Published
September 8, 2026
People whose private information OneTouchPoint Corp.'s investigation determined was impacted in its April 2022 data incident may qualify to claim a flat $75 with no documents, or instead up to $5,000 in documented losses, plus two years of credit monitoring, from the OneTouchPoint data breach class action settlement. Claims close November 16, 2026, but the deadline to opt out or object falls a month earlier, on October 16, 2026.
Current Status
Claims are open. The deadline to submit a Claim Form is November 16, 2026, online or by mail with a November 16, 2026 postmark. The notice gives a date with no cutoff time or timezone, so only the date is published here. The final approval hearing is set for November 18, 2026 at 10:00 a.m. at the Waukesha County Circuit Court in Waukesha, Wisconsin. No final approval order has been entered and no payment date has been announced.Two dates matter here, not one, and the earlier one is easier to miss. October 16, 2026 is the deadline to exclude yourself or to object — a full month before the claim window shuts. Opting out is the only way to keep the right to sue OneTouchPoint separately over this incident, and that door closes first.
Status
Claims Open
Claim Deadline
November 16, 2026
Online or mailed postmark · opt out or object a month earlier, by October 16, 2026
Estimated Payout
$75 flat, or up to $5,000
$75 with no documents, or instead documented losses capped at $5,000 in total, including $100 for lost time · two years of credit monitoring on top of either
Proof Required
Yes — ID to file online
Claim Number and PIN from the postcard required online · a paper form can be mailed without one · third-party documents needed for loss claims, but not for the $75
What Changed Recently?
The claim window opened this fall, four years after the incident and after an unusually long road through two court systems. OneTouchPoint Corp. is a mailing and printing services vendor for companies in the healthcare sector, and it holds what the Settlement Agreement calls Private Information: names, addresses, Social Security numbers, member IDs, dates of birth, health insurance information, and other medical information provided during health assessments.According to the Settlement Agreement, the class representatives allege they began receiving notice from OneTouchPoint on or about July 27, 2022 that the company had been the target of a cybersecurity incident in April 2022 that potentially compromised their information. Fourteen separate lawsuits followed. The federal court in the Eastern District of Wisconsin consolidated them in September 2022, a consolidated complaint alleging OTP failed to adequately safeguard the information followed in November 2022, and three separate mediation sessions across 2023 all ended without a deal. OTP's motion to dismiss was granted in part and denied in part in September 2024, the company answered, and discovery began.
The case then moved. The Settlement Agreement records that after evaluating the size and makeup of the settlement classes, the parties concluded federal court "may not be an appropriate jurisdiction" to approve the settlement, so the plaintiffs dismissed the federal action and re-filed in Wisconsin state court. The case is now Dusterhoft v. OneTouchPoint Corp., Case No. 2025CV002181, in the Circuit Court of Waukesha County.
OneTouchPoint denies each and all of the claims and denies all charges of wrongdoing or liability, and the court has not decided who is right. The company agreed to settle to avoid the costs and risks of continuing the litigation.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
Who Qualifies?
This settlement has two classes, and only one of them is paid. That distinction decides whether there is anything to file.The Monetary Settlement Class is everyone in the United States and its territories whose Private Information was determined by OneTouchPoint's own investigation to have been impacted in the April 2022 data incident, plus those named as plaintiffs in the litigation. These are the people who can claim money and credit monitoring.
The Injunctive Relief Settlement Class is everyone OTP sent notice to about potential impact in the same incident but for whom the impact could not be confirmed. This group receives the security improvements described below and nothing else. They cannot claim a payment, and the Settlement Agreement provides that they cannot opt out — though they may object.
OTP's records decide which class a person falls into, so in practice the question is what arrived in the mail. The postcard sent to the Monetary Settlement Class carries a Claim Number and PIN; a notice without one is a signal to check with the administrator through the settlement website rather than to assume either way.
Excluded from both classes are OTP's officers and directors, any entity in which OTP has a controlling interest, and OTP's affiliates, legal representatives, attorneys, successors, heirs and assigns, along with the judiciary assigned to the case, their families and their staff.
One wrinkle worth knowing about before it causes a wrong conclusion: the Claim Form's General Instructions define the Data Incident as one that compromised "current and former OTP employees' Private Information," while the Notice, the class definitions and the Settlement Agreement all describe an incident affecting both OTP employees and the patients or subscribers of OTP's healthcare clients. The broader description is the one that appears in the operative class definition. A patient or plan member who reads only the Claim Form's instructions could wrongly conclude the settlement is for employees.
How Much Can You Get?
A Monetary Settlement Class Member picks one of two routes, and can add credit monitoring to either.The flat payment. In place of claiming anything else, a valid and timely claim can elect a one-time $75 Alternative Cash Payment with no need to document losses or attest to time spent. For most people this is the whole decision: no receipts, no bank statements, no records to dig up.
The documented route. Instead of the $75, a claim can seek reimbursement in three categories:
- Ordinary losses, up to $500. Unreimbursed out-of-pocket expenses traceable to the incident — bank fees, long-distance phone charges, cell phone charges billed by the minute, data charges billed by usage, postage, or gasoline for local travel — plus fees for credit reports, credit monitoring or identity theft insurance bought between April 28, 2022 and the close of the claims period.
- Extraordinary losses, up to $5,000. Proven monetary losses and related professional fees, such as attorneys' fees, accountants' fees and credit repair services. The loss must be actual, documented and unreimbursed; more likely than not caused by the incident; incurred between April 28, 2022 and November 16, 2026; not already covered by another category; and you must have made reasonable efforts to avoid it or seek reimbursement elsewhere, including exhausting any credit-monitoring or identity-theft insurance you had.
- Lost time, $25 an hour for up to four hours. A maximum of $100, on an attestation of time spent responding to the incident with a self-written description of how it was spent. No documentation is needed for this category.
The three documented categories are capped in the aggregate: no class member electing them may receive more than $5,000 in total, not counting credit monitoring.
Credit monitoring, on top of either choice. A valid claim may also elect a two-year membership of one-bureau credit monitoring with at least $1 million in fraud protection. The Settlement Agreement provides that OTP pays for this separately from the monetary relief, so electing it does not reduce anyone's cash.
There is no common fund, and fees do not come out of your payment. This is a claims-made settlement. The Settlement Agreement provides that OneTouchPoint pays the court-approved attorneys' fees and litigation costs — capped at $1,500,000, and paid to class counsel in three quarterly installments — separate and apart from the benefits to class members. The same is true of the administration costs, the credit monitoring, and the $1,000 service award sought for each class representative. That structure is worth knowing because on a common-fund settlement every one of those line items is subtracted before class members are paid; here they are not.
Nothing is paid for emotional distress, bodily injury, or punitive damages — the Settlement Agreement rules those out expressly.
What Proof or Notice ID Is Required?
It depends on which route you take, and the answer is different for the identifier than for the documents.The identifier. Filing online requires the Claim Number and PIN printed on the postcard notice. The Settlement Agreement is explicit that as proof of class membership, anyone filing an electronic claim must submit the unique identifier provided by the Claims Administrator. Under OCA's standard, that makes this a proof-required settlement, because a person who never received the postcard or has since lost it cannot simply log in and file.
There are two documented ways around it, and both are in the agreement. A claimant who loses or never receives a unique identifier can contact the administrator and, once their status as a class member is validated, have it issued or reissued. Alternatively, a claimant without one may submit a paper Claim Form. Either route starts at the settlement website's contact page.
The documents. The $75 Alternative Cash Payment needs none — only a sworn affirmation on the form that you are a US resident, were notified of the data incident by OTP, and were notified that you qualify as a Monetary Settlement Class Member. Lost time needs no documentation either, just the attestation and a description.
Ordinary and extraordinary losses are the opposite. Both require reasonable third-party documentation, and the Settlement Agreement states plainly that self-prepared documents — a handwritten receipt is its example — are by themselves insufficient. Self-prepared material can add clarity to other documentation, but cannot carry a claim on its own.
Every claim is reviewed for completeness, plausibility and reasonable traceability to the incident. If a claim arrives incomplete or unsigned, the administrator asks for more information and gives 21 days to cure before rejecting it. A claim rejected in whole or in part for reasons other than incompleteness can be sent to a neutral claims referee, whose decision is final and not appealable.
What Is the Deadline?
Two different dates, set by two different clocks. The Settlement Agreement gives class members 90 days from the mailing of notice to file a claim, and 60 days to exclude themselves or object.Claims: November 16, 2026. Online submissions must be completed by that date; mailed Claim Forms, with any supporting documentation, must be postmarked no later than that date.
Exclusions and objections: October 16, 2026. A request for exclusion must be in writing, signed individually, and state the name, address and phone number of the person seeking exclusion, along with a clear statement of intent to be excluded. Mass or class opt-outs are not permitted, and a class member who has already submitted a valid Claim Form is not eligible to opt out afterward.
An objection must be mailed to class counsel and to OTP's counsel by the same October 16 date, and must include the case title, the objector's name, address and telephone number, all legal and factual bases for the objection, and copies of any documents the objector wants the court to consider. Anyone wishing to speak at the hearing must say so and identify any documents or witnesses. Failing to follow those requirements waives the right to object.
Objecting and excluding are opposites, not a pair: you can object only if you stay in, and a class member who objects may still file a claim.
How Do You Take Action?
File online at the official settlement website, OTP Data Incident, using the Claim Number and PIN from your postcard. The Claim Form can also be downloaded from the site and returned to the administrator by mail or as an electronic image by email, and the administrator can send a paper copy on request through the site's contact page.Choose an electronic payment method if you can. The Claim Form offers PayPal, Venmo, Zelle, a virtual prepaid card, or a physical check. The reason to prefer the first four is in the Settlement Agreement: every settlement check is void 90 days after issuance and carries that warning on its face, cashing it is a condition of the right to the benefit, and money tied to uncashed or canceled checks goes back to OneTouchPoint — not to other class members, and not to a charity. A check returned as undeliverable is re-mailed once if a forwarding or updated address can be found; if it comes back again, it is canceled and OTP has no further obligation to pay that person.
Staying in the class means giving up a great deal. The release covers all past, present and future claims arising out of or relating to the data incident, running from negligence and breach of contract through the FTC Act, the California Unfair Competition Law, the California Consumer Privacy Act, state customer-records and breach-notification statutes, invasion of privacy, fraud and unjust enrichment, and it expressly waives the protection of California Civil Code section 1542 and equivalent laws so that unknown claims are released too. It extends past OTP to its predecessors, successors, parents, subsidiaries, affiliates, officers, employees, insurers, attorneys and vendors — including, notably, any customer on whose behalf OTP provided notice of the incident, which reaches the healthcare organizations whose patient data OTP was handling.
Injunctive Relief Class Members release less: only claims for injunctive and declaratory relief arising out of the incident, keeping the monetary claims that the other class is giving up.
Doing nothing is the worst option available. A Monetary Settlement Class Member who ignores the notice is still bound by that release, still gives up the right to sue, and receives nothing in exchange.
What Happens Next?
The next milestone is the final approval hearing on November 18, 2026 at 10:00 a.m. at the Waukesha County Circuit Court, 515 W Moreland Blvd in Waukesha, Wisconsin. The court will consider whether to approve the settlement, how much to award class counsel in fees and costs, and whether to approve the $1,000 service award sought for each class representative, along with any objections.Note that the hearing falls two days after the claim deadline — an unusual ordering, and a reason not to wait and see how the hearing goes before filing. The notice cautions that the hearing date and time may change without further notice, and directs class members to check the settlement website for updates.
Attending is optional. Class counsel will answer the court's questions, a timely written objection is considered whether or not the objector appears, and a class member may attend or send their own lawyer at their own expense.
If the court grants final approval, the settlement becomes effective 35 days after judgment if no appeal is filed, or 14 days after all appellate proceedings conclude if one is. OTP then pays the administrator within 30 days of the later of the effective date or the administrator's confirmation of a claimant's entitlement, and payments go out as expeditiously as possible after that. No payment date has been announced.
Separately from the money, OTP has agreed to take steps to remediate the incident and enhance security in the relevant systems for at least five years, at a cost the Settlement Agreement values at approximately $2 million and requires OTP to certify to class counsel. All settlement class members, monetary and injunctive alike, get the benefit of that.
Sources and Verification
This page is based on the official settlement website, the court-authorized Notice of Proposed Class Action Settlement, the OTP Data Incident Claim Form, and the Settlement Agreement and Release in Dusterhoft v. OneTouchPoint Corp., Case No. 2025CV002181, Circuit Court of Waukesha County, Wisconsin.- Official settlement website — OTP Data Incident (claim portal, deadlines, case documents)
- Notice of Proposed Class Action Settlement (embedded below)
- OTP Data Incident Claim Form (embedded below)
- Settlement Agreement and Release, Dusterhoft v. OneTouchPoint Corp., Case No. 2025CV002181 (embedded below)
Healthcare vendors keep producing these cases, because one breach at a service provider reaches every client it serves. For context on how these settlements work, read our explainer on the data breach class action, or browse the current roundup of open data breach settlements and the wider list of open class action settlements.
Questions
Who is eligible for the OneTouchPoint data breach settlement?
There are two settlement classes and only one of them is paid. The Monetary Settlement Class covers people in the United States and its territories whose private information OneTouchPoint's own investigation determined was impacted in the April 2022 data incident, plus those named as plaintiffs in the litigation. The Injunctive Relief Settlement Class covers people OTP sent notice to but whose impact could not be confirmed; they receive the security improvements only and no money. OTP's records decide which class a person is in, so the practical test is what the notice said.
How much does the OneTouchPoint settlement pay?
A Monetary Settlement Class Member can take a flat $75 Alternative Cash Payment with no documents at all, or instead claim documented losses: up to $500 for ordinary out-of-pocket expenses, up to $5,000 for extraordinary losses such as proven monetary losses and professional fees, and $25 an hour for up to four hours of time spent, capped at $100. The documented categories together cannot pay more than $5,000 to any one person. Two years of one-bureau credit monitoring with at least $1 million in fraud protection can be claimed on top of either choice.
Do I need a Claim Number and PIN to file a OneTouchPoint claim?
To file online, yes. The claim portal asks for the Claim Number and PIN printed on the postcard notice, and the Settlement Agreement states that anyone filing electronically must submit the unique identifier issued by the Claims Administrator. There are two ways around it: a person who lost or never received the identifier can ask the administrator to issue or reissue it after their class membership is validated, and a paper Claim Form can be submitted without one.
Why do the claim deadline and the opt-out deadline differ by a month?
The Settlement Agreement sets them by different clocks: claims are due 90 days after notice is sent, while exclusions and objections are due 60 days after. That puts the claim deadline at November 16, 2026 and the opt-out and objection deadline at October 16, 2026. The earlier date is the one that is easy to miss, because opting out is the only way to keep the right to sue OneTouchPoint separately over this incident, and it closes a month before the claim window does.
Do attorneys' fees come out of the OneTouchPoint settlement payments?
No. This is a claims-made settlement with no common fund, and the Settlement Agreement provides that OneTouchPoint pays the court-approved attorneys' fees and litigation costs, capped at $1,500,000, separate and apart from the benefits provided to class members. The same is true of the settlement administration costs, the credit monitoring, the service awards to the class representatives, and the security improvements. Class payments are therefore not reduced by any of those amounts.
How long do I have to cash a OneTouchPoint settlement check?
Ninety days. The Settlement Agreement states that all settlement checks are void 90 days after issuance and carry that language on their face, and that cashing the check is a condition of the right to receive the benefit. Money tied to uncashed or canceled checks goes back to OneTouchPoint rather than to other class members or to a charity, which is different from settlements that redistribute or donate leftover funds. Electronic payment by PayPal, Venmo, Zelle or virtual prepaid card avoids the problem entirely.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
Claims-made — no common fund
Benefits, credit monitoring, fees and administration all paid by OTP separately
Case Title
Dusterhoft v. OneTouchPoint Corp.
Case Number
2025CV002181
Court
Circuit Court of Waukesha County, Wisconsin
Final Approval Hearing
November 18, 2026 at 10:00 AM
Waukesha, WI · date and time may change without further notice
Class Counsel
Lynch Carpenter, LLP · Milberg, PLLC
Administrator
Analytics Consulting LLC
Official Website
OTP Data Incident
