People who were sent notice of the April 2022 cyberattack on Yuma Regional Medical Center may qualify to claim a pro rata cash payment and up to $4,000 in documented losses from the $1,985,000 Yuma Regional Medical Center data breach class action settlement. Claims are open through February 1, 2027, and the final approval hearing is set for March 1, 2027.
Current Status
Claims are open. The deadline is February 1, 2027: online claims must be submitted by 11:59 p.m. Mountain Time, and mailed claims must be postmarked by that date. The court granted preliminary approval on September 30, 2026, and the final approval hearing is set for March 1, 2027. No final approval order has been entered, and payments go out only after final approval and any appeals. As of November 1, 2026, the online claim form on the official settlement website did not load; the mail-in claim form is posted there.Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Changed Recently?
Yuma Regional Medical Center agreed to a $1,985,000 settlement of the consolidated class action over an April 2022 cyberattack on its systems, Clarke v. Yuma Regional Medical Center, in the U.S. District Court for the District of Arizona. The case was first filed as Johnson v. Yuma Regional Medical Center. Judge Susan M. Brnovich granted preliminary approval on September 30, 2026, and the notice program and claim period followed.The lawsuit alleges that cybercriminals had access to the hospital's files and systems from April 21 to April 25, 2022, and that names, Social Security numbers, health insurance information and medical information of about 720,000 current and former patients were affected. Plaintiffs allege the hospital failed to adequately protect that information. Yuma Regional Medical Center denies the allegations and any wrongdoing, the court has not decided who is right, and the settlement is not an admission of liability. Separately from the fund, the hospital says it has committed more than $750,000 to data security improvements.
Who Qualifies?
The settlement class is all living individuals who were sent notice of the data incident. Yuma Regional Medical Center mailed those notification letters in 2022, to about 720,217 people, according to the settlement agreement. Excluded are the hospital, people who opt out on time, the judges assigned to the case and their staff and families, and anyone convicted of, or pleading no contest to, a crime connected to the incident.How Much Can You Get?
Class members can claim one or both cash payments:- Cash Payment A, documented losses: reimbursement of up to $4,000 for out-of-pocket losses caused by the incident between April 21, 2022 and February 1, 2027, such as identity theft or fraud losses, credit report and credit monitoring fees, credit freeze fees, the cost of replacing IDs and postage. Expenses already reimbursed by someone else do not count.
- Cash Payment B, pro rata payment: an equal share of the money left in the fund after administration costs, attorneys' fees and costs, service awards, medical data monitoring and documented-loss claims. No estimate has been published; the amount depends on how many people claim it.
What Proof or Notice ID Is Required?
The pro rata payment needs no proof or explanation. Documented losses need third-party proof, such as bank statements or receipts; notes a claimant writes can support that proof but are not enough on their own. Every claim is signed under penalty of perjury, and the administrator can ask for more information.The mailed notices carry a Login ID and PIN, and the mail-in claim form asks for the Claim ID “if known.” As of November 1, 2026, the online claim form on the official settlement website did not load, so OCA could not confirm whether the online version requires the notice ID. The class itself is limited to people the hospital sent notice of the incident.
What Is the Deadline?
Claims are due February 1, 2027. Under the settlement agreement, online claims must be submitted by 11:59 p.m. Mountain Time that day, and mailed claims must be postmarked by February 1, 2027. The deadline to opt out of or object to the settlement is January 4, 2027.How Do You Take Action?
Claims are filed through the official Yuma settlement website, online or by downloading the mail-in claim form and mailing it, with any loss documentation, to the settlement administrator. The claim form also offers payment by PayPal, Venmo, Zelle or paper check.What Happens Next?
The final approval hearing is set for March 1, 2027 at 10:00 a.m. Mountain Time in the federal courthouse in Phoenix, or by video or teleconference. If the court approves the settlement, payments go out within 60 days after the settlement becomes final or after a claim is approved, whichever is later. Checks must be cashed within 90 days. No payment date has been announced.Sources and Verification
This page is based on the official settlement website, the court-approved long-form notice and claim form, the settlement agreement filed September 24, 2026 (ECF No. 123-1) and the order granting preliminary approval signed September 30, 2026 (ECF No. 125) in Clarke v. Yuma Regional Medical Center, No. 2:22-cv-01061-PHX-SMB (D. Ariz.). The court documents are posted on the official settlement website. It is not legal advice.Questions
Can I file a Yuma Regional Medical Center claim without the notice?
The class is limited to people Yuma Regional Medical Center sent notice of the April 2022 data incident, so a claimant has to be one of them. The mail-in claim form asks for the Claim ID only “if known.” As of November 1, 2026, the online claim form on the official settlement website did not load, so whether the online version requires the notice’s Login ID and PIN could not be confirmed.
Can I claim both the pro rata payment and documented losses?
Yes. Cash Payment A reimburses up to $4,000 in documented out-of-pocket losses, and Cash Payment B is a pro rata cash payment. A class member may claim either one or both on the same claim form.
How much will the Yuma pro rata payment be?
No amount has been announced. The pro rata payment is whatever remains of the $1,985,000 fund after administration costs, court-approved attorneys’ fees and costs (counsel will request up to $825,000 in fees), service awards, medical data monitoring and documented-loss claims, divided equally among everyone who claims it. It depends on how many valid claims are filed.
Do I have to sign up for the medical data monitoring?
The settlement says every class member automatically receives one year of medical data monitoring, which includes $1,000,000 in insurance coverage with no deductible. It is not one of the cash options on the claim form. Enrollment details come from the settlement administrator.
Is the $750,000 in security upgrades part of the settlement fund?
No. Yuma Regional Medical Center says it has committed more than $750,000 to data security improvements since the incident, and the settlement agreement says those costs are paid separately from the $1,985,000 fund, so they do not reduce what class members receive.
