$4M Numotion Data Breach Data Breach Class Action Settlement Claim Up to $15,000 By March 18, 2026
Numotion, a medical equipment provider, established a $4 million class action settlement after two 2024 data breaches exposed personal and protected health information of over 500,000 customers and employees. Class members can claim up to $15,000 for documented losses, receive a pro rata cash payment, and get two years of free credit monitoring—but you must file by March 18, 2026.
Over 602,000 individuals had their data compromised in the March 2024 breach alone, with Social Security numbers, medical records, and financial information exposed through both a ransomware attack and phishing emails.
Who Can Claim the Numotion Settlement
You can file a claim if: You received a notification letter from Numotion about the March 2024 or September 2024 data breaches. You were a Numotion customer, patient, or employee whose personal information was compromised in either breach.
Settlement website: www.numotionsettlement.com (official claim portal)
Who to call: 833-630-5361 (Kroll Settlement Administration)
Your name, date of birth, Social Security number, medical records, insurance information, or financial account details may have been exposed. The March 2024 ransomware attack lasted three days. The September 2024 phishing breach persisted nearly three months—September 2 through November 18.
You’re entitled to compensation and protection services: cash payments for losses, free credit monitoring, and medical monitoring for Social Security breach victims. But you must act by March 18, 2026.
What Happened in the Numotion Data Breaches
When Did the Breaches Occur?
Two separate incidents compromised Numotion data in 2024. The first occurred February 29 through March 2, 2024, when an unauthorized individual accessed Numotion systems in a ransomware attack. This breach affected 602,265 individuals.
The second breach happened September 2 through November 18, 2024, when hackers gained access to employee email accounts through phishing attacks. Employees responded to phishing emails, giving attackers access to accounts containing customer and patient information for nearly three months. This breach affected approximately 529,000 individuals.
What Is Numotion?
United Seating and Mobility LLC, doing business as Numotion, provides wheelchairs, mobility equipment, and assistive technology to individuals with disabilities. The company works with clinicians and health plans to serve people needing Complex Rehab Technology, catheters, and other prescription-based products.
Headquartered in Brentwood, Tennessee, Numotion operates over 150 locations nationwide with more than 1,000 employees. The company serves thousands of customers who depend on specialized medical equipment and mobility devices.
What Personal Information Was Exposed?
The breaches compromised multiple types of sensitive data. Information varied by individual but may have included names, dates of birth, addresses, phone numbers, email addresses, Social Security numbers, driver’s license numbers, financial account information, payment information, health insurance information, medical records, and protected health information about treatments and equipment needs.
A minority of affected individuals had Social Security numbers and driver’s license numbers exposed, creating elevated identity theft risks requiring additional protection.
How Did Numotion Respond?
Numotion discovered the March ransomware attack on March 2, 2024, and launched an investigation. The company discovered the September phishing breach on September 29, 2024, after employees reported suspicious activity.
Following investigations with third-party cybersecurity experts, Numotion determined on January 22, 2025, that customer information was involved. Individual notification letters were mailed to affected individuals. The company offered complimentary credit monitoring and identity theft protection services to individuals whose Social Security numbers were exposed.
What the $4M Numotion Settlement Provides
How Much Can You Receive?
Cash Payment A – Documented Losses: Claim up to $15,000 for actual, unreimbursed out-of-pocket expenses fairly traceable to the breaches. This includes costs for identity theft, fraud, credit monitoring you purchased, credit freezes, professional services, lost time dealing with the breach, and other documented damages.
You must provide third-party documentation like receipts, bank statements, or invoices. Self-prepared handwritten receipts alone aren’t sufficient but can support other documentation.
Cash Payment B – Pro Rata Payment: All class members can claim a pro rata cash payment from the net settlement fund. The amount depends on how many claims are filed. If fewer people claim than expected, your payment increases proportionally. If more people claim, payments decrease proportionally.
What Free Services Are Included?
Credit Monitoring – All Class Members: Everyone in the settlement class receives two years of free credit monitoring through CyEx Identity Defense Plus automatically. You don’t need to file a claim for this benefit.
Medical Monitoring – Social Security Subclass: If your Social Security number was involved in the breaches, you’re eligible for two additional years of medical monitoring through CyEx Medical Shield Pro. You must submit a claim and provide an email address to receive this benefit.
How Is the $4M Allocated?
The settlement fund covers multiple expenses. The “Net Settlement Fund” available for class member claims comes from the $4M total after deducting settlement administration costs, CAFA notice expenses, class representative service awards up to $2,500 each, and attorneys’ fees and costs up to $1,333,333.33 (33% of settlement).
Class counsel also requested an additional $1,333,000 in fees paid separately by Numotion under the “claims-made” portion of the settlement, bringing total attorney fees to up to $2,666,333.33.
Who Qualifies for the Numotion Settlement
Are You a Class Member?
You can claim if you received a notification letter from Numotion about either the March 2024 or September 2024 data incidents. You must be a living person in the United States who was notified that your personal information or protected health information may have been impacted.
Official settlement website: www.numotionsettlement.com Settlement administrator: Kroll Settlement Administration at 833-630-5361
This includes current and former Numotion customers who purchased wheelchairs, mobility equipment, or assistive technology, patients who received medical equipment or services, and employees whose information was stored in Numotion systems.
You’re also in the Social Security subclass if your Social Security number was specifically involved in the breaches. This subclass qualifies for additional medical monitoring benefits beyond standard credit monitoring.
How Do You Verify Eligibility?
Check whether you received a notification letter from Numotion about the data incidents. The letters explained what information was potentially compromised and offered credit monitoring services.
If you’re unsure whether you received notice or whether your data was involved, contact the settlement administrator at 833-630-5361 or visit numotionsettlement.com. Have your personal information ready to verify class membership.
What Proof Do You Need?
For credit monitoring and pro rata cash payments, you must submit a claim form but don’t need to provide loss documentation. For documented out-of-pocket losses up to $15,000, you must provide reasonable third-party documentation showing the losses were fairly traceable to the data incidents and weren’t reimbursed.
Documentation includes receipts, invoices, bank statements, credit reports showing fraudulent accounts, correspondence with creditors, and professional service bills. Att est that losses resulted from the breaches, not other events.
How to File Your Numotion Settlement Claim
Where and When to File
File your claim online at numotionsettlement.com or mail completed forms to Numotion Data Incidents Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391.
Claim deadline: March 18, 2026. Online submissions must be completed by March 18. Mailed claims must be postmarked by March 18, 2026. Missing this deadline forfeits your right to compensation.
What Information to Provide
Complete the claim form with your full name, current address, phone number, and email. Provide information to verify you’re a class member—such as details from your breach notification letter.
If claiming documented losses, itemize each expense with dates, amounts, and descriptions. Attach supporting documentation. For direct deposit, provide banking information including routing and account numbers.
How Claims Are Processed
The settlement administrator Kroll reviews all claims for validity and completeness. Claims with insufficient documentation may be partially approved or denied. You’ll receive notification of your claim status.
Processing begins after the April 2, 2026 final approval hearing. If the court approves the settlement and no appeals are filed, claim processing proceeds. Appeals can delay payments significantly.
Your Rights After a Data Breach
What Companies Must Do
Under state data breach notification laws, companies must notify affected consumers when personal information is compromised. Notification timing varies by state but typically must occur within 30-90 days of breach discovery.
Companies must report breaches to state attorneys general and, for health information, to the Department of Health and Human Services Office for Civil Rights. They should offer free credit monitoring to individuals whose Social Security numbers or financial information was exposed.
What Consumer Protection Laws Require
All 50 states have data breach notification statutes. California’s law (Civil Code § 1798.82) is particularly strict, requiring specific notification content and timing. The Health Insurance Portability and Accountability Act (HIPAA) requires healthcare entities to protect personal health information.
The FTC Act Section 5 prohibits unfair or deceptive practices, including inadequate data security. The FTC has taken enforcement actions against companies with lax security practices that resulted in breaches.
Why Data Breaches Happen
Common causes include ransomware attacks where hackers encrypt systems and demand payment, phishing emails tricking employees into revealing credentials or clicking malicious links, insider threats from employees or contractors, unpatched software vulnerabilities, weak passwords and inadequate access controls, and third-party vendor breaches.
The Numotion breaches involved both ransomware and phishing—two prevalent attack methods targeting healthcare organizations with valuable patient data.
How Data Breach Class Action Settlements Work
The Settlement Process
After breaches occur, affected consumers file lawsuits alleging negligence, failure to implement reasonable security, violation of state data breach laws, and breach of implied contract. Multiple similar lawsuits often get consolidated into class actions.
During discovery, plaintiffs obtain evidence about the breach scope, security failures, and damages. Parties negotiate settlement terms avoiding trial costs and uncertainty. Proposed settlements require court approval after preliminary and final approval hearings.
Once approved, claim periods open. Class members file claims. The settlement administrator processes claims and distributes payments after appeals are resolved or the time to appeal expires.
Why Settlements Are Common
Trials are expensive, time-consuming, and unpredictable. Settlements provide guaranteed relief to class members and allow companies to resolve liability and move forward. Courts encourage settlements as efficient resolutions.
Data breach litigation outcomes are uncertain. Proving damages can be difficult when identity theft hasn’t occurred yet. Settlements provide compensation even without proven actual harm, plus protective services preventing future damage.
What Happens to Unclaimed Funds
If settlement funds remain after all valid claims are paid, the unclaimed amount typically goes to cy pres recipients—nonprofit organizations focused on consumer protection, data security, or privacy advocacy. Courts approve cy pres recipients whose missions align with class member interests.
Some settlements return unclaimed funds to defendants, but consumer protection settlements usually direct remaining funds to organizations benefiting the affected population.
What to Do If You Were Affected
File Your Claim Before March 18, 2026
Visit numotionsettlement.com and complete the online claim form, or download and mail a paper form. Gather documentation of any losses—fraudulent charges, credit monitoring costs, professional services, time spent resolving issues.
Even if you haven’t experienced identity theft yet, file for the pro rata cash payment and free credit monitoring. The risk persists for years after breaches. Don’t leave money unclaimed.
Protect Yourself from Identity Theft
Place fraud alerts on your credit reports by contacting one credit bureau (Equifax, Experian, or TransUnion). The bureau you contact must notify the others. Fraud alerts are free and last one year, renewable.
Consider credit freezes preventing new account openings without your permission. Freezes are free under federal law. Monitor credit reports regularly—you’re entitled to free reports from each bureau annually at AnnualCreditReport.com.
Watch for suspicious activity on existing accounts, phishing emails, unexpected bills or collection notices, and tax filing issues suggesting someone filed returns using your information. Report any fraud immediately to creditors, banks, and the FTC at IdentityTheft.gov.
Your Legal Options Beyond the Settlement
Can You Sue Numotion Separately?
You can opt out of the class action and file an individual lawsuit. Opt-out requests must be mailed and postmarked by March 3, 2026. Once you opt out, you’re not entitled to settlement benefits but preserve your right to sue independently.
Individual lawsuits may recover higher damages if you suffered substantial identity theft, financial losses, or emotional distress. Consult a consumer protection or data breach attorney to evaluate whether individual litigation makes sense for your situation.
Time Limits to Know
State statutes of limitations for data breach claims vary, typically 2-4 years from breach discovery or when you discovered harm. Tennessee, where Numotion is headquartered, has different limitations periods for negligence versus contract claims.
Don’t wait to explore legal options. Evidence becomes harder to gather, memories fade, and statutes of limitations expire. Consult attorneys promptly if considering individual action.
Where to Find Reliable Information
The official settlement website is numotionsettlement.com with claim forms, FAQs, and settlement documents. Contact Kroll Settlement Administration at 833-630-5361 with questions.
Court records are available through PACER (pacer.uscourts.gov) for Case No. 3:24-cv-00545 and Case No. 3:25-cv-00469 in the U.S. District Court for the Middle District of Tennessee.
The FTC provides resources at IdentityTheft.gov for reporting identity theft and creating recovery plans. Get free credit reports at AnnualCreditReport.com. Contact credit bureaus directly for fraud alerts and freezes: Equifax (800-685-1111), Experian (888-397-3742), TransUnion (800-916-8800).
Frequently Asked Questions
What is the Numotion data breach?
Numotion experienced two 2024 data breaches—a March ransomware attack affecting 602,265 people and a September-November phishing breach affecting 529,000 people. Hackers accessed systems and employee email accounts containing customer names, Social Security numbers, dates of birth, medical records, insurance information, and financial data. The $4M settlement compensates affected individuals.
Am I eligible for the $4M settlement?
You’re eligible if you received a notification letter from Numotion about either the March 2024 or September 2024 data incidents stating your personal information or protected health information may have been impacted. You must be a living person in the United States. Contact the settlement administrator at 833-630-5361 if unsure about your eligibility.
How much money can I get from the settlement?
You can claim up to $15,000 for documented out-of-pocket losses traceable to the breaches, plus a pro rata cash payment from the net settlement fund. The pro rata amount depends on how many people file claims—it increases if few claims are filed, decreases if many file. All class members automatically receive two years of free credit monitoring.
How do I file a claim?
Visit numotionsettlement.com to file online or mail completed claim forms to Numotion Data Incidents Settlement, c/o Kroll Settlement Administration, P.O. Box 225391, New York, NY 10150-5391. Claims must be submitted online by March 18, 2026, or postmarked by March 18 if mailed. Provide documentation for any losses you’re claiming.
What is the deadline to file?
The claim deadline is March 18, 2026. Missing this deadline means you forfeit your right to compensation. If you want to opt out and preserve your right to sue individually, opt-out requests must be postmarked by March 3, 2026.
What should I do if I experience identity theft?
Report identity theft immediately to IdentityTheft.gov and create a recovery plan. Place fraud alerts on credit reports by calling any credit bureau. File police reports. Contact creditors and banks about fraudulent accounts or charges. Document everything and keep records for potential reimbursement claims under the settlement.
When will I receive my settlement payment?
The final approval hearing is April 2, 2026. If the court approves the settlement and no appeals are filed, payment processing begins. Appeals can delay payments months or years. Be patient—the settlement administrator will mail checks or process direct deposits after all approvals are final and claims are processed.
Pro Tip: Don’t wait until the March 18 deadline approaches—file your claim now. Claim forms require gathering documentation, and the settlement administrator needs time to process submissions. Filing early avoids last-minute technical issues or mail delays that could cost you compensation.
Disclaimer: This article about the $4M Numotion data breach class action settlement is informational only, based on the official settlement agreement and publicly available court documents. Settlement details may change pending final court approval on April 2, 2026, or if appeals are filed. AllAboutLawyer.com doesn’t represent any party and doesn’t provide legal services or advice. For questions about your eligibility, claim filing, or individual legal options, consult a qualified data breach or consumer protection attorney familiar with your specific circumstances.
Stay informed, stay protected. — AllAboutLawyer.com
Last Updated: January 14, 2026 — We keep this current with the latest legal developments
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah