The RMG data breach settlement resolves a class action over the September 2024 cyberattack on Rocky Mountain Gastroenterology Associates and lets affected patients claim up to $1,000 for documented out-of-pocket losses plus two years of free credit and medical identity monitoring. Claim forms are due February 2, 2026.1Rocky Mountain Settlement. FAQ The court has entered an amended order granting final approval.2Rocky Mountain Settlement. Documents
Who Is Covered
The settlement class covers everyone in the United States whose private information was potentially compromised in the September 2024 incident at Rocky Mountain Gastroenterology Associates, an estimated 366,491 people.3ClassAction.org. Davis et al. v. Rocky Mountain Gastroenterology Associates PLLC Settlement Agreement RMG began mailing notification letters to affected individuals on November 13, 2024.4Rocky Mountain Gastroenterology Associates. Substitute Notice for Website If you received one, you are in the class unless you opted out by January 2, 2026.5Rocky Mountain Settlement. Rocky Mountain Settlement Homepage
What You Can Claim
There are two benefits, and you can take both.
Up to $1,000 for Out-of-Pocket Losses
Class members can claim reimbursement of up to $1,000 per person for documented, unreimbursed expenses fairly traceable to the breach. Eligible costs include identity theft or fraud losses, falsified tax returns, credit monitoring you bought after the incident, bank fees, and travel costs such as postage or gasoline. You need supporting documentation, and the losses must have been incurred between September 1, 2024, and the claims deadline.1Rocky Mountain Settlement. FAQ
Two Years of Credit and Medical Monitoring
Every class member is eligible for two years of Cyex Medical Shield Complete, which combines one-bureau credit monitoring with medical information monitoring. The service is delivered through an enrollment code and has a retail value of $14.95 per month.6Becker’s ASC Review. Colorado GI Group Settles Class Action Lawsuit Over Cyberattack
Deadlines and How to File
The claims deadline is February 2, 2026.1Rocky Mountain Settlement. FAQ The opt-out and objection deadline was January 2, 2026, and the final approval hearing was set for January 23, 2026, at 9:00 a.m. at the Jefferson County Court in Golden, Colorado.5Rocky Mountain Settlement. Rocky Mountain Settlement Homepage Payments will follow the resolution of any appeals.6Becker’s ASC Review. Colorado GI Group Settles Class Action Lawsuit Over Cyberattack
The settlement administrator is Simpluris. You can reach them at (833) 417-4917 or info@RockyMountainSettlement.com.1Rocky Mountain Settlement. FAQ
What Was Exposed
RMG detected unusual activity on its network on September 13, 2024, and by September 24 confirmed that an unauthorized party had accessed and potentially copied patient files.4Rocky Mountain Gastroenterology Associates. Substitute Notice for Website The exposed patient information included names combined with dates of birth, addresses, Social Security numbers, medical record numbers, patient account numbers, health insurance identification numbers, and diagnoses and treatment information.7HIPAA Journal. Rocky Mountain Gastroenterology Associates Data Breach Employee names, addresses, dates of birth, and Social Security numbers were also accessed.8Montana Department of Justice. Consumer Notification Letter Knowing exactly what was taken helps when you review bank statements, medical bills, and explanation-of-benefits notices for anything you don’t recognize.