CAMC Data Breach Settlement: Eligibility, Claims, and Key Dates

The CAMC data breach settlement is a $1 million class action resolution with Charleston Area Medical Center that gives roughly 67,413 people whose information was potentially exposed in an October 2024 email phishing attack a way to claim money and four years of free credit monitoring. Claims must be filed by June 10, 2026. The court granted preliminary approval on February 12, 2026, and a final approval hearing is set for June 23, 2026 before Judge Richard Lindsay in the Circuit Court of Kanawha County, West Virginia.¹²

Who Is Eligible

The settlement class covers everyone whose personal, medical, or private health information was potentially exposed during the October 2024 incident and who received a notice letter from CAMC. It is not limited to patients; current and former patients and other individuals whose data may have been in the compromised email account are all included.³

If you never received a notice but believe you were affected, you can still submit a claim through the settlement website and the administrator will review your eligibility.¹

One boundary worth naming: this settlement resolves only the October 2024 incident. A separate January 2022 phishing breach at CAMC affected about 54,000 people and has its own class action, its own class definition, and its own settlement fund. Receiving notice from one does not mean you are in the other.⁴

What You Can Claim

The $1 million fund is non-reversionary, meaning it will all be spent. Class members can choose one of the cash options below, and every class member also gets credit monitoring whether or not they file a claim form.¹

Documented monetary losses up to $6,000. Covers unreimbursed, out-of-pocket expenses tied to the breach: losses from identity theft or fraud, credit monitoring you already bought after the incident, and miscellaneous costs like notary fees, postage, and mileage. Receipts, bank statements, or similar documentation are required.
Lost time up to $80. Up to four hours at $20 per hour for time spent dealing with breach-related issues. No receipts needed, but you must describe in writing what you did.
Alternative cash payment. If you don’t claim documented losses or lost time, you can take a pro-rated share of whatever remains in the fund after fees, expenses, and other claims. Only a signed certification is required.
Four years of credit monitoring and identity theft protection. Automatic for all class members. Enrollment codes are being sent in a separate mailing; no claim form is required to receive this benefit.⁵

Attorneys’ fees and administration costs come out of the same $1 million, so the pot available for payments will be smaller than the headline figure. Class counsel’s fee request is due May 11, 2026, and with roughly 67,413 potential claimants, the alternative cash payment could be modest per person depending on turnout.⁵

CAMC also agreed to maintain improved data security measures for four years after the settlement’s effective date.¹ CAMC denies wrongdoing, and the settlement is not an admission of fault.⁶

How To File a Claim

The claim deadline is June 10, 2026. You can file two ways:

Online at camcdatabreachsettlement.com. If you received a postcard, use the unique identifier and passcode printed on it to verify your eligibility.⁷
By mail to ILYM Group, Inc., P.O. Box 2031, Tustin, CA 92781. Printed forms are available on the website or by calling 1-855-781-0324.⁵

Payments can be issued by check or through electronic methods such as Venmo or Zelle. If the administrator finds your claim deficient, you’ll be notified and given 21 days to fix it. No money will be paid out until the court grants final approval and any appeals are resolved.⁵⁶

Opting Out or Objecting

If you don’t want to be bound by the settlement, you can exclude yourself by mailing a written Request for Exclusion to the claims administrator postmarked no later than May 26, 2026. The request needs your full name, address, signature, and a statement that you don’t wish to participate. Opting out keeps your right to sue CAMC on your own but forfeits every settlement benefit, including the free credit monitoring.⁵

To object to the terms instead, you must stay in the class and mail a written objection to the Clerk of Court for the Circuit Court of Kanawha County by the same May 26, 2026 deadline, with copies to counsel on both sides. Objections must state the grounds, prove class membership, and list any class action objections you’ve filed in the previous five years.⁵

Key Dates

May 11, 2026: Class counsel files the request for attorneys’ fees and expenses.
May 26, 2026: Deadline to opt out or object.
June 10, 2026: Deadline to file a claim.
June 23, 2026, 9:00 a.m.: Final approval hearing at the Kanawha County Judicial Building in Charleston, West Virginia.⁵

What Happened

On October 2, 2024, CAMC discovered that an unauthorized party had gained access to a single employee’s email mailbox. The access lasted roughly 24 hours, from October 2 to October 3, 2024. No other CAMC systems or data storage were reported affected.⁸

What was potentially exposed varied by person but could have included names, dates of birth, Social Security numbers, email addresses, phone numbers, driver’s license numbers, health information, and health insurance information. CAMC has said it is not aware of any actual misuse of the data.⁸ Notification letters went out on February 14, 2025, more than four months after the breach — a delay the plaintiffs raised in the lawsuit.⁹

1
ClassAction.org. $1M Charleston Area Medical Center Settlement Ends Class Action Over October 2024 Data Breach
2
ClassAction.org. J.T. v. Charleston Area Medical Center Preliminary Approval Order
3
ClaimDepot. CAMC Data Breach Settlement
4
ClassAction.org. Fitch v. Charleston Area Medical Center Settlement Notice
5
ClassAction.org. J.T. v. Charleston Area Medical Center Settlement Notice
6
CAMC Data Breach Settlement. CAMC Data Breach Settlement
7
CAMC Data Breach Settlement. CAMC Data Breach Settlement Claim Form
8
ClassAction.org. Charleston Area Medical Center Online Notice
9
WOWK-TV. CAMC Sued After Data Breach May Have Impacted More Than 67,000 People