Datavant Data Breach Settlement

Health data company Datavant (Ciox Health) faced a class action after a phishing email let an outsider into an employee mailbox for two days in May 2024, potentially exposing Social Security numbers, financial details, and medical information. The company agreed to a $900,000 fund without admitting fault. Class members can seek up to $5,000 in documented losses with receipts, or take a no-proof pro rata cash payment, and can also enroll in identity monitoring. Claims are due August 18, 2026, with a final approval hearing set for September 4, 2026 in Arizona.

People whose personal or health information may have been exposed when a Datavant employee's email account was accessed by an intruder on May 8-9, 2024, generally those who received a settlement notice. About 58,000 individuals are covered.

Up to $5,000 for documented out-of-pocket losses, or a pro rata cash payment requiring no proof; identity monitoring is also offered.

No payment amount is ever guaranteed. Pro rata payouts shrink as more valid claims come in, and every payment waits on final court approval and any appeals.

Partial proof: the base payment does not require documents, but higher payment tiers (such as documented-loss reimbursement) do. You can usually file the simple tier with just the claim form, or attach records to claim more.