CPAP Medical Supplies and Services Data Breach Settlement, Check If You Qualify Brett Conner v. CPAP Medical Supplies and Services, Inc., No. CACE-26-011830

There’s up to $5,000 waiting for you if CPAP Medical Supplies and Services sent you a data breach notice this year. CPAP agreed to pay for documented losses tied to a December 2024 cyberattack that hit roughly 90,000 people — most of them military members, veterans, or their families who relied on the company for sleep apnea equipment. You have until November 26, 2026 to file, plus two years of medical monitoring either way.

CPAP Medical Supplies and Services Data Breach Settlement — Key Facts

Field	Details
Settlement Amount	$500,000 cash fund for documented losses, plus attorneys’ fees, service awards, and medical monitoring costs paid separately by CPAP
Claim Deadline	November 26, 2026
Who Qualifies	All living U.S. residents sent notice by CPAP that their Private Information may have been impacted in the Data Incident
Estimated Payout	Up to $5,000 for documented losses, reduced pro rata if total valid claims exceed the $500,000 cap
Proof Required (Yes/No)	Yes — documentation is required for every cash claim. There is no no-proof flat payment option in this settlement
Settlement Status	Preliminarily approved, awaiting final court approval
Court & Case Number	Circuit Court for Broward County, Florida — No. CACE-26-011830
Law Alleged	UNVERIFIED — the complaint’s specific causes of action aren’t published on the settlement site
Administrator	Simpluris
Official Claim Site	cpapdataincidentsettlement.com
Last Updated	September 11, 2026

Who Is CPAP Medical Supplies and Services and Why Are They Being Sued for a Data Breach?

CPAP Medical Supplies and Services, based in Jacksonville, Florida, supplies sleep apnea machines and related therapy services, with a customer base leaning heavily military and veteran. That’s a detail most coverage of this case skips past — and it matters, because a breach touching Social Security numbers and treatment records lands differently for someone whose security clearance or VA benefits could be affected. Eight named plaintiffs signed onto this case, which is more than most data breach suits see, and it usually signals the plaintiffs’ side felt the harm was widespread enough to build a deep bench of class representatives.

What Did CPAP Medical Supplies and Services Do to Patients Between December 13 and 21, 2024?

An unauthorized party got into CPAP’s network for eight days in December 2024. According to the breach notice CPAP’s counsel filed with the Maine Attorney General’s Office, the intrusion wasn’t actually discovered until June 27, 2025 — more than six months later — and affected people weren’t notified until August 15, 2025. That’s a long gap between the breach and the warning, and it’s the kind of detail buried in a regulatory filing rather than the settlement’s own marketing.

The files touched included names, addresses, emails, phone numbers, Social Security numbers, driver’s license numbers, health insurance information, medical histories, treatment plans, and financial information. It’s a similar mix to what got exposed in the Steel Warehouse breach earlier this year — Social Security and driver’s license numbers sitting next to financial account details is about as complete an identity-theft starter kit as it gets.

Brett Conner and seven co-plaintiffs sued, arguing CPAP failed to adequately protect that information. CPAP denies it did anything wrong. That’s the standard line in a settlement like this — it doesn’t mean the underlying breach wasn’t real, just that nobody’s admitting fault to end the case faster.

Who Qualifies for the CPAP Medical Supplies and Services Data Breach Settlement?

Here’s exactly how to know if you qualify for the CPAP Medical Supplies settlement.

• U.S. residents who received notice from CPAP that their Private Information may have been impacted in the Data Incident
• Anyone whose name, Social Security number, driver’s license number, or medical and financial records sat on CPAP’s systems in December 2024
• Military members, veterans, and family members who used CPAP for sleep apnea equipment or services and got a settlement notice

Excluded: CPAP’s own directors, officers, and agents, government entities, the presiding judge and their immediate family or court staff, and anyone who timely opts out. If you’re not sure whether you’re covered, the administrator will check for you at no cost.

CPAP Medical Supplies and Services Patients Outside Florida — Are You Still Covered?

Yes. This case is filed in Florida state court, but the class covers “all living individuals residing in the United States” who got notice — not just Florida residents. Given CPAP’s military customer base, that notice reached people stationed and living all over the country.

Not sure if you qualify for the CPAP Medical Supplies and Services data breach settlement? A free consultation with a data privacy attorney can help before the November 26, 2026 deadline.

How Much Can CPAP Medical Supplies and Services Data Breach Class Members Get? Up to $5,000 Per Person

CPAP Payout With Proof — Up to $5,000

If you had actual, documented out-of-pocket losses tied to the breach — identity theft costs, credit monitoring fees, ID replacement, bank postage — you can claim up to $5,000. The loss has to have happened between December 13, 2024, and November 26, 2026. Bank statements and receipts work; a note you wrote yourself explaining the loss doesn’t count on its own.

More filers means smaller checks here. CPAP is only paying $500,000 total into this cash fund, and if the valid claims add up to more than that, every payment gets reduced pro rata. That’s the opposite of how some other breach settlements work, so don’t assume you’re guaranteed the full $5,000 just because your losses hit that number.

What Pro-Rata Means for Your CPAP Check

The math is simple: your share shrinks in proportion to how many other people file valid, documented claims above the $500,000 cap. There’s no way to predict the exact number until the claim window closes on November 26, 2026.

Every settlement class member — whether or not you file a cash claim — can also claim two years of CyEx Medical Shield Complete, separate from the credit monitoring CPAP already offered when it first sent breach notices last year. This one comes with $1 million in medical identity theft insurance and monitoring for health insurance ID exposure, medical record number exposure, and unauthorized HSA spending.

Payments over $600 may appear on a 1099. Check with a tax professional.

How to File Your CPAP Medical Supplies and Services Settlement Claim — Step by Step

1. Go to cpapdataincidentsettlement.com/form/claim
2. Enter your name and the details requested from your settlement notice
3. Upload documentation of your losses — bank statements, receipts, or similar records
4. Describe how the loss connects to the CPAP data incident
5. Submit and save your confirmation number
6. Watch your email — Simpluris will reach out if anything’s missing

Takes about 10 minutes online. Prefer paper? Download the claim form from the Important Documents page and mail it to CPAP Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958, postmarked by November 26, 2026.

Should CPAP Medical Supplies and Services Class Members Opt Out or Object Before October 30, 2026?

What Opting Out of the CPAP Settlement Actually Means

Opting out means no payment and no medical monitoring from this settlement, but you keep your right to sue CPAP on your own. Most people shouldn’t do this without talking to a lawyer first. The deadline is October 30, 2026, and your written request has to be mailed to the administrator, not emailed.

How to Object to the CPAP Settlement

You can stay in the class and still tell the court you disagree with part of the deal. Objections are due October 30, 2026, filed with the Broward County Circuit Court Clerk at 201 S.E. 6th Street, Fort Lauderdale, FL 33301, with a copy sent to the administrator, Class Counsel, and CPAP’s counsel. The objection form is unusually detailed — it even asks whether you or your lawyer used AI to help prepare it, and the Final Approval Hearing itself is being held entirely over Zoom rather than in person.

Talk to a class action lawsuit attorney before October 30, 2026, if you’re considering either option.

CPAP Medical Supplies and Services Data Breach Settlement — Key Dates, 2026

Milestone	Date
Settlement Proposed	UNVERIFIED — preliminary approval order date not published on the settlement site
Claims Period Opens (Notification Mailing)	August 28, 2026
Claim Filing Deadline	November 26, 2026
Opt-Out Deadline	October 30, 2026
Objection Deadline	October 30, 2026
Final Approval Hearing	December 1, 2026, 8:30 a.m. ET, via Zoom
Expected Payment Date	UNVERIFIED — administrator states payments follow final approval and any appeals, no fixed date given

That’s about two and a half months from today. For a form that takes 10 minutes, waiting only shrinks your odds if the claim pool fills up.

If you’re comparing this to other healthcare breach cases, the WPM Pathology & Salina Regional Health settlement runs a similar documented-loss claim process, just with a lower per-person cap.

CPAP Medical Supplies and Services — Frequently Asked Questions, No. CACE-26-011830

Do I need a lawyer to file a CPAP Medical Supplies and Services data breach settlement claim? 

No. The online claim form walks you through submitting proof of your losses on your own. You can hire your own attorney at your own expense if you’d like a second opinion, but the Court-appointed Class Counsel already represents you at no cost.

Is the CPAP Medical Supplies and Services settlement legitimate?

 Yes. It’s a real settlement pending before the Circuit Court for Broward County, Florida, Case No. CACE-26-011830, administered by Simpluris, and the case was filed by eight named plaintiffs, not one.

When will CPAP Medical Supplies and Services settlement payments be sent?

 Not before the Final Approval Hearing on December 1, 2026, and only after any appeals are resolved. No fixed payment date has been announced.

What if I missed the CPAP claim deadline of November 26, 2026? 

Contact the administrator directly at (833) 285-3011, available 24/7. Late claims aren’t guaranteed, but it’s worth asking before assuming you’re out of luck.

Will my CPAP Medical Supplies and Services settlement payment go on a 1099?

 Possibly, if your payment exceeds $600. Talk to a tax professional about how to report it.

Do I have to prove my losses to get anything from the CPAP settlement? 

For the cash payment, yes — this settlement doesn’t offer a no-documentation flat payment. Everyone can still claim the two years of medical monitoring without submitting any proof.

Why did it take CPAP so long to notify people about the December 2024 breach? 

Per the notice CPAP’s counsel filed with Maine’s Attorney General, the intrusion wasn’t discovered until June 27, 2025, and letters didn’t go out until August 15, 2025 — about eight months after the breach itself.

How much could CPAP Medical Supplies and Services class members get if claims exceed the $500,000 cap? 

Less than the full $5,000 maximum. Payments are reduced pro rata once total valid claims pass the cap, so the earlier and more complete your documentation, the better your odds of a full payout.

Sources Used in This CPAP Medical Supplies and Services Article

• Official Settlement Website — Home: cpapdataincidentsettlement.com
• Official Settlement Website — FAQ: cpapdataincidentsettlement.com/faq
• Official Settlement Website — Important Documents: cpapdataincidentsettlement.com/documents
• Long Form Notice — Brett Conner v. CPAP Medical Supplies and Services, Inc.: cw.simpluris.com/docs/public/downloads/CCC8/LONG_FORM_NOTICE
• Settlement Agreement — Brett Conner v. CPAP Medical Supplies and Services, Inc.: cw.simpluris.com/docs/public/downloads/CCC8/SETTLEMENT_AGREEMENT
• Office of the Maine Attorney General — Data Breach Notice, CPAP Medical Supplies and Services Inc.: maine.gov/agviewer

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement website, its FAQ page, and the Maine Attorney General’s data breach notice filing on September 11, 2026. Last Updated: September 11, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.