If you were notified of Hillcrest Convalescent Center's June 2024 data breach, you can enroll in two years of free credit monitoring and — if your Social Security number was affected — take a $50 cash payment with no proof, or claim up to $2,500 for documented losses.
What Is This Settlement About?
Hillcrest Convalescent Center, Inc. has agreed to a proposed settlement to resolve a class action over a data security incident. According to the notice, in June 2024 an unauthorized party carried out a cyberattack on Hillcrest's computer systems that may have resulted in access to and/or acquisition of certain private information. The information that may have been impacted includes names; addresses; financial account information; dates of birth; driver's license numbers; Social Security numbers; and other government-issued ID numbers; as well as medical treatment, health insurance, and provider information.The lawsuit is captioned In re Hillcrest Convalescent Center, Inc. Data Breach Litigation, Case No. 25CV002700-310, and is pending in the Superior Court of Durham County, North Carolina. Hillcrest denies that it did anything wrong and denies any liability, but it has agreed to settle to avoid the costs, risks, and uncertainties of continued litigation. The settlement is not yet final — the Court still has to approve it at a hearing scheduled for August 24, 2026.
Who Qualifies?
The Settlement Class is defined as all living individuals in the United States whose private information was implicated in the June 2024 data incident. Hillcrest's records indicate which individuals are class members, and you may have received a notice directly from Hillcrest.The class is divided into two subclasses. Group 1 Settlement Subclass Members are those whose Social Security number was among the private information potentially impacted in the incident. Group 2 Settlement Subclass Members are those whose Social Security number was not. Every class member belongs to one subclass or the other, not both — and the subclass you fall into determines which benefits you can choose.
Excluded from the class are Hillcrest and its officers, directors, and related companies; governmental entities; and the judge presiding over the case along with the judge's family and staff.
How Much Can You Get?
All Settlement Class Members may choose from the following benefits:- Credit Monitoring Services — all class members are eligible to enroll in two years of CyEx Identity Defense Complete. The service comes with $1 million in identity theft insurance and includes real-time credit-file monitoring, dark web scanning, comprehensive public records monitoring, and access to a fraud resolution agent if anything suspicious happens.
- Reimbursement for Documented Losses — all class members may file a claim for reimbursement of actual, documented out-of-pocket losses fairly traceable to the data incident, up to $2,500. The losses must have been incurred between June 27, 2024 and August 26, 2026. Covered costs include losses from identity theft or fraud; fees for credit reports, credit monitoring, or freezing and unfreezing your credit; the cost to replace IDs; and postage to contact banks by mail. You must send supporting proof, such as bank statements or receipts. Self-prepared notes can help explain other proof but are not enough on their own, and you cannot claim expenses already reimbursed by a third party.
- Alternative Cash Payment — $50 (Group 1 subclass only) — instead of any other available benefit, Group 1 Settlement Subclass Members (those whose Social Security number was potentially impacted) may claim a one-time cash payment expected to be $50.00. No proof or explanation is required. Group 2 Settlement Subclass Members are not eligible for the Alternative Cash Payment.
How Do You File a Claim?
To receive a benefit, you must complete and submit a valid Claim Form by the deadline. The fastest way to file is online at the official settlement website, HCCDataSettlement.com. If you prefer, you can download a printable Claim Form from the website and mail it to the Settlement Administrator, or contact the administrator through the website to request a paper copy.The Settlement Administrator decides whether each claim is valid and may request additional information. To compare this case with others, see our roundup of open data breach settlements and our explainer on how a data breach class action works.
Important Dates
- Opt-Out (Exclusion) Deadline: July 27, 2026
- Objection Deadline: July 27, 2026
- Claim Form Deadline: August 26, 2026 (submitted online or postmarked)
- Final Approval Hearing: August 24, 2026 at 10:00 a.m. ET, Superior Court of Durham County, North Carolina
If you do nothing, you will not receive any benefit or payment, and you will give up your right to sue Hillcrest over the incident if the settlement is approved. To keep the right to sue separately, you must opt out by the exclusion deadline.
When Will Payments Be Made?
Settlement benefits will only be issued if the Court grants final approval at the August 24, 2026 hearing and after any appeals are resolved. That process can take time, and it also takes time to process all of the claim forms. Class Counsel will ask the Court to approve $325,000.00 in attorneys' fees and costs, and service award payments of $2,500.00 for each of the class representatives — all of which Hillcrest has agreed to pay separately.Beware of Scams
Legitimate settlement administrators do not ask you to pay a fee to receive your money. File only through the official settlement website, and never share your bank or payment information in response to an unsolicited call, text, or email claiming to be from the settlement. If you need to reach the administrator — for example, to request a paper claim form — use the contact options on the official settlement website.Frequently Asked Questions
What is the Hillcrest Convalescent Center data breach settlement?
It is a proposed class action settlement in In re Hillcrest Convalescent Center, Inc. Data Breach Litigation, Case No. 25CV002700-310, in the Superior Court of Durham County, North Carolina. The case concerns a June 2024 cyberattack on Hillcrest's computer systems that may have exposed class members' private information, including names, addresses, financial account information, dates of birth, driver's license numbers, Social Security numbers, other government ID numbers, and medical, health insurance, and provider information.
How much can I get from the Hillcrest settlement?
All class members can claim reimbursement of up to $2,500 for documented out-of-pocket losses fairly traceable to the data incident and incurred between June 27, 2024 and August 26, 2026, plus two years of free credit monitoring (CyEx Identity Defense Complete) with $1 million in identity theft insurance. Class members whose Social Security number was potentially impacted (the Group 1 subclass) may instead choose a one-time $50 Alternative Cash Payment with no proof required.
Who qualifies for the Hillcrest data breach settlement?
The Settlement Class includes all living individuals in the United States whose private information was implicated in the June 2024 data incident. It is divided into two subclasses: Group 1 members whose Social Security number was potentially impacted, and Group 2 members whose Social Security number was not. Excluded are Hillcrest and its officers, directors, and related companies; governmental entities; and the judge in the case along with the judge's family and staff.
What is the deadline to file a claim?
Claim forms must be submitted online or postmarked by August 26, 2026. The deadline to opt out of or object to the settlement is July 27, 2026.
Do I need proof to file a claim?
No proof is required for the $50 Alternative Cash Payment (available only to the Group 1 Social Security number subclass) or to enroll in the credit monitoring benefit. Documentation such as receipts or bank statements is required only if you claim reimbursement of up to $2,500 for out-of-pocket losses.
When is the final approval hearing?
The Court has scheduled the final approval hearing for August 24, 2026 at 10:00 a.m. Eastern Time in the Superior Court of Durham County, North Carolina. The date and time may change, so check the official settlement website for updates.
Official Settlement Notice
Sources
- Notice of Proposed Class Action Settlement, In re Hillcrest Convalescent Center, Inc. Data Breach Litigation, Case No. 25CV002700-310 (Superior Court of Durham County, North Carolina)
- Official Settlement Website — HCC Data Settlement.com
