Henderson & Walton Women’s Center Data Breach Settlement, Check If You Qualify for a Payment File by Aug 27, Kim Townsel v. Henderson & Walton Women’s Center, P.C., Case No. CV-2024-900914.00
UPDATE LOG — Henderson & Walton Women’s Center Data Breach Settlement, No. CV-2024-900914.00
May 27, 2026 — Article published. All settlement details verified against the official Long Form Notice at HWWCDataIncidentSettlement.com. Quick Facts table, eligibility section, claim guide, FAQ, and deadlines table reflect currently posted settlement terms.
The Henderson & Walton Women’s Center data breach settlement is a proposed class action resolution where eligible current and former patients can receive up to $2,500 in reimbursement — plus three years of free credit and medical monitoring — by filing a claim at HWWCDataIncidentSettlement.com before August 27, 2026. The case is Kim Townsel v. Henderson & Walton Women’s Center, P.C., Case No. CV-2024-900914.00, filed in the Circuit Court of Jefferson County, Alabama. It stems from a cybersecurity incident between February 11 and February 14, 2022, during which an unauthorized party accessed patient records containing Social Security numbers, medical information, and more.
Henderson & Walton Women’s Center Data Breach Settlement — Key Facts
| Field | Detail |
| Settlement Amount | Not publicly disclosed as a fixed fund |
| Claim Deadline | August 27, 2026 |
| Who Qualifies | Current and former patients whose personal or protected health information was potentially compromised in the February 11–14, 2022 cybersecurity incident |
| Extraordinary Loss Payout | Up to $2,500 with documentation |
| Ordinary Loss Payout | Up to $150 with documentation |
| Lost Time Compensation | Up to $90 (up to 3 hours at $30/hour) |
| Credit & Medical Monitoring | 3 years, one-bureau monitoring — no documentation needed |
| Proof Required | Yes for cash claims; No for monitoring and lost time attestation |
| Settlement Status | Proposed — pending final approval |
| Court & Case Number | Circuit Court, Jefferson County, Alabama — No. CV-2024-900914.00 |
| Specific Law Alleged | Negligence, negligence per se, breach of implied contract, breach of fiduciary duty, unjust enrichment |
| Settlement Administrator | Angeion Group — HWWCDataIncidentSettlement.com |
| Official Claim Website | hwwcdataincidentsettlement.com/submit-claim |
| Last Updated | May 27, 2026 |
Who Is Henderson & Walton Women’s Center and Why Are They Facing a Data Breach Settlement?
Henderson & Walton Women’s Center, P.C. (HWWC) is a Birmingham, Alabama-based women’s healthcare practice. A hacker gained access to an employee’s email account, prompting a forensic investigation. The information contained in the account included birth dates, Social Security numbers, medical information, driver’s license numbers, and health insurance information. If you were a patient at HWWC around 2022, your most sensitive health and identity records may have been in that compromised account.
What Did Henderson & Walton Women’s Center Do to Patients Between February 2022 and August 2022?
Between February 11 and February 14, 2022, Henderson & Walton Women’s Center experienced a cybersecurity incident in which an unauthorized party accessed its computer systems containing personal information of current and former patients.
HWWC’s forensic investigation revealed the attacker didn’t access the email server and only one employee email account was affected by the breach. HWWC didn’t mention when the compromise of the email account happened, but stated that sending notification letters was delayed because of the long process of going over all email messages in the account to determine the types of data and particular persons impacted. That process finished on June 24, 2022.
On August 23, 2022, Henderson & Walton Women’s Center reported the data breach to the U.S. Department of Health and Human Services Office for Civil Rights. The Henderson & Walton Women’s Center data breach is believed to have impacted as many as 34,306 individuals.
On February 29, 2024, plaintiff Kim Townsel filed a class action complaint in the Circuit Court of Jefferson County, Alabama, asserting claims for negligence, negligence per se, breach of implied contract, breach of fiduciary duty, and unjust enrichment. If you want to understand how courts evaluate these types of cases, our coverage of the Fidelity Investments data breach settlement walks through how a similar healthcare and financial data breach class action unfolded, and our breakdown of the Comcast Xfinity $117.5 million data breach settlement shows how large-scale personal data stolen settlement cases typically proceed to final approval.
If you were a patient at Henderson & Walton Women’s Center at any point around 2022, this settlement may directly affect you.
Related article: $681,600 KTC LLC McDonald’s Pay Transparency Settlement, Washington Job Applicants Were Owed $1,093 Each — Nyannor v. KTC LLC, Case No. 24-2-20009-6 SEA

Are You Part of the Henderson & Walton Women’s Center Patient Data Breach Settlement?
Here is exactly how to know if this case includes you.
You likely qualify if:
- Your personal information and/or protected health information was potentially compromised as a result of the cybersecurity incident which occurred between February 11, 2022, and February 14, 2022
- You were a current or former patient of HWWC whose records were stored in the affected systems at the time
- Your personal information includes, but is not limited to, dates of birth, Social Security numbers, medical information, health insurance information, or driver’s license numbers or state ID numbers
- You received a data breach notification letter from Henderson & Walton Women’s Center after August 2022
You do NOT qualify if:
- You are a governmental entity, the judge assigned to the action, that judge’s immediate family, or court staff
- You have already been reimbursed for the same specific expenses through another source, including any credit monitoring Henderson offered directly after the incident
Henderson & Walton Women’s Center Patients Outside Alabama — Are You Still Covered?
Yes. The settlement class includes all persons whose personal information was potentially compromised — nationwide. The lawsuit was filed in Alabama, but the settlement covers patients regardless of where they currently live. If your data was in HWWC’s systems during the February 2022 breach, your state of residence does not disqualify you.
If you are unsure whether you qualify for the Henderson & Walton Women’s Center data breach settlement, a free consultation with a data privacy attorney can help you assess your situation before the August 27, 2026 deadline.
How Much Can Henderson & Walton Women’s Center Patients Recover from the 2022 Data Breach Settlement?
The settlement provides four types of benefits: Medical & Credit Monitoring, compensation for Ordinary Losses, compensation for Extraordinary Losses, and compensation for Lost Time.
Credit and Medical Monitoring — No Documentation Needed
Settlement class members may elect to receive three years of one-bureau monitoring that includes real-time credit file monitoring, dark web scanning with immediate notification of potential unauthorized use, comprehensive public record monitoring, identity theft insurance with no deductible, and access to fraud resolution agents.
Ordinary Losses — Up to $150 with Documentation
Up to $150 per settlement class member for documented out-of-pocket expenses, including bank fees, long-distance phone charges, data charges (only if charged based on amount used), postage, gasoline for local travel, and fees for credit reports, credit monitoring, or other identity theft insurance products purchased between August 2022 and August 27, 2026.
Extraordinary Losses — Up to $2,500 with Documentation
Compensation is available for documented extraordinary losses directly and proximately caused by the cybersecurity incident, beyond those covered under the ordinary losses provision — up to a maximum of $2,500 per person, upon submission of a detailed claim and supporting documentation. Acceptable documents include identity theft reports, affidavits, police reports, and correspondence with financial institutions.
Lost Time — Up to $90, No Documentation Required
Settlement class members who spent time monitoring accounts or otherwise dealing with the cybersecurity incident can submit a claim for reimbursement of $30 per hour, up to three hours, for a total of $90, provided they provide an attestation on the claim form indicating the activities they performed and how they were related to the cybersecurity incident.
No money is guaranteed until the court grants final approval. Always say “up to” when sharing these figures with others — your actual payout depends on what you can document and how many valid claims are filed.
How to File Your Henderson & Walton Women’s Center Data Breach Settlement Claim — Step by Step
⚠️ Claim deadline: August 27, 2026 — the court’s Final Approval Hearing is August 12, 2026. File before that date.
- Go to the official claim portal at hwwcdataincidentsettlement.com/submit-claim — this is the only legitimate place to file
- Enter your full name, mailing address, email address, and any notice ID number if you received a breach notification letter from HWWC
- Choose your benefit type — monitoring only, lost time, ordinary losses, or extraordinary losses (you can claim more than one)
- Upload documentation if claiming cash losses — receipts, bank statements, credit monitoring invoices, police reports, or identity theft affidavits; no documentation needed for monitoring or lost time
- Complete the attestation for the lost time claim by describing what you did and how it related to the breach
- Submit your claim and save your confirmation number — the administrator will email you if more information is needed
Claim forms submitted by mail must be postmarked no later than August 27, 2026, and sent to: HWWC Settlement, Attn: Claim Form Submissions, 1650 Arch Street, Suite 2210, Philadelphia, PA 19103. Takes about five minutes to complete online.
Should Henderson & Walton Women’s Center Patients Opt Out or Object Before July 13, 2026?
What Does Opting Out of the Henderson & Walton Women’s Center Settlement Mean for Your Rights?
If you exclude yourself from the settlement, you give up the right to receive any settlement benefits, but you keep your right to sue Henderson in a separate lawsuit about the claims this settlement resolves. Most patients should not opt out unless they have strong individual losses and have already spoken with an attorney. Opt-out requests must be postmarked no later than July 13, 2026, and mailed to: HWWC Settlement, Attn: Opt-Out Requests, P.O. Box 58220, Philadelphia, PA 19102.
How to Object to the Henderson & Walton Women’s Center Settlement Terms Before June 29, 2026
Settlement class members who wish to object to the settlement must submit a written objection no later than June 29, 2026. Objecting means you are telling the court the terms are unfair while still remaining in the class — you can still file a claim. The objection must be filed with the Circuit Court Clerk, Jefferson County, Alabama, 716 Richard Arrington Jr. Blvd. N., Birmingham, AL 35203, and mailed to class counsel and the settlement administrator.
If you are considering opting out or objecting, speaking with a class action lawsuit attorney before the applicable deadline is strongly recommended.
Henderson & Walton Women’s Center Data Breach Settlement — Key Dates and Deadlines
| Milestone | Date |
| Cybersecurity Incident | February 11–14, 2022 |
| HWWC Notified HHS | August 23, 2022 |
| Lawsuit Filed | February 29, 2024 |
| Objection Deadline | June 29, 2026 |
| Opt-Out Deadline | July 13, 2026 |
| Final Approval Hearing | August 12, 2026, at 2:00 PM CDT, Jefferson County Courthouse, Birmingham, AL |
| Claim Filing Deadline | August 27, 2026 |
| Expected Payment Date | TBD — payments issued after settlement becomes final and any appeals are resolved |
Henderson & Walton Women’s Center Data Breach Settlement — Frequently Asked Questions, No. CV-2024-900914.00
Is there a real settlement for the Henderson & Walton Women’s Center 2022 data breach?
Yes. A proposed settlement has been reached with Henderson & Walton Women’s Center to resolve legal claims pertaining to the unauthorized access to Henderson’s computer systems between February 11 and February 14, 2022. The court has not yet given final approval, but the claim portal is open and accepting submissions now.
Do I need to have received a breach notification letter to file a Henderson & Walton Women’s Center settlement claim?
Not necessarily. The settlement class includes all persons whose personal information and/or protected health information was potentially compromised as a result of the cybersecurity incident. If you were a patient whose records were in HWWC’s systems during February 2022, you may qualify even if you did not receive a letter. Contact the administrator at 1 (855) 823-4243 to confirm.
Do I need a lawyer to file a Henderson & Walton Women’s Center data breach settlement claim?
No. Submitting a claim form is the only way to receive any settlement benefits, and you can do it yourself at HWWCDataIncidentSettlement.com. Class counsel Mariya Weekes of Milberg Coleman Bryson Phillips Grossman PLLC represents the class at no direct cost to you. You may hire your own lawyer if you prefer, but it is not required for a standard claim.
What personal information was exposed in the Henderson & Walton Women’s Center breach?
Personal information at risk includes dates of birth, Social Security numbers, medical information, health insurance information, driver’s license numbers, and state ID numbers. This is particularly sensitive because it combines identity data with protected health information — a combination often targeted for medical identity theft.
When will Henderson & Walton Women’s Center settlement payments be sent?
Payments will be issued by the settlement administrator after the settlement is approved and becomes final. The settlement approval process may take time and there may be appeals that must be resolved before any settlement benefits can be issued. The Final Approval Hearing is scheduled for August 12, 2026.
What happens if I do nothing and miss the Henderson & Walton Women’s Center claim deadline?
If you do nothing, you will not receive any settlement benefits, and you will also give up your rights to sue Henderson and other released parties for the claims this settlement resolves. Filing a claim is the only way to preserve your right to compensation.
Can I opt out of the Henderson & Walton Women’s Center settlement and sue on my own?
Yes, but you must act before July 13, 2026. Opting out means submitting a personally signed request containing your name, address, telephone number, and a statement requesting exclusion, postmarked no later than July 13, 2026. Speak with a data privacy attorney first — individual lawsuits are typically only worthwhile if your documented losses significantly exceed what the settlement offers.
Will a Henderson & Walton Women’s Center settlement payment be reported to the IRS?
Settlements over $600 for non-physical harm may be reportable. The settlement does not address tax treatment directly. Consult a tax professional about how any cash payment you receive could affect your tax filing — this is especially relevant for extraordinary loss claims near the $2,500 maximum.
Sources Used in This Henderson & Walton Women’s Center Data Breach Article
- Long Form Notice — Kim Townsel v. Henderson & Walton Women’s Center, P.C., No. CV-2024-900914.00, Circuit Court of Jefferson County, Alabama: https://angeion-public.s3.amazonaws.com/www.hwwcdataincidentsettlement.com/docs/Long%20Form%20Notice.pdf
- Official Settlement Claim Portal — Angeion Group: https://www.hwwcdataincidentsettlement.com/submit-claim
Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against the official Long Form Notice published by the Angeion Group at HWWCDataIncidentSettlement.com and the Circuit Court of Jefferson County, Alabama case records on May 27, 2026. Last Updated: May 27, 2026.
This article is for informational purposes only and does not constitute legal advice. Individual circumstances differ. Consult a qualified attorney for advice about your specific situation.
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah
