Continuum Health Data Breach Settlement: Key Details and Payouts
A class action settlement has been reached for U.S. residents affected by a data breach at Continuum Health Alliance LLC and Consensus Medical Group LLC, which exposed the personal and protected health information of approximately 380,000 individuals during a cybersecurity incident on October 18–19, 2023.
Eligible class members—those who received a breach notification—may file claims for compensation or services under the $3.1 million settlement fund. Claim options include:
- Up to $5,000 for documented out-of-pocket losses (e.g., fraud-related expenses) with supporting evidence.
- An estimated $75 cash payment for those without documented losses, with the final amount adjusted based on the number of valid claims.
- Two years of CyEx medical data monitoring, including credit monitoring, dark web scanning, identity theft insurance, and fraud resolution support.
Claims must be submitted online or by mail by March 2, 2026, using the class member ID from the settlement notice. The settlement administrator will distribute payments and monitoring codes approximately 75 days after final court approval, scheduled for March 16, 2026.
The lawsuit alleged the companies failed to adequately protect sensitive data, though they denied wrongdoing and settled to avoid litigation costs. The fund will cover administrative expenses, attorneys’ fees (up to $1.03 million), service awards for class representatives, and remaining payouts to claimants. The opt-out deadline is February 17, 2026.
Source: https://www.claimdepot.com/settlements/continuum-health-data-incident-settlement
Consensus Health cybersecurity rating report: https://www.rankiteo.com/company/consensus-health
Consensus Health cybersecurity rating report: https://www.rankiteo.com/company/consensus-health
"id": "CONCON1766685282",
"linkid": "consensus-health, consensus-health",
"type": "Breach",
"date": "10/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '380,000',
'industry': 'Healthcare',
'location': 'United States',
'name': 'Continuum Health Alliance LLC',
'type': 'Healthcare'},
{'customers_affected': '380,000',
'industry': 'Healthcare',
'location': 'United States',
'name': 'Consensus Medical Group LLC',
'type': 'Healthcare'}],
'customer_advisories': 'Notices sent to affected individuals with claim '
'instructions',
'data_breach': {'number_of_records_exposed': '380,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal information',
'Protected health information']},
'date_detected': '2023-10-18',
'description': 'Continuum Health Alliance LLC and Consensus Medical Group LLC '
'agreed to settle a lawsuit alleging they failed to adequately '
'protect private information during a cybersecurity incident '
'that occurred Oct. 18-19, 2023. The data breach compromised '
'the personal and protected health information of an estimated '
'380,000 individuals.',
'impact': {'data_compromised': 'Personal and protected health information',
'financial_loss': '$3,100,000 (settlement fund)',
'identity_theft_risk': 'High (identity theft insurance included in '
'settlement)',
'legal_liabilities': 'Class action lawsuit settlement'},
'investigation_status': 'Settled',
'post_incident_analysis': {'root_causes': 'Failure to adequately protect '
'private information'},
'references': [{'source': 'Class action settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Notices sent to affected individuals',
'enhanced_monitoring': 'Two years of CyEx medical data '
'monitoring (credit monitoring, dark web '
'scanning, etc.)',
'third_party_assistance': 'Kroll Settlement Administration LLC'},
'title': 'Continuum Health Data Breach Class Action Settlement',
'type': 'Data Breach'}