Published
June 11, 2026
If Datavant (Ciox Health) mailed you a notice about its May 2024 breach, you can claim up to $5,000 or a no-proof cash payment before the August 18, 2026 deadline.
What Is This Settlement About?
A proposed class action settlement has been reached with Ciox Health, LLC d/b/a Datavant Group in Jackson v. Ciox Health, LLC d/b/a Datavant Group, Case No. CV2025-062690, pending in the Superior Court of Arizona in Maricopa County. Datavant is a health data platform company that handles medical records and health information exchange for healthcare providers nationwide. The lawsuit alleges negligence, unjust enrichment, and violations of the Illinois Consumer Fraud and Deceptive Business Practices Act.The case stems from a May 2024 data security incident. According to the settlement notice, a phishing email attack allegedly allowed unauthorized access to a company email account between May 8 and May 9, 2024, potentially exposing personal information including names, dates of birth, addresses, contact information, Social Security numbers, financial account information, driver's license and passport numbers, and health-related data. The settlement class consists of approximately 58,309 individuals whose information may have been compromised; the broader incident was reported to the U.S. Department of Health and Human Services Office for Civil Rights as affecting approximately 320,702 people.
Datavant denies any wrongdoing, and the court has not decided who is right. Both sides agreed to a $900,000 settlement to avoid the cost and uncertainty of continued litigation. If you were notified that your information may have been involved, you can file a claim before the August 18, 2026 deadline.
Status
Claims Closed
Claim Deadline
August 18, 2026
Estimated Payout
Up to $5,000 or pro rata cash
Documented losses up to $5,000, or an alternative pro rata cash payment · plus one year of identity theft and fraud monitoring · $900,000 fund
Proof Required
Yes
Class Member ID from your breach notice required to file · no documentation for the pro rata cash payment · receipts or statements required for documented losses
Who Qualifies?
You may qualify if Ciox Health, LLC d/b/a Datavant Group sent you notice that your personal information may have been exposed in the May 2024 data security incident, or if your personal information may otherwise have been affected by it. The settlement class consists of approximately 58,309 people. Excluded from the class are the judges presiding over the case and their immediate families and staff, Datavant and its corporate affiliates, and anyone who timely opts out.The simplest way to check your eligibility is to confirm whether you received a data breach notification letter from Datavant, or to review the official settlement website at DatavantDataIncidentSettlement.com.
How Much Can You Get?
Eligible class members can choose one of two cash benefit paths, and either path can be combined with the monitoring benefit:• Cash Payment A — documented losses: reimbursement of up to $5,000 for documented out-of-pocket losses and expenses attributable to the data breach and time spent dealing with it. Eligible losses include long-distance telephone charges, cell phone minutes and internet usage charges, the cost of credit reports purchased between May 9, 2024 and the claims deadline, credit monitoring or fraud resolution services purchased primarily because of the breach (with a sworn statement), expenses from dealing with identity theft or fraud, and other documented losses fairly traceable to the incident. Claims must be supported by documentation; a deficient documented-loss claim that cannot be cured is converted to an alternative cash payment claim rather than denied outright.
• Cash Payment B — alternative cash payment: instead of documenting losses, you can elect a pro rata cash payment from the settlement fund, with no documentation of loss required. The exact amount depends on how many valid claims are filed, and choosing it makes you ineligible for a documented-loss payment.
• Identity monitoring: in addition to either cash payment, class members can claim a code to enroll in one year of expanded identity theft and fraud monitoring, which includes single-bureau credit monitoring, up to $1,000,000 in identity theft insurance, and access to a dedicated fraud resolution specialist. No documentation is needed for this benefit, and class members who accepted Datavant's original monitoring offer get an additional year.
Benefits are paid from the $900,000 fund after court-approved attorneys' fees and costs, a service award, and administration expenses are deducted, and cash payments may be adjusted based on the number of valid claims. Any money left over after all claimed payments goes to a court-approved cy pres recipient, not back to Datavant.
How to File a Claim
The fastest way to file is online through the official settlement website, run by settlement administrator Kroll Settlement Administration. You can also request and mail a paper claim form. To file, you will need the Class Member ID from your breach notice, along with any documentation supporting a documented-loss claim.If you lost or never received your notice — or need a paper claim form — use the contact page on the official settlement website to reach the administrator. Submit your claim at DatavantDataIncidentSettlement.com before the deadline.
Important Deadlines
The deadline to submit a claim is August 18, 2026 (online claims by 11:59 p.m. Mountain Time; mailed claim forms postmarked by that date). Class members who want to exclude themselves from, or object to, the settlement must do so by July 20, 2026. The court's final approval hearing is scheduled for September 4, 2026 at 11:00 a.m. Arizona time, held virtually; the date may change, so check the official settlement website for updates. Settlement benefits are distributed only if the court grants final approval and after any appeals are resolved.Beware of Scams
Legitimate settlement administrators never ask you to pay a fee to file a claim or to receive a payment. File only through the official settlement website and never share more information than the claim form requires.Healthcare-sector breaches have driven a wave of recent settlements. If you have received other breach notices, you may have additional open claims — see our roundup of active data breach settlements, including the South Texas Oncology and Hematology data breach settlement, another medical data breach with claims open this summer.
Frequently Asked Questions
Who qualifies for the Datavant data breach settlement?
You qualify if Ciox Health, LLC d/b/a Datavant Group notified you that your personal information may have been exposed in the May 2024 data security incident, or if your information may otherwise have been affected by it. The settlement class consists of approximately 58,309 people.How much can I get?
Up to $5,000 for documented losses and time spent dealing with the breach, or an alternative pro rata cash payment with no documentation required. In addition to either cash payment, class members can claim one year of identity theft and fraud monitoring with single-bureau credit monitoring, up to $1,000,000 in identity theft insurance, and access to a fraud resolution specialist.What is the claim deadline?
The deadline to submit a claim is August 18, 2026. The exclusion and objection deadline is July 20, 2026.Is proof required?
Yes — the claim form requires the Class Member ID from your breach notice, so the identifier itself functions as proof of class membership. The alternative pro rata cash payment does not require documentation of losses; documented-loss claims up to $5,000 require receipts, invoices, or statements. If you lost or never received your notice, use the contact page on the official settlement website to reach the administrator.What happened in the Datavant data breach?
A phishing email attack allegedly allowed unauthorized access to a Datavant Group company email account between May 8 and May 9, 2024, potentially exposing names, dates of birth, addresses, contact information, Social Security numbers, financial account information, driver's license and passport numbers, and health-related data. The settlement class covers approximately 58,309 people; the incident was reported to federal regulators as affecting about 320,702.
For more class actions keep scrolling below.
Official Settlement Notice
Sources
• Notice of Proposed Class Action Settlement, Jackson v. Ciox Health, LLC d/b/a Datavant Group, Case No. CV2025-062690 (Superior Court of Arizona in Maricopa County)• Official Settlement Website: Datavant Data Incident Settlement
• Settlement announcement (PR Newswire): Notice of Class Action Settlement
Settlement Amount
$900,000
Case
Jackson v. Ciox Health, LLC d/b/a Datavant Group
Case Number
CV2025-062690
Court
Superior Court of Arizona, Maricopa County
Claim Deadline
August 18, 2026
Opt-Out / Object
July 20, 2026
Final Approval Hearing
September 4, 2026
11:00 a.m. Arizona time · held virtually
Administrator
Kroll Settlement Administration
Category
Data Breach / Healthcare / Privacy
Official Website
Datavant Data Incident Settlement.com
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
