ConnectOnCall $4.95M Data Breach Settlement Reached After Cyberattack Exposes 900K+ Individuals
A $4.95 million class action settlement has been finalized between ConnectOnCall.com LLC and Phreesia Inc. following a cyberattack that compromised the sensitive data of over 900,000 individuals in the U.S. The breach, detected between February 16 and May 12, 2024, exposed provider-patient communications and other private information.
The lawsuit alleged negligence, breach of contract, invasion of privacy, and unjust enrichment, though the defendants deny any wrongdoing, opting to settle to avoid prolonged litigation.
Who Qualifies for Compensation?
Eligible class members include U.S. residents whose data was potentially exposed in the breach. Affected individuals can file claims for:
- Up to $5,000 for documented out-of-pocket losses (e.g., fraud, identity theft).
- Up to $75 for those without documented losses, with final payouts adjusted based on claim volume.
- Two years of free dark web and medical identity monitoring via CyEx Medical Shield Complete, including real-time alerts and $1 million in identity theft insurance.
How to File a Claim
Claims must be submitted online or by mail by November 2, 2026, using a unique ID and PIN from settlement notices. Proof of losses (receipts, bank statements, etc.) is required for higher payouts. Payments will be distributed via PayPal, Venmo, Zelle, ACH, digital Mastercard, or check approximately 80 days after final court approval (scheduled for November 17, 2026).
Settlement Fund Allocation
The $4.95 million fund covers:
- $490,000 for administration costs.
- Up to $1.65 million in attorneys’ fees plus expenses.
- $2,500 service awards for class representatives.
- Remaining funds for approved claimants and monitoring services.
The deadline to opt out of the settlement is October 19, 2026. The breach was discovered after an unauthorized party accessed ConnectOnCall’s platform and exfiltrated data, prompting the lawsuit.
Source: https://www.claimdepot.com/settlements/connect-on-call-settlement
Phreesia cybersecurity rating report: https://www.rankiteo.com/company/phreesia
"id": "PHR1787948971",
"linkid": "phreesia",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '900,000+ individuals',
'industry': 'Healthcare/Telecommunications',
'location': 'U.S.',
'name': 'ConnectOnCall.com LLC',
'type': 'Company'},
{'customers_affected': '900,000+ individuals',
'industry': 'Healthcare/Software',
'location': 'U.S.',
'name': 'Phreesia Inc.',
'type': 'Company'}],
'customer_advisories': 'Claims submission instructions for affected '
'individuals',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': '900,000+',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High (personally identifiable and '
'medical information)',
'type_of_data_compromised': ['Provider-patient communications',
'Private information']},
'date_detected': '2024-02-16',
'description': 'A $4.95 million class action settlement has been finalized '
'between ConnectOnCall.com LLC and Phreesia Inc. following a '
'cyberattack that compromised the sensitive data of over '
'900,000 individuals in the U.S. The breach, detected between '
'February 16 and May 12, 2024, exposed provider-patient '
'communications and other private information. The lawsuit '
'alleged negligence, breach of contract, invasion of privacy, '
'and unjust enrichment, though the defendants deny any '
'wrongdoing, opting to settle to avoid prolonged litigation.',
'impact': {'data_compromised': 'Provider-patient communications and other '
'private information',
'financial_loss': '$4.95M settlement fund',
'identity_theft_risk': 'High (900,000+ individuals affected)',
'legal_liabilities': 'Class action lawsuit (negligence, breach of '
'contract, invasion of privacy, unjust '
'enrichment)',
'systems_affected': 'ConnectOnCall’s platform'},
'investigation_status': 'Settlement finalized',
'references': [{'source': 'Settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Settlement notices to affected '
'individuals',
'enhanced_monitoring': 'Two years of free dark web and medical '
'identity monitoring (CyEx Medical Shield '
'Complete)'},
'title': 'ConnectOnCall $4.95M Data Breach Settlement Reached After '
'Cyberattack Exposes 900K+ Individuals',
'type': 'Data Breach'}