CPAP Medical Supplies data breach settlement: up to $5,000

What the CPAP Medical Supplies data breach settlement is about

CPAP Medical Supplies and Services, Inc. sells durable medical equipment and supplies with a focus on sleep apnea therapy, so it holds records on patients and employees. It says it became aware in late December 2024 that an unauthorized third party had been in its network between December 13 and December 21, 2024, potentially affecting nearly 90,000 current and former patients and employees. Depending on the person, the information involved may have included names, addresses, Social Security numbers, driver's license numbers, health insurance details, medical histories and treatment plans. CPAP began sending notification letters around August 15, 2025.

Four class actions followed in federal court in Florida. After the court ruled on CPAP's motion to dismiss, granting it in part and denying it in part, the sides reached a deal on June 4, 2026 and refiled in Broward County court as Brett Conner v. CPAP Medical Supplies and Services, Inc., No. CACE-26-011830. CPAP denies doing anything wrong, and the court has not decided who is right. Judge Michele Towbin Singer preliminarily approved the settlement on July 29, 2026. This is a data breach case against a supplier, not a settlement over recalled CPAP machines. For how breach settlements usually pay, see our data breach settlement guide.

Who qualifies for the CPAP data breach settlement

The class is all living individuals in the United States who were sent notice by CPAP that their private information may have been impacted in the incident. It excludes CPAP's directors, officers and agents, government entities, the judge, the judge's immediate family and court staff, and anyone who opts out. The settlement notice says CPAP's records indicate you are a class member. It comes by email, or by postcard if the administrator has no email for you, and carries a Login ID and PIN. You may also have received CPAP's own breach letter earlier; that is a separate mailing.

Not sure whether you are in? Call the administrator, Simpluris, at (833) 285-3011 or email info@CPAPDataIncidentSettlement.com. Our guide to who is eligible for a class action settlement covers the basics.

How much the CPAP settlement pays

There are two benefits, and they work very differently. Medical data monitoring is open to every class member who claims it: two years of CyEx Medical Shield Complete, which comes with $1 million of medical identity theft insurance and watches for health insurance ID exposure, medical record number exposure and unauthorized Health Savings Account spending. Cash is different. There is no flat payment and no lost-time payment. You can claim up to $5,000, but only for actual, documented out-of-pocket losses between December 13, 2024 and November 26, 2026.

That cash comes from a $500,000 maximum for the whole class. If valid claims add up to more, every payment is cut by the same percentage, so $5,000 is a ceiling, not a typical check. If claims came to twice the cap, for example, each person would get about half of what was approved. Covered costs include identity theft or fraud losses, fees for credit reports, credit monitoring and credit freezes, replacing IDs, and postage to contact banks. You cannot claim anything someone else already reimbursed, including through credit monitoring CPAP offered in its breach letter.

How to file the CPAP settlement claim

Filing is free, and you submit it yourself on the settlement site run by the court-appointed administrator, Simpluris. You sign the claim under penalty of perjury, and the claim form frames the cash benefit as documented losses from identity theft or fraud, so read it before you check the box. For how these login codes work in general, see claim ID vs. notice ID.

1. Find your settlement notice, an email or postcard that carries a Login ID and PIN.
2. Type CPAPDataIncidentSettlement.com into your browser, choose Submit a Claim and log in with the Login ID and PIN.
3. Tick the medical data monitoring box if you want the two years of coverage. No documents are needed for it.
4. For cash, list each loss between December 13, 2024 and November 26, 2026 and attach bank statements or receipts. Leave out anything already reimbursed.
5. Choose how you want to be paid, sign, and submit by November 26, 2026.
6. Lost your Login ID or PIN? Email info@CPAPDataIncidentSettlement.com with your full name and mailing address and ask for them, or call (833) 285-3011.
7. To file on paper, download the claim form from the settlement site and mail it with your documents to CPAP Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958, postmarked by November 26, 2026. The site also takes the completed form by email at info@CPAPDataIncidentSettlement.com.

Key dates for the CPAP settlement

If you do nothing, you get no benefits and give up the right to sue CPAP over the claims this settlement resolves. To keep that right, opt out online or by mail postmarked by October 30, 2026, which also means no benefits. To object, file a written objection with the Clerk of Court in Fort Lauderdale by the same date and send copies to the administrator, class counsel and CPAP's lawyers. You can object and still file a claim. Read how to opt out of a class action settlement before you decide.

Is the CPAP data breach settlement legit?

Yes. It is a court case in Broward County, Florida, and the judge's order appoints Simpluris as administrator. The official site is CPAPDataIncidentSettlement.com, and the toll-free line is (833) 285-3011. The class lawyers, Jeff Ostrow of Kopelowitz Ostrow P.A. and Mariya Weekes of Milberg PLLC, will ask the court for $400,000 in fees and costs. CPAP pays that separately from class benefits, and you are not billed for it.

Medical data breaches attract phishing. A real class claim never charges a fee to file, and the notice says not to contact the court or clerk about the settlement. Use only the official address and keep your Login ID and PIN to yourself. Our guide to spotting settlement scams lists more warning signs.

What happens after you file

Simpluris reviews each claim and can send a notice if something is missing; you then have until the claim deadline or 10 days after the notice is sent, whichever is later, to fix it. The judge decides at the December 1, 2026 hearing whether to approve the settlement and the lawyers' fees. After that, the agreement has CPAP pay valid claims within 20 days of the Effective Date, which is the day after approval if nobody objects and later if someone does, and the administrator sends cash within 45 days of it. Early 2027 is a realistic earliest window (our estimate, not an announced date). See how long a settlement check takes for typical waits.

Owed can keep the dates straight: it finds settlements you may qualify for, explains each one in plain English, opens the official claim form, reminds you before deadlines and tracks your claim to payout, while you submit the claim yourself. Owed Pro is $2 for the first week, then $49 per year — one flat membership. Owed never takes a percentage of any payout. You can check what you qualify for or browse the open settlements directory.

This is general information, not legal advice. Owed is not a law firm or a settlement administrator; the court and the administrator decide who qualifies and what each person gets.

Glossary

Documented losses

Out-of-pocket costs tied to the breach, such as fraud losses or credit freeze fees, that you can back up with third-party records.

Pro rata

A proportional cut. If valid cash claims exceed the $500,000 cap, every payment is reduced by the same percentage.

Medical data monitoring

Two years of CyEx Medical Shield Complete, which watches for misuse of health insurance IDs, medical record numbers and Health Savings Account spending.

Login ID and PIN

The codes on your settlement email or postcard that the online claim form uses to find you.

Effective Date

The date the settlement becomes final after approval and any appeals. The payment deadlines in the agreement count from it.

Final approval hearing

The hearing where the judge decides whether to approve the settlement and the lawyers' fees. It is set for December 1, 2026.

FAQ