Heartland Data Settlement: Claims, Deadlines, and Class Eligibility

The Heartland Alliance data breach settlement is a $300,000 class action resolution over a January 26, 2022 network intrusion that exposed personal information belonging to roughly 46,700 people served by the Chicago nonprofit. The Circuit Court for Lake County, Illinois granted final approval on November 25, 2025. The claim filing deadline was October 30, 2025, and it has passed; payments and credit monitoring enrollment will begin once any appeals from the final approval order are resolved.¹²

What Information Was Exposed

Heartland Alliance discovered the intrusion on or around January 26, 2022 and hired cybersecurity investigators, who determined that an unauthorized outside actor had accessed files on the network. Depending on the person, exposed data included names, dates of birth, Social Security numbers, driver’s license numbers, bank account numbers, and medical or health information.³

The organization reported the incident to the U.S. Department of Health and Human Services’ Office for Civil Rights as affecting the protected health information of 46,694 individuals, and began mailing notification letters on or about December 21, 2022.⁴⁵ If you received one of those letters, you are within the group the settlement was designed to cover.

Who Was Included in the Class

The settlement class covered anyone whose personal information was compromised in the January 2022 breach, unless they submitted a timely request to be excluded. Heartland Alliance’s officers and directors, the presiding judge and court staff, and anyone who opted out were not part of the class.² The named defendants were Heartland Alliance for Human Needs & Human Rights, Heartland Alliance Health, Heartland Alliance International LLC, Heartland Housing Inc., and Heartland Human Care Services Inc. All denied wrongdoing and agreed to settle to end the case.⁴

What Class Members Could Claim

Claimants who filed on time could seek payment from a $300,000 fund in the following categories, all requiring documentation:⁵⁶

Up to $1,000 for ordinary out-of-pocket losses tied to the breach, such as bank fees, phone charges, postage, and costs related to fraud or identity theft.
Up to $5,000 for extraordinary losses from actual identity theft caused by the breach.
Reimbursement for up to three hours of lost time at $22.50 per hour, with a one-hour minimum.
Two years of three-bureau credit monitoring, including $1,000,000 in identity theft insurance and access to fraud resolution agents. The defendants funded this benefit separately from the cash fund.

The settlement did not cover emotional distress, personal injury, or punitive damages.²

Deadlines and Current Status

Class members had until September 30, 2025 to opt out or object, and until October 30, 2025 to submit claim forms online or by mail. The final approval hearing took place on November 19, 2025, and the court entered final approval on November 25, 2025.¹

The claims period is closed. New claims cannot be filed. According to the settlement administrator, distributions and credit monitoring enrollment will start after any appeals from the final approval order are resolved, and timely claimants are asked to be patient while claim forms are processed.⁶²

How the Case Reached Settlement

The litigation began in federal court as Wittmeyer v. Heartland Alliance for Human Needs & Rights, Case No. 23-CV-1108, in the U.S. District Court for the Northern District of Illinois. Plaintiffs asserted negligence, negligence per se, breach of contract, an Illinois Consumer Fraud and Deceptive Business Practices Act claim, and requests for declaratory and injunctive relief.⁴ On January 17, 2024, Judge Jeremy C. Daniel let the negligence claim proceed, finding a duty to safeguard personal information under the Illinois Personal Information Protection Act and Illinois common law, and dismissed the remaining claims without prejudice.⁷ The case then moved to the Circuit Court for Lake County, Illinois, Chancery Division, as Case No. 2025LA00000127 before Judge Luis A. Berrones, where it settled.²

Contacting the Settlement Administrator

Kroll Settlement Administration LLC is processing claims. Class members with questions about a submitted claim can call (833) 890-5635 or check heartlanddatasettlement.com for updates on payment timing.⁶

1
Heartland Data Settlement. Documents
2
Heartland Data Settlement. Frequently Asked Questions
3
PR Newswire. Heartland Alliance Provides Notice of Data Security Incident
4
HIPAA Journal. Heartland Alliance Data Breach Settlement
5
NetSec News. Heartland Alliance Data Breach Lawsuit
6
Heartland Data Settlement. Wittmeyer v. Heartland Settlement
7
GovInfo. Wittmeyer v. Heartland Alliance, No. 23-CV-1108