Inotiv Data Breach Settlement, Check If You Qualify — Doyal v. Inotiv Inc., No. 49D01-2604-CE-020713

There’s cash on the table if a hacker got into Inotiv’s systems in August 2025 and your name was on the list. Inotiv, Inc. agreed to pay for identity theft protection and out-of-pocket losses to settle Doyal v. Inotiv Inc., No. 49D01-2604-CE-020713, in the Superior Court for Marion County, Indiana. You have until December 2, 2026, to file.

Inotiv Data Breach Settlement — Key Facts

Field	Detail
Settlement Amount	UNVERIFIED — no capped settlement fund is stated; Inotiv pays claims as submitted, plus $275,000 in attorneys’ fees and $2,000 to each of 3 Class Representatives
Claim Deadline	December 2, 2026
Who Qualifies	Anyone in the U.S. sent a notice by Inotiv that their private information was compromised in the August 2025 data breach
Estimated Payout	Up to $500 (documented ordinary losses) + up to $4,000 (documented extraordinary/fraud losses) + up to $80 (lost time) — OR a flat $45 with no proof required
Proof Required (Yes/No)	Yes for the $500/$4,000/$80 categories; No for the flat $45 payment
Settlement Status	Preliminarily approved; awaiting final approval
Court & Case Number	Superior Court for Marion County, Indiana — No. 49D01-2604-CE-020713
Law Alleged	Common-law negligence and related claims; Indiana’s breach notification statute, Ind. Code § 24-4.9, creates no private right of action
Administrator	Simpluris
Official Claim Site	inotivdatabreachsettlement.com/form/claim
Last Updated	September 18, 2026

Who Is Inotiv and Why Are They Being Sued Over a Data Breach?

Inotiv, Inc. (Nasdaq: NOTV) is a West Lafayette, Indiana-based contract research organization that runs drug discovery and safety testing for pharmaceutical and biotech clients — the kind of company that holds sensitive records on thousands of current and former employees, their family members, and outside contacts. That’s exactly the data a ransomware crew went after in August 2025, and it’s why current and former workers, not customers, make up most of the settlement class.

What Did Inotiv Do to Class Members Between August 2025 and Now?

Inotiv detected unusual activity on its systems on August 8, 2025, and its investigation traced unauthorized access back to August 5. A ransomware group calling itself Qilin claimed the attack and said it stole roughly 162,000 files. Inotiv later confirmed the exposed files contained Social Security numbers, dates of birth, and financial information, and notified at least 9,542 people through a filing with Maine’s attorney general.

Here’s the wrinkle most coverage skips: Indiana’s own data breach law, Ind. Code § 24-4.9, requires notice within 45 days of discovery but gives consumers no right to sue under it directly. That’s why this lawsuit — like almost every data breach class action — rests on common-law negligence and related claims about how Inotiv secured the data in the first place, not a claim that Inotiv broke the notification statute itself.

Inotiv denies it did anything wrong, and the court hasn’t ruled on who’s right. Both sides settled to skip the cost and risk of a trial. This case joins a growing docket of data breach lawsuits working through settlement after ransomware hit companies holding sensitive personal records.

That gap between what the hackers claim and what Inotiv has confirmed is worth sitting with — if you got a notice, your information was in the batch the company itself verified, not just something Qilin bragged about online.

Who Qualifies for the Inotiv Data Breach Settlement?

Here’s exactly how to know if this case includes you.

• Anyone who received a written notice from Inotiv stating their private information was compromised in the August 2025 data breach
• Current and former Inotiv employees whose personnel data was on file at the time of the attack
• Family members of Inotiv employees whose information Inotiv also maintained
• Other individuals who had interacted with Inotiv or a company Inotiv has acquired, if Inotiv held their data

You do not qualify if you never received a notice letter — the settlement class is defined specifically as people Inotiv identified and notified, not anyone who merely worked in the industry or heard about the breach.

Inotiv Data Breach Class Members Outside Indiana — Are You Still Covered?

Yes. This is a nationwide settlement. The class covers “all persons in the United States” who received a breach notice from Inotiv — coverage isn’t limited to Indiana residents just because the lawsuit is filed there.

Not sure if you qualify for the Inotiv data breach settlement? A free consultation with a data privacy attorney can help you sort out your eligibility before the December 2 deadline closes.

How Much Can Inotiv Data Breach Settlement Class Members Get? Up to $4,000 Per Person

Every Class Member can enroll in two years of CyEx Medical Shield Complete identity theft protection, which includes $1 million of medical identity theft insurance and monitoring for healthcare ID and medical record exposure. On top of that, there are four cash options — but you pick one path, not several:

Inotiv Payout With Proof — Up to $4,580

If you can document actual losses, you can claim up to $500 for ordinary out-of-pocket costs (credit monitoring fees, ID replacement, postage) plus up to $4,000 for extraordinary losses tied to identity theft or fraud, plus up to $80 for four hours of lost time at $20 an hour. All losses must fall between August 5, 2025, and September 10, 2026, and you need receipts or comparable proof — notes alone won’t cut it.

Inotiv Payout Without Proof — $45 Flat

Instead of documenting anything, you can take a one-time $45 cash payment with no receipts and no explanation required.

There’s no fixed settlement fund named in the Notice, so payments aren’t described as “up to a shared pool” that shrinks as more people file — Inotiv is paying valid claims as submitted, plus attorneys’ fees and service awards, separately. Payments over $600 may be reported on a 1099. Check with a tax professional about your specific situation.

That $45 no-proof option is the whole point for most people — you don’t need a single receipt to get paid something for this.

How to File Your Inotiv Data Breach Settlement Claim — Step by Step

1. Go to the official claim site at inotivdatabreachsettlement.com/form/claim
2. Choose whether you’re claiming the documented-loss categories or the flat $45 payment
3. If claiming documented losses, upload your receipts, bank statements, or other proof, plus a brief written description for any lost-time claim
4. Enroll separately in the two years of CyEx Medical Shield Complete identity theft protection if you want it
5. Submit before December 2, 2026, and save your confirmation
6. Watch your email — the Settlement Administrator, Simpluris, will contact you if anything is missing

Takes about 10 minutes online. If you’d rather mail it in, download the paper Claim Form and send it to Inotiv Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799, postmarked no later than December 2, 2026.

If you’ve already noticed suspicious account activity tied to this breach, document it the way any identity theft victim should before you file your claim — that paper trail is exactly what the extraordinary-losses category asks for.

Should Inotiv Class Members Opt Out or Object Before November 2, 2026?

What Opting Out of the Inotiv Settlement Actually Means

Opting out means you get no payment and no identity theft protection from this settlement, but you keep the right to sue Inotiv on your own over the same data breach. Most people without major documented losses shouldn’t opt out without talking to a lawyer first. The exclusion deadline is November 2, 2026.

How to Object to the Inotiv Settlement

Objecting means staying in the class while telling the court in writing why you think it shouldn’t approve the deal. Objections must be filed with the Clerk of the Court, Community Justice Campus, 675 Justice Way, Indianapolis, IN 46203, and a copy sent to the Settlement Administrator, by November 2, 2026.

Talk to a class action lawsuit attorney before November 2 if you’re considering either option.

Inotiv Data Breach Settlement — Key Dates, 2026

Milestone	Date
Data breach occurred	August 5-8, 2025
Notification mailing to Class Members	September 3, 2026
Opt-Out Deadline	November 2, 2026
Objection Deadline	November 2, 2026
Claim Filing Deadline	December 2, 2026
Final Approval Hearing	December 3, 2026, 11:45 a.m. ET
Expected Payment Date	UNVERIFIED — payments follow final approval and resolution of any appeals; no date set

Inotiv Data Breach — Frequently Asked Questions, No. 49D01-2604-CE-020713

Do I need a lawyer to file an Inotiv data breach settlement claim? 

No. The claim form is designed to be filed without a lawyer, and Class Counsel — Lynn A. Toops and Amina A. Thomas of CohenMalad, LLP — already represents the class at no separate charge to you.

Is the Inotiv data breach settlement legitimate? 

Yes. It resolves Doyal v. Inotiv Inc., No. 49D01-2604-CE-020713, pending in the Superior Court for Marion County, Indiana, and is administered by Simpluris under court supervision.

When will Inotiv settlement payments be sent? 

Not before the Final Approval Hearing on December 3, 2026, and only after any appeals of that approval are resolved. No specific payment date has been announced.

What if I missed the Inotiv claim deadline? 

If you file after December 2, 2026, your claim can be rejected as untimely. Contact the Settlement Administrator at (877) 723-7093 to ask whether a late submission can still be considered.

Will my Inotiv settlement payment go on a 1099?

 Possibly. Payments over $600 may be reported to the IRS. Check with a tax professional about how a settlement payment affects your specific return.

What data was actually exposed in the Inotiv breach?

 Inotiv confirmed Social Security numbers, dates of birth, and financial information for at least 9,542 people, based on its filing with Maine’s attorney general — plus employee, family member, and business-contact data more broadly, according to the settlement notice.

Can I claim both the $45 flat payment and the documented-loss categories?

No. The $45 payment is offered instead of the other cash categories, not in addition to them. Pick whichever benefit fits your situation.

Sources Used in This Inotiv Data Breach Article

• Settlement Website and FAQ — Doyal v. Inotiv Inc., No. 49D01-2604-CE-020713: https://inotivdatabreachsettlement.com/faq/
• Settlement Administrator Contact Page — Simpluris: https://inotivdatabreachsettlement.com/contact/
• Maine Attorney General breach notification filing — 9,542 individuals affected, referenced via Cybersecurity Dive: https://www.cybersecuritydive.com/news/inotiv-confirm-cyberattack-data-theft/807277/
• Inotiv, Inc. official notice — “Inotiv Provides Notice Regarding Cybersecurity Incident”: https://www.inotiv.com/news/inotiv-provides-notice-regarding-cybersecurity-incident
• Indiana Code § 24-4.9 (Disclosure of Security Breach): https://law.justia.com/codes/indiana/title-24/article-4-9/chapter-3/section-24-4-9-3-1

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement website and Inotiv’s cybersecurity incident notice on September 18, 2026. Last Updated: September 18, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.