The Medusind data breach settlement was a $5 million class action fund for people whose personal and health information was exposed when unauthorized parties accessed the medical billing company’s systems in December 2023. The court granted final approval on January 26, 2026, the claim deadline was December 29, 2025, and settlement payments were mailed and sent digitally on April 10, 2026.1Medusind Data Incident Settlement. Frequently Asked Questions If you filed a valid claim and your payment hasn’t arrived, or you want to know what the settlement covered and what options remain for people who missed it, the sections below walk through both.
What the Breach Exposed
Unauthorized parties accessed Medusind’s systems on or about December 29, 2023. Because Medusind handles medical and dental billing, the files reached by the intruders went well past names and email addresses.2Medusind Data Incident Settlement. Owings v. Medusind Settlement Breach notification records put the number of affected individuals at approximately 360,934.3Maine.gov. Data Breach Notices
The data varied by person but could include Social Security numbers, driver’s licenses, taxpayer IDs, passport numbers, credit and debit card and bank account information, medical history and prescription details, medical record numbers, insurance policy and claims data, dates of birth, email addresses, and phone numbers.
The lawsuit alleged Medusind failed to put adequate cybersecurity protections in place. Medusind discovered the intrusion on December 29, 2023 but did not begin notifying affected individuals until January 2025.3Maine.gov. Data Breach Notices That year-long gap was a central grievance in the case.
Who the Settlement Covered
The class included all living U.S. residents who received a notice from Medusind stating their personal information may have been affected by the breach.2Medusind Data Incident Settlement. Owings v. Medusind Settlement Notices went out by mail and email. Anyone who received one was a class member unless they formally opted out by December 14, 2025.
A California subclass covered class members who lived in California on December 29, 2023. Those individuals qualified for an additional statutory payment on top of the standard benefits.2Medusind Data Incident Settlement. Owings v. Medusind Settlement
What Claimants Could Get
Each claimant picked one of two cash options and could separately elect credit monitoring.
Cash Payment A: Documented Losses
Up to $5,000 in reimbursement for actual financial harm caused by the breach, backed by documentation.2Medusind Data Incident Settlement. Owings v. Medusind Settlement The settlement required “reasonable documentation,” meaning records created by a third party or at the time an expense occurred rather than after-the-fact personal statements. Handwritten receipts or self-prepared affidavits alone were not sufficient. Qualifying expenses included credit monitoring already purchased, credit freeze fees, bank charges from unauthorized transactions, notary and postage costs, mileage to a police station or IRS office, and professional identity restoration fees. All documented losses sat under the single $5,000 ceiling, with no separate hourly rate for personal time.
Cash Payment B: Flat Alternate Cash
A flat payment estimated at $100 with no proof of loss required.2Medusind Data Incident Settlement. Owings v. Medusind Settlement
California Statutory Award
Members of the California subclass could claim an additional estimated $100 on top of either A or B, reflecting California-specific data breach statutes.2Medusind Data Incident Settlement. Owings v. Medusind Settlement
Credit Monitoring
Any class member, regardless of cash option, could also elect two years of credit monitoring. The service included real-time credit file tracking, web surveillance of personally identifiable information like Social Security and banking details, and access to fraud consultation and identity theft restoration agents.
Why Payments Came in Smaller Than Expected
The total value of valid claims exceeded the net settlement fund, so every cash category was reduced pro rata. Each claimant received the same percentage of what they were originally owed rather than the full estimated amount. The administrator distributed available funds in a set priority order: credit monitoring costs first, then Cash Payment A documented losses, then Cash Payment B and the California Statutory Awards. Reductions within each category applied by equal percentage.1Medusind Data Incident Settlement. Frequently Asked Questions
If You Filed a Claim and Haven’t Been Paid
The court granted final approval on January 26, 2026,4Justia. Owings v. Medusind, Inc and payments were issued on April 10, 2026.1Medusind Data Incident Settlement. Frequently Asked Questions If you don’t see your payment, check the settlement website for updates and confirm the delivery method you selected on your claim. For digital payments, check that the email or account you provided is still active and that nothing was flagged by your bank or payment provider. For checks, allow extra time for postal delivery. You can also write to the settlement administrator, Epiq Global, at Medusind Data Incident Settlement Administrator, PO Box 3236, Portland, OR 97208-3236.
Is the Payment Taxable
The IRS treats income as taxable unless a specific provision says otherwise, and whether a settlement payment is taxable depends on what the payment was meant to replace.5Internal Revenue Service. Tax Implications of Settlements and Judgments Reimbursement for actual out-of-pocket breach costs (credit monitoring you already paid for, bank fees, identity restoration) generally is not taxable, because it restores you rather than creating a gain. The flat alternate cash payment is less clear. It isn’t tied to a specific documented expense and isn’t compensation for a physical injury, so it may be taxable as ordinary income. The same reasoning applies to the California Statutory Award.
If your total payment across categories reaches $600 or more, the administrator may issue a Form 1099 reporting the payment to the IRS. Even without a 1099, taxable settlement income is still reportable. A tax professional is worth consulting if you claimed documented losses that were only partly reimbursed after the pro rata cut.
If You Missed the Deadline
The claim window closed on December 29, 2025, and the settlement site no longer accepts submissions.1Medusind Data Incident Settlement. Frequently Asked Questions There is no late-filing mechanism. Class members who did not opt out by December 14, 2025 are still bound by the settlement’s release and gave up the right to sue Medusind individually over this breach, even though they will not receive a payment.2Medusind Data Incident Settlement. Owings v. Medusind Settlement
You can still protect yourself. Place a free fraud alert or credit freeze with Equifax, Experian, and TransUnion. Pull your credit reports at AnnualCreditReport.com. Watch bank and insurance statements for charges you don’t recognize. If someone has already used your information, file a report at IdentityTheft.gov, which generates a personalized recovery plan.