Yale New Haven $18M Settlement: Claims, Dates, and Coverage

Yale New Haven Health agreed to an $18 million class action settlement to resolve claims stemming from a March 2025 data breach that affected roughly 5.6 million patients. A federal judge in Connecticut granted final approval on March 3, 2026, and payments to eligible class members began on May 27, 2026.¹

Who Is Covered

The settlement class includes all living U.S. residents who received a notice from Yale New Haven Health Services Corporation (YNHHS) informing them their personal information may have been affected by the incident detected on March 8, 2025. Directors, officers, and agents of YNHHS, government entities, the presiding judge and court staff, and anyone found criminally responsible for the breach are excluded.²

Notification letters went out starting April 14, 2025. If you didn’t receive one, you likely aren’t a class member.³

What You Can Claim

Class members had a choice between two cash tracks, and could also add credit monitoring on top of either one.

Documented Losses (Up to $5,000)

This track reimburses out-of-pocket costs tied to the breach: expenses from identity theft or fraud, credit freeze fees, notary fees, and similar costs. Claimants had to submit receipts or other documentation to be eligible for up to $5,000.²

Flat Cash Payment (Estimated $100)

Class members who didn’t want to gather documentation could take a flat alternate cash payment estimated at around $100. The final amount may go up or down depending on how many valid claims were filed. Documented-loss claims are paid first from the fund; the remaining money is divided among alternate cash claimants on a pro rata basis.²

Two Years of Medical Data Monitoring

In addition to either cash option, class members could elect two years of medical data monitoring through CyEx. The service includes real-time credit file monitoring with one bureau, dark web scanning with alerts, security freeze assistance, access to fraud resolution agents, and $1 million in identity theft insurance with no deductible. Those who signed up receive activation codes from the settlement administrator.⁴

This monitoring is separate from the free Experian IdentityWorks membership YNHHS offered patients on its own after the breach.⁵

Key Dates and Payment

The claim filing deadline was February 18, 2026.⁶ The court held its final approval hearing on March 3, 2026, and approved the settlement. Payments began going out on May 27, 2026.¹

Approved claimants could receive their money by PayPal, Venmo, Zelle, virtual prepaid card, or paper check to the address on the claim form.⁷

The $18 million fund is non-reversionary, meaning any leftover money stays with class members rather than returning to YNHHS. The same fund also covers settlement administration, attorneys’ fees of up to one-third of the total, litigation costs, and service awards of up to $2,500 for each named class representative.⁴

What Information Was Exposed

The data taken varied by patient. It could include names, dates of birth, addresses, phone numbers, email addresses, race or ethnicity, Social Security numbers, patient types, and medical record numbers.⁸ YNHHS said its electronic health record system was not accessed, and no treatment information, financial account data, or payment card details were compromised.⁹

The incident affected 5,556,702 people, making it the largest healthcare data breach reported to federal regulators in 2025.³

What the Settlement Does Not Cover

YNHHS did not admit fault or liability as part of the agreement.⁴ The settlement also resolves only the private civil claims brought by affected patients. It does not preclude separate action by federal or state regulators. YNHHS reported the breach to the HHS Office for Civil Rights on April 11, 2025, and as of mid-2026 no formal OCR enforcement action or state attorney general investigation had been publicly confirmed.³

1
Yale New Haven Settlement. Yale New Haven Health Data Incident Settlement
2
Yale New Haven Settlement. Frequently Asked Questions
3
HIPAA Journal. Yale New Haven Health System Data Breach
4
Classaction.org. In Re Yale New Haven Health Services Corp Settlement Agreement
5
Mass.gov. Yale New Haven Health System Data Breach Notice
6
Top Class Actions. $18M Yale New Haven Health Services Data Breach Class Action Settlement
7
Claim Depot. Yale New Haven Settlement
8
Yale New Haven Health. Legal Notices
9
Healthcare Finance News. Yale New Haven Health Data Breach Affects 5 Million People