The HSHS data breach settlement payout will be either up to $5,000 for class members who documented their losses or an estimated $40 to $50 cash payment for those who chose the no-proof option, plus two years of credit and identity monitoring for everyone in the class. Sangamon County Circuit Court Judge Adam Giganti granted final approval of the $7.6 million settlement on December 10, 2025, but as of mid-2026 the settlement administrator has not announced a specific distribution date.
How Much You Can Expect
Two payment tracks were available when claims were filed. Option 1 reimburses documented losses up to $5,000, covering things like identity theft losses, credit monitoring fees, credit freeze costs, ID replacement, and related postage incurred between August 16, 2023, and November 14, 2025. Proof such as bank statements or receipts was required.
Option 2 is a flat pro rata cash payment for class members who did not want to submit documentation. The settlement website estimates that payment at $40 to $50 per person, based on roughly 80,000 people responding to the court-authorized mailing, or about 11% of the affected population. The final figure depends on what remains in the fund after administrative costs, attorneys’ fees, service awards, and Option 1 reimbursements are paid.
Every class member, regardless of which option they chose, is eligible for two years of CyEx Financial Shield monitoring. That includes credit and identity monitoring across all three bureaus, dark web monitoring, and $1 million in financial fraud insurance.
The $7.6 million fund is being drawn down in a set order. Administrative costs come out first. Class counsel receives $2.6 million, which Judge Giganti called “appropriate and reasonable” at 35% of the fund. Each of the named plaintiffs gets a $2,500 service award. The rest pays for the monitoring program, Option 1 reimbursements, and Option 2 cash payments.
When Payments Will Arrive
No payment date has been posted. The official settlement website at HSHSDataSettlement.com says only that payments will be issued after final approval and after any appeals are resolved. Final approval came on December 10, 2025, but neither a distribution schedule nor an updated per-person estimate has appeared as of mid-2026.
The site notes that an updated estimate for the pro rata cash payment will be posted when available. Until then, the $40 to $50 range is the figure the administrator has published.
Checking on Your Claim
Claims were filed at HSHSDataSettlement.com using the unique ID and PIN from the notice, or by mail to the settlement administrator, Simpluris, at P.O. Box 25226, Santa Ana, CA 92799-9958. For claim-status questions, the administrator can be reached at (844) 496-1105 or info@HSHSDataSettlement.com.
One boundary worth knowing: the deadline to file a claim, opt out, or object was November 14, 2025. Class members who missed it forfeited settlement benefits and also released their legal claims against HSHS tied to the breach. If you did nothing, there is no late-claim option through this settlement.
What the Settlement Covers
The case resolves claims arising from a cyberattack on Hospital Sisters Health System, a Catholic health system headquartered in Springfield, Illinois that operates 13 hospitals and two children’s hospitals across Illinois and Wisconsin. Between August 16 and August 27, 2023, an unauthorized third party accessed HSHS’s network in what the company described as a targeted attack. The intrusion knocked computer systems, phone lines, websites, and patient portals like MyChart and MyPrevea offline.
The exposed information included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, health insurance information, medical record numbers, and limited medical and treatment details. A report HSHS filed with the Maine Attorney General in February 2025 confirmed that 882,782 people were affected. Notification letters went out on a rolling basis starting August 30, 2024, more than a year after the breach.
Multiple lawsuits were consolidated on January 8, 2025 into In re Hospital Sisters Health System Data Breach Litigation, Case No. 2024CH000043, in the Chancery Court of Sangamon County. The complaint alleged negligence, unjust enrichment, and breach of contract, arguing HSHS failed to implement reasonable security measures. HSHS denied all wrongdoing and said it settled to avoid the burden and uncertainty of continued litigation. Beyond the fund, the settlement requires HSHS to attest to additional data security measures put in place since the breach; the specific improvements have not been publicly detailed.