Valley Oaks Health data breach settlement

What happened?

Valley Oaks Health settled a class action over a June 2023 cyberattack that may have exposed people's private information. People on the settlement class list can claim two years of medical identity monitoring, plus either a flat $40 or reimbursement for documented losses of up to $5,500.

A targeted cyberattack hit Valley Oaks Health's computer systems in June 2023. The lawsuit says files holding private information, which may include Social Security numbers and medical details, were accessed. Valley Oaks denies wrongdoing. The court has not decided who is right, and both sides agreed to settle to avoid the cost and risk of a trial.

The settlement covers people whose private information was potentially compromised in the attack and who are on the settlement class list that Valley Oaks gave the administrator. A notice was mailed in September 2026 with a Login ID and PIN for the online claim form. If you are not sure whether you are included, call the administrator at (888) 836-1354.

All class members can enroll in two years of CyEx Medical Shield Pro, which includes $1,000,000 of medical identity theft insurance. For cash you can take a flat $40 with no proof. Or you can claim documented losses instead. That means up to $500 for costs such as credit report fees, credit freezes, ID replacement and postage, with up to four hours of lost time at $20 an hour counting toward the same $500. It also means up to $5,000 for money lost to identity theft or fraud tied to the attack. Documented costs must fall between June 8, 2023 and November 9, 2026 and need receipts or similar records. Lost time only needs a short description of what you did.

File online with the Login ID and PIN from your notice, or download the paper claim form and mail it with any documents to the administrator, Simpluris, at P.O. Box 25226, Santa Ana, CA 92799-9958. The claim deadline is November 9, 2026, and the deadline to opt out or object is the same day. The final approval hearing is December 10, 2026 at 2:00 p.m. Eastern. Payments go out only after the court approves the settlement and any appeals are resolved.

How much is Valley Oaks Health paying and what can I get?

Everyone on the class list can enroll in two years of CyEx Medical Shield Pro medical identity monitoring, which includes $1,000,000 of medical identity theft insurance. For cash, pick one route. Either take a flat $40 with no proof, or claim documented losses: up to $500 for ordinary costs and lost time combined (lost time is up to four hours at $20 an hour), plus up to $5,000 for identity theft or fraud losses. Adding the two caps gives $5,500 as the top possible amount for documented losses.

Am I eligible to file a claim?

People whose private information was potentially compromised in the June 2023 Valley Oaks Health cyberattack and who are on the settlement class list. Class members were mailed a notice with a Login ID and PIN.