$500K Whitman Hospital & Medical Clinics Data Breach Settlement, Are You Eligible to Claim? Claim deadline is June 24, 2026
Whitman County Public Hospital District No. 3, doing business as Whitman Hospital & Medical Clinics, agreed to pay $500,000 to settle a class action lawsuit over a data breach that occurred between December 26, 2024, and February 28, 2025. The breach exposed sensitive patient information including Social Security numbers, medical records, and financial account details. Eligible patients can claim up to $5,000 for documented losses or a flat cash payment of approximately $60. The claim deadline is June 24, 2026.
Quick Facts
| Field | Detail |
| Settlement Amount | $500,000 |
| Claim Deadline | June 24, 2026 |
| Who Qualifies | U.S. residents whose private information was impacted in the Dec. 26, 2024 – Feb. 28, 2025 data incident |
| Payout Per Person | Up to $5,000 (with documentation) or ~$60 flat cash (no proof needed) |
| Proof Required | Yes — for documented loss claims; No — for flat $60 cash payment |
| Settlement Status | Preliminarily Approved — Open for Claims |
| Administrator | EisnerAmper (Whitman Settlement Administrator) |
| Official Website | whitmansettlement.com |
Where Things Stand Right Now
- The settlement is currently open for claims at whitmansettlement.com. You can file online right now or download and mail a paper claim form.
- The opt-out and objection deadlines both fall on June 9, 2026 — act before then if you want to exclude yourself or challenge the settlement.
- The final approval hearing is scheduled for July 9, 2026, at 10:00 a.m. PT in the U.S. District Court for the Eastern District of Washington.
What Happened at Whitman Hospital?
Between December 26, 2024, and February 28, 2025, a criminal actor broke into Whitman Hospital & Medical Clinics’ computer systems and gained access to sensitive patient information. The lawsuit, filed on May 28, 2025 by plaintiff Rae Whitman, alleged the hospital failed to put adequate cybersecurity protections in place to stop the attack.
The exposed data included a combination of patient names, dates of birth, home addresses, Social Security numbers, financial account information, diagnosis details, laboratory results, medication records, health insurance information, provider names, and treatment dates. Not every patient had all of these data types exposed, but any combination of them puts affected individuals at serious risk of identity theft and medical fraud.

The lawsuit accused Whitman Hospital of negligence, breach of implied contract, unjust enrichment, and violations of two Washington state laws — the Washington Data Breach Statute and the Washington Uniform Health Care Information Act. The hospital denies all wrongdoing but agreed to settle to avoid the expense and uncertainty of a trial.
Who Can File a Claim?
- You may qualify if you are a living individual residing in the United States whose private information was compromised in the data incident that occurred between December 26, 2024, and February 28, 2025.
- You may qualify if you were a patient at Whitman Hospital & Medical Clinics and received a breach notification letter or notice about this specific incident.
- You may qualify if your name, Social Security number, medical records, financial account details, or other sensitive health information was accessed during the breach window.
- You do not qualify if you are a director, officer, or employee of Whitman Hospital, or if you were a government entity.
- You do not need to prove you suffered identity theft or actual financial harm to claim the flat $60 cash payment or two years of free credit monitoring.
If you are unsure whether you are part of the settlement class, call the settlement administrator at 1-844-747-2148 or email [email protected].
How Much Can You Receive?
The settlement gives you three benefit options. You can combine credit monitoring with either cash option.
Option 1 — Documented Out-of-Pocket Loss Reimbursement (Up to $5,000)
If you suffered real financial losses tied directly to this breach — such as unauthorized charges on your accounts, fees paid for credit freezes, identity theft insurance premiums, or costs from dealing with fraudulent activity — you can claim up to $5,000 in reimbursement. You must submit reasonable supporting documentation such as bank statements, phone records, emails, letters, or receipts. Personal statements alone do not qualify as documentation but can be submitted alongside other evidence to provide context.
Option 2 — Flat Cash Payment (Approximately $60, No Proof Needed)
If you had no documented financial losses or prefer a simpler path, you can claim a flat alternative cash payment currently estimated at $60. The final amount may go up or down depending on how many valid claims are submitted. No documentation is required beyond confirming your eligibility on the claim form.
Option 3 — Two Years of Free Credit Monitoring (Can Be Combined With Either Cash Option)
In addition to whichever cash option you choose, you can also elect two years of IDX Identity Protection Services. This includes single-bureau credit monitoring, dark web monitoring, $1,000,000 reimbursement insurance, member advisory services, and lost wallet assistance. This benefit is available to all class members who file a valid claim.
How to File Your Claim Right Now
Step 1 — Visit the official settlement website at whitmansettlement.com and click “Submit a Claim.”
Step 2 — Fill in your personal details including your full name, mailing address, email address, and phone number.
Step 3 — Select your benefit option — documented losses (Cash Payment A) or flat cash (Cash Payment B) — and indicate whether you also want credit monitoring.
Step 4 — If claiming documented losses, upload or attach your supporting documentation such as bank statements, receipts, correspondence, or invoices showing expenses tied to the breach.
Step 5 — Select your preferred payment method: PayPal, Venmo, Zelle, or a physical check mailed to your address.
Step 6 — Submit your claim online before June 24, 2026, and save your confirmation. If mailing a paper form, it must be postmarked by June 24, 2026. Send to: Whitman Settlement Administrator, P.O. Box 1668, Baton Rouge, LA 70821.
Estimated time to complete: 5 minutes for the flat $60 cash option. 15–20 minutes if you are gathering documents for a loss claim.
Important Deadlines
| Milestone | Date |
| Lawsuit Filed | May 28, 2025 |
| Breach Window | December 26, 2024 – February 28, 2025 |
| Claims Period Opens | Now — portal is live |
| Opt-Out Deadline | June 9, 2026 |
| Objection Deadline | June 6, 2026 (must be filed with court) / June 9, 2026 (postmarked to administrator) |
| Claim Filing Deadline | June 24, 2026 |
| Final Approval Hearing | July 9, 2026 at 10:00 a.m. PT |
| Expected Payment Date | After final approval and resolution of any appeals |
Frequently Asked Questions
Do I need a lawyer to file a claim?
No. The claim form is straightforward and patients can handle it on their own at whitmansettlement.com. The court has already appointed class counsel — Kenneth Grunfeld of Kopelowitz Ostrow P.A. and Kaleigh N. Boyd of McNaul Ebel PLLC — to represent all class members at no cost to you. You only need your own lawyer if you want to opt out and pursue a separate lawsuit.
Is this settlement legitimate?
Yes. This is a real federal court case — Rae Whitman v. Whitman County Public Hospital District #3, d/b/a Whitman Hospital & Medical Center, Case No. 2:25-cv-00246-SAB — filed in the U.S. District Court for the Eastern District of Washington. The official settlement website is whitmansettlement.com and the settlement administrator is EisnerAmper, a well-established professional services firm.
When will I receive my payment?
Payments go out after the court grants final approval and the settlement becomes final. The final approval hearing is July 9, 2026. If no appeals follow, you can expect payments to be distributed sometime after that date. Check whitmansettlement.com for updates on the payment timeline.
What if I missed the claim deadline?
The deadline is June 24, 2026 — it has not passed. If you miss it, you forfeit your right to any cash payment or credit monitoring benefit from this settlement. You also remain bound by the settlement and cannot sue Whitman Hospital separately over this breach unless you opt out before June 9, 2026.
Will this settlement payment affect my taxes?
It depends on how your payment is classified. Reimbursements for actual out-of-pocket losses you suffered are generally not taxable. Flat cash payments received without documented losses may be treated as taxable income. Consult a tax professional if you are unsure how your specific payment will be handled.
What types of medical information were exposed in the Whitman Hospital breach?
The breach exposed a combination of patient names, dates of birth, home addresses, Social Security numbers, financial account information, diagnosis details, lab results, medication records, health insurance information, provider names, and treatment dates. Not every patient had all of these data types exposed — the combination varied by individual.
Can I opt out and sue Whitman Hospital on my own?
Yes. If you want to keep the right to pursue your own lawsuit against Whitman Hospital over this breach, you must mail a written opt-out request to the settlement administrator, postmarked by June 9, 2026. Your request must include your full name, address, phone number, email address, a clear statement that you want to be excluded, and your physical signature. You cannot opt out by phone or email.
What if my contact or payment information changes after I file my claim?
Contact the settlement administrator right away. You can update your information by calling 1-844-747-2148, emailing [email protected], or writing to Whitman Settlement Administrator, P.O. Box 1668, Baton Rouge, LA 70821.
Sources & References
- Official Settlement Website — whitmansettlement.com
- Official Claim Form (Online)
- Settlement Agreement (PDF)
- Official Settlement FAQ Page
Last Updated: April 8, 2026
Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.
About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah
