Baptist Health Data Breach Class Action Settlement, Claim Up to $4,080 Plus Credit Monitoring

People whose information may have been exposed in a 2024 cyberattack on Baptist Health Medical Center-Drew County in Arkansas can claim benefits from a proposed class action settlement. Those benefits include two years of free credit monitoring, payment for time spent dealing with the breach, and reimbursement of documented losses. The maximum cash is $4,080: up to $4,000 for documented identity theft or fraud losses plus up to $80 for lost time.

You have to file a claim to get anything, and the deadline is December 8, 2026. The deadline to opt out or object is November 9, 2026. The Circuit Court of Lincoln County, Arkansas has not yet given final approval, and Baptist Health denies any wrongdoing.

This is a different case from the 2022 breach at Baptist Medical Center and Resolute Health Hospital in Texas. The settlement covered here involves the Drew County hospital in Monticello, Arkansas.

Official settlement website: BHSettlement.com

Baptist Health Data Incident Settlement: Quick Facts

Detail	Information
Case name	Latanya Frazier & Chanta Ringo v. Baptist Health
Case number	40CV-25-62
Court	Circuit Court of Lincoln County, Arkansas, Civil Division
Defendant	Baptist Health d/b/a Baptist Health Medical Center – Drew County
Named plaintiffs	Latanya Frazier and Chanta Ringo
Who is covered	Anyone whose private information was potentially impacted in the data incident, including everyone who received notice of it
Credit monitoring	Two years of one-bureau monitoring with $1 million in identity theft insurance
Lost-time payment	Up to $80 (four hours at $20 an hour)
Documented losses	Choose one: up to $400 in ordinary out-of-pocket losses, or up to $4,000 in identity theft or fraud losses
Claim deadline	December 8, 2026 (online, or postmarked)
Opt-out and objection deadline	November 9, 2026
Final approval hearing	February 4, 2027, 10:00 a.m. Central Time, Lincoln County Circuit Court, 300 South Drew Street, Star City, Arkansas
Final approval status	Pending
Settlement administrator	Simpluris, (866) 606-0682

The settlement website does not state a total settlement fund, so this article does not report one. The clearest figures are the benefit caps above. Benefits depend on the claim type, your supporting evidence and the settlement terms, and there is no flat payment for everyone.

What Happened in the Baptist Health Drew County Data Breach?

According to the settlement website, between April and July 2024 a criminal third party gained unauthorized access to Baptist Health’s network and may have accessed certain files. Baptist Health’s own notice gives the dates as April 22, 2024 through July 8, 2024, when the hospital was alerted to unusual activity in its IT environment, notified law enforcement and brought in a forensic firm.

The files may have included some combination of names, addresses, dates of birth, diagnoses, treatment information and provider names. The hospital’s August 2024 notice also lists medical record numbers and dates of treatment. The materials describe combinations of information that may have been involved, and not every person’s records contained every category. Baptist Health began notifying patients on August 30, 2024. Reporting at the time said the hospital told federal regulators 5,207 people were involved, though the settlement class is defined more broadly than that count.

Latanya Frazier and Chanta Ringo sued Baptist Health, and the two sides agreed to settle. The lawsuit asserts claims about how the hospital handled and protected patient information. The court has not decided who is right, and Baptist Health denies all allegations of wrongdoing and liability. The settlement is not an admission that it violated the law.

Which Laws Apply to the Baptist Health Data Breach Class Action?

The settlement materials do not list every legal claim. These are the laws that generally govern a health care data breach like this one in Arkansas, so check the complaint for the exact counts.

• Negligence (Arkansas common law). Data breach lawsuits commonly claim that an organization failed to use reasonable care to protect sensitive information.
• Arkansas Deceptive Trade Practices Act, Ark. Code Ann. § 4-88-101 et seq. Arkansas’s consumer protection statute is often cited in data security cases.
• Arkansas Personal Information Protection Act, Ark. Code Ann. § 4-110-101 et seq. It requires businesses to use reasonable security and to notify people of certain breaches.
• HIPAA Privacy, Security and Breach Notification Rules, 45 C.F.R. Parts 160 and 164. These federal rules set standards for protected health information and require covered entities to notify affected people, and for larger breaches, to report to the U.S. Department of Health and Human Services. HIPAA does not give individuals a right to sue directly, which is why plaintiffs use state-law claims.
• Fair Credit Reporting Act, 15 U.S.C. § 1681c-1. Federal law gives consumers free credit security freezes. That may matter if you are thinking about claiming “credit freeze fees,” which the settlement lists as an example of an ordinary loss.
• Arkansas Rule of Civil Procedure 23. It governs class actions in Arkansas courts, including court approval of a class settlement after notice and a hearing. That is why the court must hold the February 4, 2027 fairness hearing.
• Tax rules. Settlement payments may have tax consequences. Ask a tax professional how yours should be reported.

If you are worried about identity theft after a health data breach, you can also read about a similar case in Datavant $900K Data Breach Settlement, File Claim By Aug 18.

Who Is Included in the Baptist Health Data Breach Settlement?

The class is all individuals whose private information was potentially impacted in the data incident, including everyone who received notice of it. If you received a notice letter about the incident or about this settlement, you are a settlement class member. You can also call the administrator to ask whether you are included.

The class excludes Baptist Health’s affiliates, parents, subsidiaries, directors, officers and agents; governmental entities; anyone who validly opts out; the judges on the case, their immediate families and court staff; and anyone who carried out the data incident.

Not everyone who ever went to a Baptist Health facility is covered. The settlement concerns this specific incident at the Drew County hospital. Other hospitals and other incidents have their own settlements.

You do not need to have suffered identity theft to qualify. Credit monitoring and the lost-time payment are available without a fraud loss, and the higher identity theft benefit is only for people who can show qualifying monetary losses.

What Does the Baptist Health Data Breach Settlement Pay?

Benefits are available only by filing a claim.

Credit monitoring. Every class member can claim two years of one-bureau credit monitoring with $1 million in identity theft insurance. It includes real-time monitoring of your credit file, dark web scanning, public records monitoring and access to a fraud resolution agent. It is a service, not a cash payment.

Lost time: up to $80. Up to four hours at $20 an hour. The time must have been spent on tasks related to the breach, such as changing passwords, investigating suspicious account activity or researching the incident. You briefly describe how you spent the time and attest to it. Do not claim time you did not spend.

Documented out-of-pocket losses. Choose one of these two:

• Ordinary losses, up to $400. Real, documented expenses caused by the breach, such as credit report fees, credit freeze fees, the cost of replacing IDs, or postage to contact banks. The loss must have occurred between April 22, 2024 and December 8, 2026. You need proof such as receipts. Your own notes can support other proof but are not enough alone.
• Identity theft or fraud losses, up to $4,000. You must show that the theft or fraud was probably caused by the breach, that the loss is not already covered under the ordinary losses category, and that you tried to prevent the loss or get your money back, for example through insurance you already have. The same date window and proof requirements apply.

You cannot claim both loss categories. You can combine either one with the lost-time payment and credit monitoring. The $4,080 maximum is $4,000 plus $80 and is based on the published caps, not a guaranteed payment.

The settlement website does not say whether payments could be reduced if claims exceed a limit. The full Settlement Agreement, which the site links to, would address that, so read it before relying on a specific amount.

How to File a Baptist Health Data Breach Settlement Claim

1. Find your notice. The online form asks for a Login ID and PIN from your settlement notice. If you lost them, email [email protected] with your full name and mailing address, or call (866) 606-0682. Do not use unofficial websites that claim to process claims.
2. Choose your benefits. Credit monitoring, the lost-time payment, and either the ordinary losses or the identity theft/fraud losses option.
3. Gather documents. Receipts or other records for any loss claim. For fraud losses, include evidence linking the loss to the breach and your efforts to prevent or recover it.
4. Submit by December 8, 2026. File at the official claim page, or mail a signed claim form to Baptist Health Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958, postmarked by December 8, 2026. You can call or email to request a paper form.
5. Keep copies. Submission does not guarantee every requested benefit is approved.

Should You File a Claim, Opt Out or Object in the Baptist Health Settlement?

Your choice	What happens	Deadline
File a claim	You can get the benefits above if the settlement is approved. You give up the right to sue over the released claims	December 8, 2026
Do nothing	No benefits, and you give up the right to sue Baptist Health and the released parties over the covered claims	None
Opt out	No benefits, but you keep your right to sue	November 9, 2026
Object	Tell the court why you oppose the settlement or the fee request. You can still file a claim	November 9, 2026

How to Opt Out of the Baptist Health Settlement

Your request must include the case name and number, your full name, mailing address, phone number and email address, your signature, and a statement such as “Request for Exclusion” or “Opt Out.” You can only opt out yourself, not another person. The FAQ says you cannot opt out by phone or email, but also says the request must be “postmarked or emailed” by November 9, 2026. To be safe, mail it so it is postmarked by that date. If you opt out, you keep whatever rights you may have to sue separately, but whether a separate case would succeed depends on the facts and the law.

How to Object to the Baptist Health Settlement

If you do not opt out, you can tell the court why you oppose the settlement or the attorneys’ fee request. File the objection with the Clerk of Court, 300 South Drew Street, Star City, Arkansas 71667, by November 9, 2026, and send copies to the Settlement Administrator, Class Counsel and Baptist Health’s counsel. The objection has to include several items, including your contact information, your reasons, any lawyer who represents you, how many class settlements you or your lawyer have objected to in the past five years, whether you plan to appear, and your own signature. A lawyer’s signature alone is not enough, and an objection that misses a requirement may not count. You do not have to attend the hearing, even if you object.

What Happens If You Do Nothing?

You get no benefits, and if the settlement becomes final you give up the right to sue Baptist Health or the released parties over the covered claims. The release is in Section XI of the Settlement Agreement.

When Will Baptist Health Settlement Payments Be Issued?

Not until the court grants final approval and any appeals are resolved. The final approval hearing is February 4, 2027, at 10:00 a.m. Central Time. No one knows yet whether there will be appeals or how long they would take. The hearing date is not a payment date.

How Much Will Class Counsel Receive in the Baptist Health Settlement?

Class Counsel will ask the court to approve $125,000 in attorneys’ fees and costs, plus a $1,500 service award for each of the two class representatives. According to the FAQ, Baptist Health pays both, subject to court approval. Class members are not charged for Class Counsel’s services.

Who Represents the Class in Frazier v. Baptist Health?

The court appointed Sean Short and Samuel Brown of Ellzey Kherkher Sanford Montgomery, LLP in Little Rock, Arkansas as Class Counsel. Baptist Health is represented by Keeley Onna Cronin of Baker & Hostetler LLP in Denver.

Baptist Health Settlement Key Dates

Date	Event
April 22 to July 8, 2024	Period of unauthorized access, per Baptist Health
August 30, 2024	Baptist Health begins notifying patients
November 9, 2026	Deadline to opt out or object
December 8, 2026	Claim deadline; end of the loss window for out-of-pocket and fraud claims
February 4, 2027, 10:00 a.m. CT	Final approval hearing

Baptist Health Data Incident Settlement Contact Information

• Settlement Administrator: Simpluris
• Phone: (866) 606-0682
• Email: [email protected]
• Mail: Baptist Health Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958
• Website: BHSettlement.com

Do not contact the court or the clerk with questions.

Frequently Asked Questions About the Baptist Health Data Breach Settlement

What is the Baptist Health data breach settlement?

 A proposed class action settlement of Frazier v. Baptist Health over a 2024 cyberattack on Baptist Health Medical Center-Drew County in Arkansas.

How do I know if I’m included?

 You are included if you received notice of the data incident or of the settlement, or if your information was potentially impacted. The administrator can help at (866) 606-0682.

What is the deadline to file a claim?

 December 8, 2026, online or postmarked.

How much can I get?

 Up to $80 for lost time, plus either up to $400 in ordinary documented losses or up to $4,000 in documented identity theft or fraud losses. Everyone who qualifies can also claim two years of credit monitoring.

Can I claim both the $400 and $4,000 categories? 

No. You must choose one. You can add the lost-time payment and credit monitoring to either.

Do I need receipts?

 For out-of-pocket and fraud losses, yes. Your own notes can help but are not enough alone. The lost-time benefit requires a brief description and your attestation.

Is the Baptist Health settlement paying everyone automatically?

 No. A valid claim is required to receive any benefit.

What information was exposed?

 Possibly names, addresses, dates of birth, diagnoses, treatment information and provider names, and per the hospital’s notice also medical record numbers and dates of treatment. Not every person had every category exposed.

What happens if I do nothing?

 You get no benefits and you give up your right to sue over the released claims.

Can I object and still file a claim? 

Yes, according to the settlement website. You cannot object if you opt out.

Is this the same as the Baptist Medical Center breach in Texas? 

No. That was a separate 2022 incident involving Baptist Medical Center and Resolute Health Hospital in Texas.

Has Baptist Health admitted wrongdoing? 

No. It denies the allegations and liability.

Who do I contact with questions? 

Simpluris at (866) 606-0682 or [email protected].

Update Log

• October 16, 2026: Article first published. The court has not yet granted final approval.

Sources

1. Official settlement website, Frazier v. Baptist Health, Case No. 40CV-25-62 (Home, FAQ and claim pages), maintained by Simpluris
2. Official settlement FAQs
3. Official settlement documents
4. Baptist Health Medical Center-Drew County, Notice of Data Security Incident (substitute website notice), August 30, 2024
5. Becker’s Hospital Review and HIPAA Journal reporting on the number of individuals Baptist Health reported to HHS (5,207), included for context only

AllAboutLawyer.com provides general legal information, not legal advice. The author is a legal content researcher, not a practicing attorney. The settlement remains subject to final court approval, and benefits depend on the official terms and review of each claim. Consult a licensed attorney about your specific situation.

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement website for Frazier v. Baptist Health (FAQ and claim pages, run by the court-appointed administrator Simpluris) and Baptist Health’s August 30, 2024 substitute website notice, as of October 16, 2026. Last Updated: October 16, 2026.