Truepill Settlement: $7.5M Data Breach Class Action

The Truepill settlement is a $7.5 million class action resolution of claims arising from a 2023 data breach at PostMeds, Inc., which does business as Truepill. A federal judge in the Northern District of California gave the deal final approval on June 17, 2025, and class members have reported receiving settlement checks beginning in late January 2026.¹² PostMeds admitted no wrongdoing.³

Who Was Covered

The class includes all U.S. residents who received a notification letter around October 30, 2023, telling them their private information may have been exposed in the incident.⁴ There is no separate California subclass; every class member nationwide was eligible for the same benefits. The U.S. Department of Health and Human Services logged the breach as affecting 2,364,359 people.³

What Claimants Could Receive

The $7.5 million fund is non-reversionary, so unclaimed money does not go back to the company.⁵ Class members who filed a valid claim could choose from two benefits, and could combine one with the other:

Reimbursement of up to $4,000 per person for documented out-of-pocket losses tied to the breach, such as unreimbursed fraud losses, credit repair costs, and related fees.⁶
Either a pro rata cash payment from the remaining fund, or one year of data protection and monitoring services through Cyex, which pairs credit and dark-web monitoring with $1 million in fraud insurance and a separate $1 million medical-identity insurance policy.⁶

The court’s preliminary approval order estimated individual cash payouts between $45 and $240 after fees and other deductions.⁷ At least one class member has reported receiving a check for $107.² Attorneys’ fees were capped at $2.5 million, and each named class representative could receive a service award of up to $1,500.⁶

Key Dates

The claim filing deadline was May 12, 2025, and the deadline to opt out or object was April 12, 2025. Both have passed.⁵ The court held its final approval hearing on June 12, 2025, entered the final approval order on June 17, 2025, and a stipulated judgment followed on July 8, 2025.¹

Approved claims were to be paid within 30 days of the settlement’s “Effective Date,” which fell 30 days after final approval so long as no appeals were filed.⁴ No appeals appear in the court record, and payments began going out in late January 2026.² Checks are void 90 days after they are issued. If a check goes uncashed and voids out, the recipient has 30 days to request reissuance.

What the Breach Exposed

An unauthorized party accessed PostMeds files between August 30 and September 1, 2023. The company discovered the intrusion on August 31 and started sending notification letters on October 30, 2023. The files contained patient names, medication types, and in some cases demographic information and prescribing physician names. PostMeds said Social Security numbers were not involved.⁸

The consolidated case, In Re: Post Meds, Inc. Data Breach Litigation, Case No. 4:23-cv-05710-HSG, proceeded before Judge Haywood S. Gilliam Jr. Plaintiffs alleged that PostMeds negligently failed to implement reasonable security measures and that the breach was “foreseeable and preventable,” bringing claims for negligence, breach of implied contract, and violations of the California Confidentiality of Medical Information Act, Unfair Competition Law, and Customer Records Act.³

Checking on a Claim

Epiq Global is the settlement administrator. Class members with a filed claim can check status at TruePillSettlement.com using the unique ID and PIN from their notice, or contact the administrator at 1-888-792-3614 or info@TruePillSettlement.com.⁹ People who never filed a claim by the May 12, 2025 deadline are not eligible for a payment under this settlement.⁵

1
Justia. In Re PostMeds Inc. Data Breach Litigation, Stipulated Judgment
2
Top Class Actions. PostMeds Truepill Data Breach Class Action Settlement
3
HIPAA Journal. PostMeds Truepill Sued Over 2.3 Million Record Data Breach
4
ClassAction.org. PostMeds Inc. Data Breach Litigation Settlement Agreement
5
TruePill Settlement. TruePill Settlement Home
6
TruePill Settlement. TruePill Settlement FAQ
7
ClassAction.org. $7.5 Million Truepill Settlement Resolves PostMeds Data Breach Lawsuit
8
Fierce Healthcare. Digital Pharmacy Startup Truepill Confirms Hackers Accessed Health Data
9
Claim Depot. TruePill Settlement