The NextGen Healthcare data breach settlement is a $19.375 million class action resolution covering roughly 1,049,396 people whose personal information was exposed when intruders accessed NextGen’s cloud-based “NextGen Office” system in the spring of 2023. Judge Thomas W. Thrash Jr. of the U.S. District Court for the Northern District of Georgia granted final approval on February 17, 2026, in Miller et al. v. NextGen Healthcare, Inc. (Case No. 1:23-cv-02043-TWT), and the settlement became final on March 20, 2026.1NGH Data Breach Litigation. NGH Data Breach Litigation Settlement Website NextGen denied any wrongdoing.
Who Was Affected and What Was Exposed
Between March 29 and April 14, 2023, unauthorized parties used client credentials stolen from unrelated sources to get into NextGen Office.2TechCrunch. NextGen Healthcare Data Breach The exposed information included names, dates of birth, addresses, and Social Security numbers. NextGen said it found no evidence that health or medical records were accessed.3Infosecurity Magazine. NextGen Healthcare Breached Notification letters went out by mail and email starting around April 28, 2023, and NextGen initially offered 24 months of free Experian IdentityWorks monitoring.4California Office of the Attorney General. NextGen Individual Notification Letter
If you received a notice from NextGen or Kroll about this incident, you are part of the settlement class.
What the Settlement Pays
The $19.375 million fund is non-reversionary, meaning any money left over does not go back to NextGen. Class members had two paths for cash and a separate benefit that applies to everyone.5classaction.org. NextGen Healthcare Settlement Ends Class Action Lawsuit Over 2023 Data Breach
Option 1 — Documented losses. Reimbursement of up to $7,500 per person for out-of-pocket expenses traceable to the breach, such as credit monitoring costs, credit freeze fees, and identity theft remediation, incurred on or after March 29, 2023. This option also pays $25 per hour for lost time: up to 10 hours for claimants with a qualifying out-of-pocket loss, or up to 5 hours for those without.
Option 2 — Flat cash payment. A single alternative payment of $50, or $150 for people who were California residents as of March 29, 2023. These amounts can be adjusted pro rata depending on how many claims come in, with a cap of $599 per claim if the fund allows.
The two options are mutually exclusive. Claimants had to pick one path.
Identity defense services for everyone. All class members are entitled to three years of identity defense and restoration services through Kroll, running from March 20, 2026. This benefit is available regardless of whether you filed a cash claim.1NGH Data Breach Litigation. NGH Data Breach Litigation Settlement Website
The settlement also allows class counsel to seek up to $6,458,333 in attorneys’ fees and provides service awards of up to $2,500 each for up to ten class representatives.6Claim Depot. NGH Data Breach Litigation
Is It Too Late To File a Claim
The main deadlines have passed. The opt-out and objection deadline was February 12, 2026. The claim deadline for cash payments was March 30, 2026.1NGH Data Breach Litigation. NGH Data Breach Litigation Settlement Website A late claim form is still available on the settlement website, though late claims are not guaranteed to be paid.
If you did not opt out by February 12, 2026, you gave up the right to sue NextGen separately over the breach.
Enrollment in the Kroll identity defense services has no deadline. The services themselves expire three years from March 20, 2026, so signing up sooner gives you more coverage.1NGH Data Breach Litigation. NGH Data Breach Litigation Settlement Website
How To Check a Claim or Enroll in Identity Services
The official settlement website is NGHDataBreachLitigation.com, administered by Kroll Settlement Administration LLC. You can check on a claim or ask questions by:
- Calling (833) 630-5369
- Using the contact form on the settlement website
- Writing to NGH Data Breach Litigation, c/o Kroll Settlement Administration LLC, PO Box 5324, New York, NY 10150-53917NGH Data Breach Litigation. NGH Data Breach Litigation Documents
The settlement administrator has said it will post periodic updates on payment timing on the website.8classaction.org. Miller et al. v. NextGen Healthcare Inc. Settlement Notice
To activate the free Kroll identity defense services, go to enroll.krollmonitoring.com/redeem and use the activation code and verification ID from your mailed notice. If you no longer have your notice, contact the administrator using the phone number or address above.
A Note on Other NextGen Matters
This settlement covers only the spring 2023 data breach. It is separate from a January 2023 BlackCat ransomware incident at NextGen, which the company said its forensic review found had not resulted in access to patient data.9Healthcare IT News. NextGen Healthcare Hit by BlackCat Ransomware It is also unrelated to NextGen’s $31 million July 2023 False Claims Act settlement with the U.S. Department of Justice, which involved allegations about software certification and kickbacks rather than patient data.10U.S. Department of Justice. Electronic Health Records Vendor NextGen Healthcare Inc. to Pay $31 Million to Settle False Claims Act Allegations Neither of those matters produces payments to breach class members.