Essen Medical Associates Data Breach Settlement, Are You Eligible for Up to $5,100 before June 1, 2026?

Essen Medical Associates, P.C. — doing business as Essen Health Care — agreed to pay $4,000,000 to settle a class action lawsuit filed after a March 2023 cyberattack exposed the personal, medical, and financial information of more than 907,000 current and former patients. If you received a data breach notice from Essen Medical, you may be eligible to claim up to $5,000 for documented losses plus up to $100 in cash — both payments at once. The claim deadline is June 1, 2026.

Quick Facts

Field	Detail
Settlement Amount	$4,000,000
Claim Deadline	June 1, 2026
Who Qualifies	U.S. residents who received a mailed notice from Essen Medical about the March 2023 data breach
Payout Per Person	Up to $5,000 (documented losses) + up to $100 (cash fund) — both claimable at once
Proof Required	Yes for documented losses; No for $100 cash fund payment
Settlement Status	Preliminarily approved — final approval hearing July 7, 2026
Administrator	Epiq Class Action & Claims Solutions
Official Website	EHCSettlement.com

Critical Correction: You Can Claim BOTH Payments

The mailed postcard notice incorrectly stated that class members must choose either a Documented Loss Payment or a Cash Fund Payment — but not both. In reality, class members may qualify and submit a claim for one or both payments.

This means if you have documented losses traceable to the breach, you can claim up to $5,000 in reimbursement and the up to $100 pro rata cash payment simultaneously. Do not let the incorrect postcard language cause you to leave money on the table — file for both if you qualify.

Current Status & What Happens Next

• The court granted preliminary approval on January 27, 2026, and notices were mailed to class members on March 3, 2026.
• The final approval hearing is scheduled for July 7, 2026 at 2:15 p.m. at the Supreme Court of the State of New York, Bronx County, 851 Grand Concourse, Bronx, New York 10451.
• The opt-out and objection deadline is May 4, 2026 — one month before the claim deadline.
• Payments go out after the court grants final approval and resolves any appeals.

What Is the Essen Medical Data Breach Lawsuit About?

Essen Medical Associates, P.C. operates as Essen Health Care — a network of healthcare clinics serving patients primarily in the Bronx, New York. In March 2023, Essen Medical experienced a cyberattack that saw hackers access its network between March 14, 2023, and March 22, 2023. The attackers accessed files containing highly sensitive patient information.

Data exposed in the incident included personally identifiable information and protected health information such as names, driver’s license numbers and state identification numbers, U.S. alien registration numbers, non-U.S. identification numbers, passport numbers, financial account information, dates of birth, Social Security numbers, medical treatment information, and health insurance information. Court documents estimate that approximately 907,782 current and former patients were affected by the breach.

Plaintiffs filed a class action lawsuit, captioned Rivera, et al. v. Essen Medical Associates, P.C., Case No. 801239/2024E, in the Supreme Court of the State of New York, Bronx County. Plaintiffs claimed Essen Medical failed to adequately protect personal information, resulting in negligence, breach of implied contract, breach of fiduciary duty, violations of New York General Business Law § 349, and unjust enrichment. 

Essen Medical denies all wrongdoing and agreed to settle to avoid the cost and uncertainty of continued litigation. Similar New York-based healthcare data breach settlements like the General Physician P.C. $2.5M settlement followed the same litigation framework — negligence, breach of implied contract, and violations of state consumer protection law.

Who Is Eligible to File a Claim?

The settlement considers individuals as class members if they meet all of the following criteria: they are natural persons residing in the United States; the Essen Medical data breach that occurred between March 14–22, 2023 potentially compromised their personal information; and they received a notice via U.S. mail from Essen Medical stating the incident may have compromised their personal information.

Specifically:

• You may qualify if Essen Medical sent you a mailed notice about the March 2023 data breach stating your personal information may have been compromised.
• You may qualify if you are a current or former patient of Essen Medical Associates or Essen Health Care whose personal, medical, or financial data was stored on the company’s systems during the March 14–22, 2023 breach window.
• You may qualify even without a notice — individuals who did not receive a postcard notice but believe they qualify may still file a claim but must provide documentation showing how the breach impacted them.
• You may qualify if you are a parent filing on behalf of a minor — if you are the parent of a minor who received a breach notification, submit the form using the information of the minor, submitting one claim form per individual.

If you did not receive a postcard notice or have lost it, contact the settlement administrator at (1-888-976-6880) for assistance locating your Unique ID and PIN.

Related article: UPS Illegal Tariff Class Action Lawsuit, Did You Pay Unlawful Shipping Charges?

How Much Can You Receive?

Remember: you can claim both payment options simultaneously if you qualify for the documented loss payment.

Payment 1 — Documented Loss Payment (Up to $5,000) Class members are eligible to make a claim for up to a $5,000 cash payment for reimbursement of documented losses, the exact amount of which will depend on the extent to which documented losses are supported by reasonable documentation and determined by the settlement administrator to be more likely than not a result of the incident, and not otherwise reimbursable by insurance.

Covered documented losses include:

• Unreimbursed fraudulent charges on bank or credit card accounts
• Identity theft expenses — professional fees, notary costs, document replacement
• Fees for credit monitoring, credit reports, or credit freezes purchased because of the breach
• Postage and communication costs for breach-related correspondence
• Other out-of-pocket expenses fairly traceable to the March 2023 breach

Supporting documentation — receipts, bank or credit card statements, invoices, telephone records — is required.

Payment 2 — Cash Fund Payment (Up to $100) Class members are also eligible for a pro rata Cash Fund Payment of up to $100, the exact amount of which will depend on the number of settlement class members who participate in the settlement. No documentation is required — attestation only. The final amount may be higher or lower than $100 depending on total valid claims.

Additional benefit — Cybersecurity Improvements In addition to monetary benefits, the agreement states that Essen Health will improve its cybersecurity procedures to mitigate the risk of a future data breach, to be paid separately from the settlement fund. All class members benefit from these improvements regardless of whether they file a claim.

For a comparison of how this payout structure works alongside free credit monitoring, see how the CAMC $1M data breach settlement handled the same documented-loss plus pro rata cash framework for healthcare patients.

How to File a Claim

Step 1 — Locate your Unique ID (10-character alphanumeric) and PIN (4-digit) from the postcard notice mailed to you in March 2026. You will need both to file online.

Step 2 — Visit EHCSettlement.com and log in using your Unique ID and PIN. If you lost your postcard or did not receive one, call (1-888-976-6880) for assistance before the June 1, 2026 deadline.

Step 3 — Select your payment options. You may claim the documented loss payment, the cash fund payment, or both. Do not let the incorrect postcard language limit you — the official settlement website confirms both are claimable simultaneously.

Step 4 — If claiming documented losses, upload your supporting documentation — bank statements, credit card statements, receipts, invoices, or other third-party proof showing breach-related expenses.

Step 5 — Submit your claim online by June 1, 2026. To file by mail, download the PDF claim form from the settlement website, complete and sign it, and postmark it by June 1, 2026. Mail to: Essen Medical Data Breach Settlement Administrator, P.O. Box 2020, Portland, OR 97208-2020.

Step 6 — After submitting, you will receive an email to select your preferred payment method. Save your claim confirmation for your records.

Estimated time to complete: 5–15 minutes online (longer if gathering documentation for a loss claim).

Important Deadlines & Dates

Milestone	Date
Data Breach Occurred	March 14–22, 2023
Preliminary Approval Granted	January 27, 2026
Settlement Notices Mailed	March 3, 2026
Opt-Out Deadline	May 4, 2026
Objection Deadline	May 4, 2026
Claim Filing Deadline	June 1, 2026
Final Approval Hearing	July 7, 2026 at 2:15 p.m. (Bronx County Supreme Court)
Expected Payment Date	TBD — after final approval and resolution of any appeals

Frequently Asked Questions

Do I need a lawyer to file a claim in the Essen Medical settlement? 

No. Class Counsel — including Milberg Coleman Bryson Phillips Grossman PLLC, Ahdoot & Wolfson PC, Israel David LLC, Strauss Borrelli PLLC, and Laukaitis Law LLC — represents all class members at no cost. Filing takes 5–15 minutes online at EHCSettlement.com using your Unique ID and PIN. You may hire your own attorney at your own expense if you choose.

Is the Essen Medical settlement legitimate?

 Yes. This is a court-supervised class action, captioned Rivera, et al. v. Essen Medical Associates, P.C., Case No. 801239/2024E, pending in the Supreme Court of the State of New York, Bronx County. The court granted preliminary approval on January 27, 2026. The official website is EHCSettlement.com. Contact the administrator at 1-888-976-6880 for assistance.

When will I receive my Essen Medical settlement payment? 

Payments go out after the court grants final approval at the July 7, 2026 hearing and after any appeals fully resolve. The exact timeline depends on whether appeals are filed. Check EHCSettlement.com regularly for payment timeline updates after the hearing.

What if I missed the Essen Medical claim deadline? 

If you do not submit a valid claim by June 1, 2026, you will not receive any payment. Unless you formally opt out by May 4, 2026, you remain bound by the settlement and give up your right to sue Essen Medical separately over the claims this settlement covers.

Will my Essen Medical settlement payment affect my taxes?

 It may. Reimbursements for documented out-of-pocket losses are generally not taxable income. The pro rata cash fund payment may be treated as ordinary income by the IRS. Consult a tax professional for guidance specific to your situation.

Can I claim both the documented loss payment and the cash fund payment?

 Yes — despite what the mailed postcard notice said, you can claim both simultaneously. The official settlement website confirms that class members may submit a claim for one or both benefits. If you have documented losses, file for both the up to $5,000 reimbursement and the up to $100 cash payment to maximize your recovery.

I did not receive a postcard notice. Can I still file a claim?

 Yes. If you are a current or former Essen Medical or Essen Health Care patient whose information was compromised in the March 2023 breach, you may still file a claim — but you must provide documentation showing how the breach impacted you. Contact the administrator at 1-888-976-6880 to obtain your Unique ID and PIN before the June 1, 2026 deadline.

What personal information was exposed in the Essen Medical breach? 

The March 2023 cyberattack may have exposed names, driver’s license and state ID numbers, U.S. alien registration numbers, non-U.S. identification numbers, passport numbers, financial account information, dates of birth, Social Security numbers, medical treatment information, and health insurance information. The exact data exposed varies by individual based on what Essen Medical had on file.

Sources & References

• EHCSettlement.com — Official Settlement Website
• EHCSettlement.com — Claim Instructions & Login
• Official Long Form Settlement Notice — PDF
• HHS Office for Civil Rights — HIPAA Breach Portal

Last Updated: March 22, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.