is administering the settlement. Class members are not charged for that representation.
Questions
Can I claim the identity theft protection and a cash payment?
Yes. The Notice states that all Class Members are eligible to enroll in two years of CyEx Medical Shield Complete and to claim one or more of the cash payment options. The monitoring sits on top of whatever cash you claim. The choice is only among the cash options: the $45 Alternative Cash Payment is taken instead of the ordinary loss, extraordinary loss and lost time benefits, not in addition to them.
Should I take the $45 or file for documented losses?
The $45 Alternative Cash Payment requires no proof or explanation. The documented route can reach $4,580 in total but is three separate showings: up to $500 in ordinary out-of-pocket expenses, up to $4,000 in extraordinary losses from identity theft or fraud, and up to $80 for four hours of lost time at $20 an hour. The losses have to have occurred between August 5, 2025 and September 10, 2026, they cannot already have been reimbursed by someone else, and the expense and loss tiers need third-party documentation. If your documented expenses come to less than $45, or you have no receipts, the flat payment is the practical choice.
How are settlement payments sent?
The Claim Form asks you to select one payment method: PayPal, Venmo, Zelle, a virtual prepaid card, or a physical check mailed to the address on your claim. Digital options ask for the email address or phone number tied to that account if it differs from the one you entered. Choosing a method is part of filing, so it is worth deciding before you start.
I lost the notice with my LoginID and PIN. Can I still file?
The online claim form cannot be started without the LoginID and PIN printed on the notice mailed to you. The settlement website states that a class member who cannot locate them can email the Settlement Administrator with their full name and mailing address to have them resent, and that a printable Claim Form can be downloaded and mailed instead, with the Login ID field marked if known. Contact details are on the official settlement website.
Do attorneys' fees come out of the class members' payments?
No. The Notice states that Class Counsel will ask the Court to approve $275,000 in attorneys' fees and litigation costs, and service awards of $2,000 for each class representative, and that Inotiv pays both. There is no common fund for those amounts to be carved out of, so they do not reduce what class members receive.
What happens to a settlement check that is never cashed?
Under the Settlement Agreement, a payment is void 181 days after it is issued, and a class member who has not cashed it within 180 days is treated as having withdrawn the claim. Undeliverable payments get a second attempt after the administrator tries to find a current address. Money left over from returned or uncashed checks goes to a court-approved cy pres recipient rather than back to Inotiv.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
No aggregate fund
Benefits are paid per valid claim · notice costs, fees and service awards paid separately by Inotiv
Case Title
Doyal v. Inotiv Inc.
Case Number
49D01-2604-CE-020713
Court
Superior Court for Marion County, Indiana
Final Approval Hearing
December 3, 2026 at 11:45 AM ET
Held by videoconference — the Notice warns the date and time may change without further notice
Administrator
Simpluris
Official Website
Inotiv Data Breach Settlement.com
