Essen Medical Associates $4M Data Breach Settlement, File Your Claim Before June 1, 2026

Hackers broke into Essen Medical Associates’ computer systems in March 2023 and stole sensitive patient data — including Social Security numbers, medical records, and government-issued ID information. Essen Medical Associates agreed to pay $4,000,000 to settle the resulting class action lawsuit, Rivera et al. v. Essen Medical Associates, P.C., No. 801239/2024E. If you received a mailed notice that your personal information may have been compromised, the deadline to submit your claim is June 1, 2026.

Quick Facts

Current Status & What Happens Next

• The Court preliminarily approved the settlement on January 27, 2026, and the settlement administrator mailed notices to class members on March 3, 2026.
• An important correction has been issued: the mailed postcard notice incorrectly stated that class members must choose either a documented loss payment or a cash fund payment — but not both. In reality, eligible class members may file claims for one or both types of payment.
• No payments will go out until the court grants final approval and any appeals are resolved — check ehcsettlement.com for the final hearing date once it is announced.

What Happened in the Essen Medical Data Breach? 

Essen Medical Associates, P.C. — also known as Essen Health Care — is a healthcare system based in the Bronx, New York that operates over 20 locations and employs more than 250 doctors providing primary care, urgent care, and specialty care services.

On March 17, 2023, Essen Health Care detected that an unauthorized party had accessed its IT network between March 14 and March 22, 2023. The breach exposed sensitive patient information including names, dates of birth, Social Security numbers, government-issued identification or passport information, demographic information, and protected health information.

Cybersecurity researchers linked the attack to the ALPHV ransomware group, a known criminal organization that targets healthcare providers. Essen sent data breach notification letters to affected individuals on May 16, 2023. Plaintiffs alleged Essen failed to adequately protect patient data, violating its legal duties under New York law. Essen denied all wrongdoing but agreed to settle to avoid the cost and risk of continued litigation.

Who Is Eligible to File a Claim? 

You may qualify if you are a natural person residing in the United States whose personal information was potentially compromised in the Essen Medical data breach that occurred between March 14 and March 22, 2023.

You may qualify if you received a mailed data breach notification letter from Essen Medical Associates, P.C. in or after May 2023.

You may qualify if you were a current or former patient of Essen Health Care at any of its locations in the Bronx, Brooklyn, Queens, Manhattan, Long Island, Staten Island, or Westchester County.

You may qualify if you are the parent of a minor child who received a breach notification — parents may submit a claim on behalf of their minor child using the child’s information, with one claim form per individual.

You may qualify even if you have not yet experienced any actual fraud or identity theft — exposure of your data alone is sufficient to file a claim for the pro-rata cash fund payment.

Note: To file your online claim, you need the unique ID and PIN printed on the postcard notice you received in the mail. If you did not receive a postcard or have lost yours, contact the settlement administrator at 1-888-976-6880 for assistance.

If you were also affected by another recent healthcare data breach, see our coverage of the Capital One ERISA 401(k) Settlement — Current and Former Employees Could Get Paid on AllAboutLawyer.com.

How Much Can You Receive? 

The settlement provides two separate payment tiers — and you may qualify and submit a claim for one or both.

Tier 1 — Documented Losses (up to $5,000)

You may claim up to $5,000 for reimbursement of out-of-pocket losses that the breach most likely caused and that insurance did not reimburse. The settlement administrator determines whether your documented losses were more likely than not a result of the breach. Eligible expenses include bank fees, credit monitoring costs, costs to replace a government ID, unreimbursed fraud charges, and lost time spent dealing with the breach at up to $25 per hour.

Tier 2 — Cash Fund Payment (up to $100)

All eligible class members may also claim a pro-rata cash fund payment of up to $100. The exact amount depends on the total number of valid claims submitted. The more people who file, the smaller each individual share becomes.

Important: If you submit a claim for documented losses, you must provide reasonable documentation showing the loss was caused by the breach and was not covered by insurance.

How to File Your Claim (H2)

Step 1 — Visit the official settlement website at ehcsettlement.com and click the claim filing link, or call the settlement administrator at 1-888-976-6880 to request a paper claim form.

Step 2 — Locate the unique ID and PIN on the postcard notice mailed to you on March 3, 2026. You need both to file online. If you lost your notice, call 1-888-976-6880 before the deadline to get your credentials.

Step 3 — Select your claim type: cash fund payment only, documented losses only, or both. You are entitled to submit claims for both categories in a single filing.

Step 4 — If claiming documented losses, upload supporting documents such as bank statements, credit card statements, invoices, phone records, or receipts that connect your expenses to the Essen breach.

Step 5 — Submit your completed claim form online by June 1, 2026, or postmark your paper form by that same date and mail it to: Essen Medical Data Breach Settlement Administrator, P.O. Box 2020, Portland, OR 97208-2020.

Step 6 — After submitting your claim, you will receive an email asking you to select your preferred payment method. Save your confirmation number and payment preference confirmation for your records.

Estimated time to complete: 8–12 minutes (longer if gathering documentation for Tier 1)

Important Deadlines & Dates 

Frequently Asked Questions 

Do I need a lawyer to file a claim? 

No. You file your claim directly through the official settlement website at ehcsettlement.com or by mailing a paper claim form. No attorney is required, and there is no fee to participate. Class Counsel already represents all eligible class members at no direct cost to you.

Is this settlement legitimate? 

Yes. The case is Rivera et al. v. Essen Medical Associates, P.C., No. 801239/2024E, filed in New York state court. The settlement was preliminarily approved by the Court on January 27, 2026, and official notices were mailed to class members on March 3, 2026. Verify all details at ehcsettlement.com or by calling 1-888-976-6880.

When will I receive my payment?

 No payments go out until the court grants final approval and any appeals are resolved. The final approval hearing date has not yet been announced as of March 2026. Check ehcsettlement.com after you file for timeline updates.

What if I missed the claim deadline? 

The claim deadline is June 1, 2026 — if you miss it, you will not receive a cash payment. However, you will still be bound by the settlement’s release of claims against Essen Medical unless you opt out before the opt-out deadline. File as early as possible to protect your eligibility.

Will this settlement payment affect my taxes? 

Settlement payments for data breach out-of-pocket reimbursements are generally not considered taxable income because they restore money you already lost. However, payments that exceed your actual documented losses could be treated differently. Consult a tax professional for advice specific to your situation.

What types of information were stolen in the Essen breach?

The breach exposed patient names, dates of birth, Social Security numbers, government-issued identification or passport information, demographic information, and protected health information. If your Social Security number was compromised, you face an elevated risk of identity theft and should consider placing a credit freeze with all three major credit bureaus immediately.

I never got a postcard notice — can I still file a claim?

 Yes. If you did not receive a postcard notice or lost yours, contact the settlement administrator at 1-888-976-6880 for assistance obtaining your unique ID and PIN. Do not wait — call well before the June 1, 2026 deadline.

Can I file claims for both documented losses and the cash fund? 

Yes. Despite what the original postcard notice stated, class members may qualify and submit a claim for one or both of the documented loss payment and the cash fund payment. The settlement administrator corrected this error on the official website — you are not limited to choosing just one.

Sources & References 

• Official Settlement Website: ehcsettlement.com
• Official Claim Filing Portal: ehcsettlement.com/Login
• HHS Office for Civil Rights — Healthcare Breach Portal: hhs.gov/hipaa/for-professionals/breach-notification
• Cybersecurity Case Study — Essen Health Care Breach: cybersecuritycasestudies.com

Last Updated: March 13, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah