Published
August 25, 2026
This settlement resolves claims over a July 2025 cyberattack on Susan B. Allen Memorial Hospital in El Dorado, Kansas, in which files containing patient names, dates of birth, insurance, billing and treatment information were accessed. If the hospital mailed you a notice, you can claim up to $100 in cash and two years of medical identity monitoring — but the cash options share a single $100 cap, and you need the LoginID from that notice to file online.
Current Status
Claims are open. Claim forms must be submitted online or by email, or postmarked if mailed, by November 12, 2026. The deadline to exclude yourself or object is earlier — October 13, 2026 — and that is the date that decides whether you are bound by the release. The court has scheduled a final approval hearing for December 7, 2026 at 9:00 a.m. Central Time, to be held by Zoom, and the settlement has not yet been approved. No payment date has been announced: the notice states that payments will be distributed only if the court grants final approval and after any appeals are resolved, and that it is not known whether appeals will be filed.
Status
Claims Open
Final approval hearing December 7, 2026 by Zoom
Claim Deadline
November 12, 2026
Online, by email, or postmarked · opt-out and objection deadline is October 13, 2026
Estimated Payout
Up to $100 cash
A single $100 aggregate cap covers both cash options combined · plus two years of medical identity monitoring
Proof Required
Yes
LoginID and PIN from your mailed notice to file online · receipts needed only for the documented-losses option
What Changed Recently?
The settlement is newly open to claims. Susan B. Allen Memorial Hospital has agreed to resolve In Re: Susan B. Allen Data Security Litigation, Case No. BU-2025-CV-000185, in the District Court of Butler County, Kansas, and the court has authorized notice to the class. Simpluris is administering the settlement.The hospital denies that it did anything wrong, and the court has not decided who is right. Both sides agreed to settle to avoid the costs, risks, disruption and uncertainty of continued litigation. No finding of liability has been made against the hospital.
What the Case Is About
The lawsuit concerns a targeted cyberattack on the hospital's computer systems in July 2025. According to the notice, certain files containing private information were accessed during the incident, and those files may have contained names, dates of birth, health insurance information, billing information and medical treatment information.That combination is what makes this a medical-identity exposure rather than an ordinary payment-card breach, and it is reflected in the monitoring product the settlement provides, which watches for misuse of insurance IDs and medical record numbers rather than just credit activity.
Who Qualifies?
The court defined the class simply: all persons who were sent written notification of the data incident.That is an unusually clean definition — eligibility turns on whether the hospital sent you a notice, not on when you were a patient or what was exposed in your particular file. The notice also says the hospital's records indicate that recipients are class members entitled to benefits, and that some people may have received an earlier notice directly from the hospital before this court-authorized one.
Only two groups are excluded: the judge in the case along with the judge's family and staff, and anyone who perpetrated the data incident.
How Much Can You Get?
Every class member can claim the monitoring, and separately may claim one or both cash options — subject to a cap that is easy to miss.- Two years of CyEx Medical Shield Complete. Available to every class member. It carries $1 million of medical identity theft insurance and monitors for healthcare insurance ID exposure, Medical Record Number exposure, and unauthorized Health Savings Account spending, with access to a fraud resolution agent if something turns up.
- Reimbursement for out-of-pocket losses — up to $100. For documented losses incurred between July 14, 2025 and November 12, 2026, covering things like identity theft or fraud losses, fees for credit reports, credit monitoring or credit freezes, the cost of replacing IDs, and postage to contact banks by mail.
- Reimbursement for attested time — up to $100. Up to four hours at $25.00 per hour for time spent responding to the incident, with a brief description of how the time was spent. No receipts.
The detail worth reading twice: an aggregate cap of $100.00 applies to both cash options combined. Claiming four hours of attested time and $100 of documented losses does not produce $200 — the total cash any class member can receive is $100.00. The credit monitoring is separate and does not count against that cap, so the practical best outcome is $100 in cash plus the two-year monitoring enrollment.
One inconsistency worth flagging: the settlement website's claim page describes the out-of-pocket loss window as running from July 14, 2025 to "September 29," while the long-form notice and the FAQ both give the end date as November 12, 2026. The two official documents agree with each other, so November 12, 2026 is the date to work from, but anyone with losses near the boundary should confirm with the administrator through the official website before relying on it.
What Proof Is Required?
To file online you need the LoginID and PIN printed on the notice that was mailed to you. The portal is a login screen, so the credentials are not optional there. If you cannot find them, the settlement website explains how to request them from the administrator by supplying your full name and mailing address. A printable claim form can also be downloaded from the official website and returned by mail or email.Beyond that credential, what you need depends on which cash option you claim:
- Attested time: no documents. You describe the time you spent and attest to it.
- Out-of-pocket losses: proof such as bank statements or receipts showing what you spent or lost. Self-prepared notes may support other proof but are not sufficient on their own, and your documentation should connect the expense to the data incident.
Expenses already reimbursed by a third party cannot be claimed.
What Are the Deadlines?
Three dates, and the earliest is the one most people overlook:- October 13, 2026 — exclude yourself or object. A Request for Exclusion must be postmarked, submitted or emailed by this date and must carry the case name and number, your contact details, the words "Request for Exclusion" at the top, the declaration quoted in the notice, and your personal signature. Objections must be filed with the Clerk of Court by the same date, with a copy to the administrator, and must state the specific reasons for the objection.
- November 12, 2026 — submit a claim. Online or by email by that date, or postmarked if mailed.
- December 7, 2026 at 9:00 a.m. Central — final approval hearing, by Zoom. Class members do not need to attend.
You may only exclude yourself, not anyone else, and you cannot both opt out and object — opting out ends your standing to object because the settlement no longer affects you.
How Do You File?
Claims go through the official settlement website, SBAMH Data Settlement.com, which is run by Simpluris. Filing online with your LoginID and PIN is the fastest route; the same site hosts a downloadable claim form for anyone who prefers to mail or email one in, along with the long-form notice and the settlement agreement.Filing is free, and class members are not charged for Class Counsel's services.
Who Pays the Fees
This settlement has no common fund, which changes the arithmetic in the class member's favor. Class Counsel — the court appointed Milberg PLLC and McShane & Brady LLC — will ask the court to approve $150,000.00 in attorneys' fees and litigation costs, and service awards of $1,500.00 for each class representative. The notice states that the hospital pays both amounts.Because those payments come from the defendant rather than out of a pot that would otherwise be divided among claimants, they do not reduce anyone's $100. On a fund-based settlement the opposite is true, which is why the distinction is worth stating rather than assuming.
What You Give Up
If you stay in the settlement class, you cannot be part of any other lawsuit against the hospital about the issues this settlement covers. The Releases section of the settlement agreement, Section IV, sets out the claims being given up, and the agreement is posted on the official website.Doing nothing does not avoid that. A class member who never files a claim still gives up those rights and receives no benefit — the only way to preserve the right to sue individually is to opt out by October 13, 2026.
What Happens Next?
At the December 7, 2026 hearing the court will decide whether to approve the settlement, how Class Counsel should be paid, whether to award the service awards, and will consider any objections. The notice warns that the hearing's date and time may change without further notice and that the settlement website will carry any update, along with the Zoom joining instructions when they are posted.If approval is granted, payments follow only after any appeals are resolved. The notice is candid that it is not known whether appeals will be filed or how long they would take, so no payment date exists yet.
Class Action Summary
| Case Title | In Re: Susan B. Allen Data Security Litigation |
|---|---|
| Case Number | BU-2025-CV-000185 |
| Court | District Court of Butler County, Kansas |
| Defendant | Susan B. Allen Memorial Hospital |
| Incident | July 2025 targeted cyberattack |
| Class | All persons sent written notification of the data incident |
| Cash Benefit | Up to $100 total — $100 aggregate cap across both options |
| Monitoring | 2 years CyEx Medical Shield Complete · $1M medical identity theft insurance |
| Claim Deadline | November 12, 2026 |
| Opt-Out / Object By | October 13, 2026 |
| Final Approval Hearing | December 7, 2026 at 9:00 AM Central (Zoom) |
| Administrator | Simpluris |
| Official Website | SBAMH Data Settlement.com |
Sources and Verification
• Official settlement website — SBAMH Data Settlement.com• Court-authorized Notice of Proposed Class Action Settlement, and the settlement website's FAQ and claim pages
• In Re: Susan B. Allen Data Security Litigation, No. BU-2025-CV-000185 (Dist. Ct. Butler Cnty., Kan.) — Settlement Agreement, posted on the official website
Questions
Can I claim both the out-of-pocket losses and the attested time?
You can claim both, but not both in full. An aggregate cap of $100.00 applies across the two cash options combined, so the most any class member can receive in cash is $100.00 — not $100.00 for losses plus another $100.00 for time. The credit monitoring is separate and does not count against that cap.
Do I need documents to claim the four hours of attested time?
No receipts are needed for the time claim. You attest to up to four hours at $25.00 per hour and briefly describe how you spent the time responding to the incident, such as changing passwords, checking accounts for suspicious activity, or researching the breach. Documentation is required only for the separate out-of-pocket losses option.
What if I cannot find the LoginID and PIN from my notice?
The online claim portal requires the LoginID and PIN printed on the notice mailed to you. If you no longer have it, the settlement website explains how to request the credentials from the Settlement Administrator by providing your full name and mailing address. A downloadable paper claim form is also available on the official website and can be mailed or emailed in.
Is there a settlement fund, and does the money come out of it?
The notice does not state a common settlement fund. Susan B. Allen Memorial Hospital pays the class benefits, and it separately pays the attorneys' fees and costs of $150,000.00 and the service awards of $1,500.00 per class representative if the court approves them. Because those amounts are paid by the hospital rather than deducted from a fund, they do not reduce what a class member receives.
Why is the opt-out deadline a month before the claim deadline?
They are separate decisions on separate schedules. Claims are due November 12, 2026, but the deadline to exclude yourself or object is October 13, 2026. That earlier date is the one that matters most, because missing it means you are bound by the release whether or not you ever file a claim.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
No common fund
Benefits, fees and service awards paid by the hospital
Case Title
In Re: Susan B. Allen Data Security Litigation
Case Number
BU-2025-CV-000185
Court
District Court of Butler County, Kansas
Final Approval Hearing
December 7, 2026 at 9:00 AM CT
By Zoom · date and time may change
Administrator
Simpluris
Official Website
SBAMH Data Settlement.com
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
