The Shields data settlement is a $15.35 million class action deal resolving claims against Shields Health Care Group over a March 2022 cyberattack that exposed personal and medical information belonging to roughly 2.38 million people. Both the federal court in Massachusetts and the Norfolk Superior Court granted final approval in January 2026. Class members who submitted valid claims by the December 3, 2025 deadline are now waiting on payment; no distribution date has been announced.1Shields Data Settlement. Shields Data Incident Settlement
What the Settlement Covers
Between March 7 and March 21, 2022, an unauthorized intruder had intermittent access to Shields’ network and stole files containing names, Social Security numbers, dates of birth, contact information, billing and insurance details, medical record numbers, diagnoses, and treatment records.2HIPAA Journal. Shields Health Care Data Breach Settlement Shields disclosed the breach publicly on June 7, 2022 and began mailing notification letters on July 25, 2022.3Berman Tabacco. Shields Health Care Group Data Breach Litigation The litigation identified 2,382,578 affected people.
Shields agreed to pay $15,350,000 into a common settlement fund and to maintain enhanced data security, including system remediation and an expanded IT workforce.4TechTarget. Shields Health Care Group Settles Breach Lawsuit for $15.35M The company denies any wrongdoing.2HIPAA Journal. Shields Health Care Data Breach Settlement
Who Was Eligible
The class covered everyone in the United States whose information Shields identified as potentially affected by the breach. It was split into two subclasses: a federal subclass covering residents of every state except Massachusetts, and a Massachusetts state subclass. Anyone who received a Shields notification letter was automatically included. People who did not receive a letter could still qualify by providing documentation showing their data was affected.1Shields Data Settlement. Shields Data Incident Settlement
One important difference between the subclasses: members of the federal class could opt out and preserve their right to sue Shields on their own, but Massachusetts residents could not opt out.5ClassAction.org. Komar v. Shields Health Care Group Notice
How Much Class Members Can Receive
Claimants had three options, and could choose the one that best fit their situation.
Ordinary Out-of-Pocket Losses
Up to $2,500 for documented breach-related expenses such as credit monitoring fees, postage, phone calls, and mileage. Claimants could also seek payment for up to five hours of time spent dealing with the breach, valued at $30 per hour.
Extraordinary Losses
Up to $25,000 for documented costs directly traceable to identity theft, fraud, or misuse of information from this breach, plus up to 20 hours of lost time at $30 per hour. The $25,000 figure is a hard cap on any combination of ordinary and extraordinary claims.
Alternative Cash Payment
A flat $50, with no documentation required, available to any class member who preferred a simple payout.
Out-of-pocket and extraordinary claims required third-party documentation such as receipts or invoices; self-prepared records were not accepted. If money remained in the fund after approved claims and expenses, individual payments could be increased pro rata by up to an additional $400 above the claimed amount.6Shields Data Settlement. Shields Data Incident Settlement – Frequently Asked Questions
Where the Case Stands Now
The federal court granted preliminary approval on September 9, 2025, and the Massachusetts state court did the same on September 11, 2025.7ClassAction.org. $15.35M Shields Health Group Settlement The exclusion and objection deadline was November 25, 2025, and the claim deadline was December 3, 2025. A joint final approval hearing was held on December 16, 2025 in Courtroom 10 of the Norfolk Superior Court.6Shields Data Settlement. Shields Data Incident Settlement – Frequently Asked Questions Both courts issued final approval orders in January 2026.8Shields Data Settlement. Important Case Documents
As of mid-2026, the settlement is in post-approval administration. No objections or appeals have been publicly reported. The official settlement website remains active but has not announced a specific payment distribution date.1Shields Data Settlement. Shields Data Incident Settlement Settlement notices warned that any appeal could delay distribution by a year or more, though none appears to have been filed.6Shields Data Settlement. Shields Data Incident Settlement – Frequently Asked Questions
How to Check on Your Claim
Class members were notified by postcard containing a unique login ID and PIN for filing online at ShieldsDataSettlement.com.1Shields Data Settlement. Shields Data Incident Settlement The claims administrator is Analytics Consulting LLC. You can reach the administrator by phone at 855-361-2172, by email at ShieldsDataIncident@noticeadministrator.com, or by mail at P.O. Box 2006, Chanhassen, MN 55317-2006.7ClassAction.org. $15.35M Shields Health Group Settlement The site and its claims portal are court-authorized, and the full settlement notice and case documents can be downloaded there.