ModMed Data Breach Settlement, $2.99M Fund, Claim by November 2, 2026

If Modernizing Medicine, Inc. (ModMed) sent you a notice that your information was caught up in its July 2025 cyberattack, you can now claim money from a $2,999,750.00 class action settlement. You get two years of free medical data monitoring no matter what. On top of that, you choose between a $75 cash payment with no proof needed, or up to $5,000 if you can document real losses. The claim deadline is November 2, 2026.

The case is Cavallaro-Kearins v. Modernizing Medicine, Inc., Case No. 9:25-cv-81443-EA, in the U.S. District Court for the Southern District of Florida. ModMed denies doing anything wrong, and the court has not decided who is right.

ModMed Data Breach Settlement at a Glance

Detail	Information
Case name	Cavallaro-Kearins v. Modernizing Medicine, Inc.
Case number	9:25-cv-81443-EA
Court	U.S. District Court, Southern District of Florida
Settlement fund	$2,999,750.00
Who qualifies	Living U.S. residents who were sent notice that their information was affected
Free benefit for everyone	2 years of CyEx Medical Shield Complete, with $1 million in medical identity theft insurance
Cash option A	Up to $5,000 for documented losses
Cash option B	About $75, no proof required
Claim deadline	November 2, 2026
Opt-out and objection deadline	October 19, 2026
Final approval hearing	November 17, 2026, 2:30 p.m. ET
Settlement administrator	Simpluris, (833) 421-7331

What Happened in the ModMed Cyberattack

ModMed found the attack in July 2025. Hackers got into two of its servers, which the company used to move data from older electronic health record systems onto its current platform. Files on those servers held personal information, and depending on the person, that may include:

• Full name, address, date of birth, phone number, and email
• Social Security number
• Health insurance information
• Medical record and patient account numbers, dates of service, and provider and practice names
• Billing and diagnostic codes, prescriptions, and diagnosis and treatment details

Because ModMed handled data on behalf of medical practices, you may never have dealt with the company directly. What matters is whether a notice reached you.

Who Is Included: You Need the Notice

The class covers all living individuals residing in the United States who were sent a notice that their information was affected by the incident. If you got one, you are in. Notices were scheduled to be mailed by July 29, 2026, and they carry the LoginID and PIN you need to file online.

Directors, officers, and agents of ModMed and its affiliates are excluded, along with government entities, the judge and their family, court staff, and anyone who opts out.

Cash Payment A or B: How to Choose

You can pick only one.

Cash Payment A: up to $5,000 for documented losses. This covers out-of-pocket costs tied to the incident that you paid between July 9, 2025 and November 2, 2026, such as:

• Losses from identity theft or fraud
• Fees for credit reports, credit monitoring, or freezing and unfreezing your credit
• The cost of replacing IDs
• Postage for contacting banks by mail

You need third-party paperwork, like receipts, phone records, or emails. A personal statement or affidavit alone does not count, though it can add context to other documents. You also can’t be repaid for something another source already reimbursed, including any credit monitoring offered in ModMed’s own notification letter.

If your documentation is rejected and you don’t fix the problem, the administrator will treat your claim as Cash Payment B instead. So Option A carries little downside if you have a decent paper trail.

Cash Payment B: about $75, no proof. You don’t have to explain anything. The final amount can land slightly higher or lower than $75 depending on how many people claim and how much they claim in total. The Settlement Agreement, Paragraph 71, explains the math.

The Free Medical Data Monitoring Everyone Gets

Every class member can enroll in two years of CyEx Medical Shield Complete, which includes real-time monitoring with one credit bureau, dark web scanning with immediate alerts, security freeze help, identity theft victim assistance, and $1 million in medical identity theft insurance with no deductible. This is separate from the cash choice, so you can take it and either payment.

Activation codes go out only after the court grants final approval and any appeals are resolved.

How to File a ModMed Claim

1. Find your notice and note your LoginID and PIN.
2. Go to modernizingmedicinedatasettlement.com/form/claim and log in.
3. Pick Cash Payment A or B, and upload documents if you chose A.
4. Submit by November 2, 2026.

You can also mail a paper claim form, with any supporting documents, to ModMed Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958. It must be postmarked by November 2, 2026.

The settlement website has a page for people who can’t find their login details. You can also call the administrator at (833) 421-7331.

Filing, Opting Out, Objecting, or Doing Nothing

Option	Deadline	What happens
File a claim	Nov 2, 2026	You get the free monitoring plus your cash choice, and you give up the right to sue ModMed over these claims
Opt out	Oct 19, 2026	No benefits, and you keep your right to sue
Object	Oct 19, 2026	You tell the court what you dislike, you stay in the class, and you can still file a claim
Do nothing	None	No benefits, and you still give up the right to sue

Note the order: the opt-out and objection deadline falls two weeks before the claim deadline. If you’re leaning toward opting out, decide before October 19.

To opt out, mail a signed request to ModMed Data Incident Settlement, ATTN: Exclusion Request, P.O. Box 25226, Santa Ana, CA 92799-9958. Include the case name and number, your full name, mailing address, and phone number, and the words “Opt-Out Request” or a clear equivalent. You can only opt out for yourself.

Objections are stricter. You must file with the court clerk and send copies to the administrator, Class Counsel, and ModMed’s lawyers. Among the required details, an objection must state whether you or your lawyer used artificial intelligence to prepare it. The FAQ page lists all nine requirements and the mailing addresses. If you both opt out and object, the court treats you as having opted out and overrules your objection.

Timeline

Date	Event
Jul 29, 2026	Notices mailed
Oct 19, 2026	Opt-out and objection deadline
Nov 2, 2026	Claim deadline
Nov 17, 2026, 2:30 p.m. ET	Final approval hearing, West Palm Beach, FL
After final approval and any appeals	Cash payments and monitoring codes issued

The website doesn’t give a payment date, since appeals could delay things. The hearing time can also change without notice, so check the site before relying on it.

Similar Healthcare Data Breach Settlements

ModMed follows the same pattern as other healthcare breach deals, with a documented-loss option, a smaller flat payment, and free monitoring. These earlier settlements show how those terms have looked, though their claim deadlines have passed:

• Thompson Coburn $7.5M Settlement, File Your Claim By July 23
• Alera Group $2M Settlement, File Your Claim By June 29
• Bayhealth Medical Center $2.5M Data Breach Settlement

FAQ

Do I need proof to get paid?

 Not for the $75 option. Only Cash Payment A, up to $5,000, requires documents.

Can I claim both cash payments? 

No. You choose one. The free medical monitoring is separate and available either way.

How much do the lawyers get? 

Class Counsel can ask the court for up to one-third of the fund plus litigation costs. At the maximum, one-third comes to about $999,917. The court decides the final amount, and fees come out of the fund, not out of your pocket.

I never dealt with ModMed. Why did I get a notice?

 ModMed’s servers handled data moved from other health record systems, so a notice can come from a practice you visited rather than from ModMed itself.

What do I give up if I stay in?

 You release claims against ModMed and the Released Parties, whether or not you file. Section XIII of the Settlement Agreement lists exactly which claims.

Who are the class lawyers? 

The court appointed Jeff Ostrow of Kopelowitz Ostrow P.A., Mariya Weekes of Milberg PLLC, and Raina Borrelli of Strauss Borrelli PLLC.

Update Log

• September 24, 2026: Article published. Claim deadline of November 2, 2026 confirmed on the official settlement website.

Sources

• Official settlement website: modernizingmedicinedatasettlement.com (Home, FAQ, and Claim Form pages)

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement website (modernizingmedicinedatasettlement.com), including its FAQ, Important Dates, and claim pages, as of September 24, 2026. Last Updated: September 24, 2026.

This article is for informational purposes only and does not constitute legal or medical advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney or healthcare provider.