The Keenan & Associates data breach settlement is a $14 million class action resolution covering roughly 1.5 million people whose personal information was exposed in an August 2023 cyberattack on the Torrance-based insurance brokerage. The Los Angeles Superior Court gave final approval on November 14, 2025, and the settlement administrator began issuing payments to approved claimants in March 2026.1Shub Lawyers. Keenan and Associates Data Breach Final Approval of $14 Million Settlement2ClaimDepot. Keenan Breach Settlement
When Payments Are Going Out
CPT Group, Inc., the court-appointed settlement administrator, started distributing payments in March 2026. Claimants chose their delivery method when they filed: PayPal, Venmo, direct deposit, virtual prepaid card, or paper check.2ClaimDepot. Keenan Breach Settlement
If your payment hasn’t arrived or you need to update your information, the administrator can be reached here:
- Website: www.keenanbreachsettlement.com
- Phone: 1-888-764-4519
- Email: keenanbreachsettlement@cptgroup.com
- Mail: Heath v. Keenan & Associates, c/o CPT Group, Inc., 50 Corporate Park, Irvine, CA 926063Keenan Breach Settlement. Contact Us
How Much Claimants Receive
Claimants picked one of two cash options, and every claimant also gets three years of credit monitoring and identity theft protection.4PR Newswire. Keenan and Associates Data Breach Class Action Settlement Notice
The documented loss payment reimburses up to $10,000 per person for out-of-pocket expenses traceable to the breach and incurred on or after August 21, 2023. It required supporting documents like receipts or bank statements and could not cover losses already paid by insurance.5ClassAction.org. Heath et al. v. Keenan and Associates, Settlement Agreement
The pro rata cash payment required no documentation and pays a flat amount. California residents receive twice what residents of other states receive, under a specific provision in the settlement agreement. Estimated amounts were about $226 to $227 for California claimants and $113 to $114 for everyone else, though the final figure depends on how many valid claims were filed.2ClaimDepot. Keenan Breach Settlement
A second, smaller round of payments is possible. If money remains in the fund 150 days after distribution and the average additional payment would be at least $3 per person, the administrator will send a second pro rata check to claimants who cashed their first one.6Keenan Breach Settlement. Long Form Notice
The Claim and Objection Deadlines Have Passed
The claim deadline was October 30, 2025. The deadline to opt out or object was October 15, 2025. Neither can be reopened.7Keenan Breach Settlement. Keenan Breach Settlement Homepage Anyone who received a breach notice from Keenan and did not opt out by October 15 released all claims against the company related to the August 2023 incident, whether or not they filed for payment.6Keenan Breach Settlement. Long Form Notice
What the Breach Involved
Between August 21 and August 27, 2023, an unauthorized party accessed Keenan’s network and took files containing personal information. Keenan discovered the intrusion on August 27, contained it within hours, brought in forensic experts, and notified the FBI.8Keenan & Associates. Notice of Security Incident
The stolen files included names combined with one or more of the following: dates of birth, Social Security numbers, passport numbers, driver’s license numbers, health insurance information, and general health information.9Dark Reading. Keenan Associates Reports Data Breach Exposing Social Security Numbers of More Than 1.5M In total, 1,509,616 individuals were affected. That group included 101,135 members of Prime Healthcare’s employee health plan, which Keenan administered.10HIPAA Journal. Keenan Associates Data Breach Keenan has said it has no evidence the compromised data was misused.8Keenan & Associates. Notice of Security Incident
Case Background
The class action, Heather Heath, et al. v. Keenan & Associates, Case No. 24STCV03018, was filed February 2, 2024, in Los Angeles County Superior Court by five named plaintiffs: Heather Heath, Brian Heinz, Robert Ruma, Matthew Rutledge, and Andrea Hans.11ClassAction.org. Heath et al. v. Keenan and Associates, Second Amended Complaint6Keenan Breach Settlement. Long Form Notice Judge Timothy Patrick Dillon granted preliminary approval on July 1, 2025, held the final fairness hearing on November 14, 2025, and signed the final approval order on November 26, 2025.12ClassAction.org. Heath et al. v. Keenan and Associates, Preliminary Approval Order2ClaimDepot. Keenan Breach Settlement As part of the deal, Keenan also agreed to maintain enhanced cybersecurity, data security, and privacy protocols for two years from the final approval date.