The PRC data incident settlement is a $632,250 class action resolving claims against Prentke Romich Company, doing business as PRC-Saltillo, over an August 2024 cyberattack that exposed personal and medical information for roughly 53,028 people. If you got a notice, you may be eligible for cash reimbursement of up to $5,000 for documented losses, a pro-rata share of the remaining fund, or, for minors, eight years of automatic identity protection. The case is Jackson, et al. v. Prentke Romich Company d/b/a PRC-Saltillo, No. 24-cv-01708, in the U.S. District Court for the Northern District of Ohio, and the claim filing deadline was December 31, 2025. Final approval is set for January 28, 2026.1PRCSettlement.com. PRC Data Incident Settlement2PRCSettlement.com. Important Dates
What Happened in the Breach
Between August 13 and August 21, 2024, an unauthorized party accessed PRC-Saltillo’s network and copied files containing personal information. The company detected suspicious activity on August 21, confirmed on September 3 which files were involved, and mailed notification letters on September 12, 2024.3HIPAA Times. PRC-Saltillo Experiences Data Breach Affecting 51,627
The data varied by person. According to PRC-Saltillo’s notice to the California Attorney General, the exposed information included names, addresses, phone numbers, dates of birth, treatment cost information, referring and treating physicians, health insurance policy numbers, Medicare and Medicaid plan names, and details about medical devices purchased. That notice said Social Security and financial account numbers were not affected.4California Office of the Attorney General. PRC-Saltillo Notice of Data Event A separate filing with the Massachusetts Attorney General indicated that for some individuals, Social Security numbers, driver’s license information, and financial information were also involved.5ClassLawDC.com. PRC-Saltillo Data Breach Investigation Check the notice you received to see what applies to you.
PRC-Saltillo denies any wrongdoing and agreed to the settlement to avoid the costs and risks of continued litigation.1PRCSettlement.com. PRC Data Incident Settlement
Who Is Covered
The class covers everyone, including minors, whose personal information was affected by the August 2024 breach — essentially, everyone who received a notice. The class totals about 53,028 people.6ClassAction.org. $632K+ PRC-Saltillo Settlement Ends Class Action Lawsuit Over August 2024 Data Breach Excluded are people who timely opted out, the judge and court staff, PRC-Saltillo’s officers and directors, and anyone found guilty of or pleading no contest to criminal activity that caused or aided the breach.7ClassAction.org. Claim Form
What You Can Claim
Adult class members had two options, which could be combined on a single claim form.
Documented out-of-pocket losses, up to $5,000. This covers unreimbursed expenses traceable to the breach: fraud or identity theft losses, credit repair or monitoring costs, professional fees paid to accountants or attorneys, costs to freeze or unfreeze credit, and miscellaneous expenses like postage and mileage. Receipts or other records were required as proof.8PRCSettlement.com. Frequently Asked Questions
Pro-rata cash payment. A share of whatever remains in the fund after out-of-pocket claims, attorney fees, service awards, and administrative costs are paid. You could claim this on its own or stack it with an out-of-pocket claim.9ClassAction.org. Settlement Agreement
The fund is non-reversionary, so PRC-Saltillo cannot take back anything unused; any residue after claims and costs goes to court-approved charitable organizations.9ClassAction.org. Settlement Agreement
If You Were a Minor at the Time of the Breach
Minors get a separate benefit with no claim form required: automatic enrollment in eight years of CyEx’s Minor Defense Pro service. An enrollment code is emailed to the parent or guardian. The service monitors the child’s Social Security number for use in synthetic identities and public records, tracks the dark web for exposed personal information, and provides a dedicated specialist if identity theft occurs.6ClassAction.org. $632K+ PRC-Saltillo Settlement Ends Class Action Lawsuit Over August 2024 Data Breach10CyEx. Minor Defense
PRC-Saltillo separately agreed to implement enhanced cybersecurity measures going forward.6ClassAction.org. $632K+ PRC-Saltillo Settlement Ends Class Action Lawsuit Over August 2024 Data Breach
Deadlines and Payment Timing
Notices were mailed on October 2, 2025. The deadlines to opt out or object both fell on December 1, 2025, and the deadline to file a claim was December 31, 2025.2PRCSettlement.com. Important Dates
The final approval hearing is set for January 28, 2026, at 3:00 p.m. Eastern Time before Judge Christopher A. Boyko in Cleveland.8PRCSettlement.com. Frequently Asked Questions The court has not yet decided whether to grant final approval, and no payments will be distributed until that happens and any appeals are resolved.1PRCSettlement.com. PRC Data Incident Settlement
How to Reach the Settlement Administrator
The administrator is Simpluris, Inc., P.O. Box 25226, Santa Ana, CA 92799. Class members with questions about a submitted claim, a missing notice, or the status of the case can call (844) 496-1068 or email info@PRCSettlement.com.11PRCSettlement.com. Contact Us