OnePoint Patient Care Data Breach Settlement, Check If You Qualify — Christopher Russo v. OP Pharmacy, LLC a/k/a OnePoint Patient Care, LLC, No. 3:24-cv-00649-RGJ

There’s up to $3,500 waiting for you — if OnePoint Patient Care sent you a data breach notice and you can show what it cost you. OnePoint agreed to pay $2,115,000 to settle claims that hackers accessed patient records during an August 2024 breach. You have until October 8, 2026 to file, and even a no-proof $100 payment is on the table.

OnePoint Patient Care Data Breach Settlement — Key Facts

Item	Detail
Settlement Amount	$2,115,000.00
Claim Deadline	October 8, 2026 (submitted online or postmarked)
Who Qualifies	U.S. residents whose private information may have been accessed in the Aug. 8, 2024 Data Incident, including anyone sent notice by OnePoint
Estimated Payout	Up to $3,500 (documented losses) or an estimated $100 (no-proof alternate cash)
Proof Required	Yes for Cash Payment A; No for Cash Payment B
Settlement Status	Court-authorized notice sent; Final Approval Hearing set for Sept. 23, 2026
Court & Case Number	U.S. District Court, Western District of Kentucky — No. 3:24-cv-00649-RGJ
Law Alleged	Negligence, negligence per se, breach of implied contract, unjust enrichment, breach of fiduciary duty
Administrator	Epiq (OnePoint Data Incident Settlement Administrator)
Official Claim Site	onepointsettlement.com
Last Updated	August 1, 2026

Who Is OnePoint Patient Care and Why Are They Being Sued for a Data Breach?

OnePoint Patient Care is a Tempe, Arizona pharmacy that fills and delivers medication for hospice and palliative care patients nationwide. Because it holds prescriptions, diagnoses, and facility records for people already navigating terminal illness, the private information on its network was uniquely sensitive. That’s exactly the data an unauthorized party accessed between August 6 and August 8, 2024.

What Did OnePoint Patient Care Do to Patients Between August 6 and August 8, 2024?

OnePoint first noticed suspicious activity on its network on August 8, 2024. Investigators confirmed a week later that someone had pulled files containing patient names, addresses, facility locations, and medical information during that three-day window — Social Security numbers, too, for some patients.

The company’s first report to federal regulators, filed October 14, 2024, listed 795,916 affected people. That number more than doubled five weeks later. A filing with the Maine Attorney General on November 22, 2024 put the real total at 1,741,152 individuals, including 99 Maine residents, and notification letters started going out on November 26, 2024.

Plaintiffs sued for negligence, negligence per se, breach of implied contract, unjust enrichment, and breach of fiduciary duty. OnePoint <cite index=”3-1″>”denies any and all liability arising from these claims,”</cite> arguing it was itself a crime victim. It agreed to settle anyway, rather than spend years litigating that position.

If OnePoint isn’t the only notice you’ve gotten this year, the Anne Arundel Dermatology data breach settlement covers a nearly identical claim structure for a separate healthcare breach. That jump from under 800,000 to 1.7 million isn’t a typo — it’s the gap between what a company first tells regulators and what it finds once it keeps digging.

Who Qualifies for the OnePoint Patient Care Data Breach Settlement?

Here’s exactly how to know if this case includes you.

• Living individuals residing in the U.S. whose private information may have been accessed in the August 2024 Data Incident
• Anyone who received a notice letter from OnePoint about the breach
• Current and former hospice patients whose records passed through OnePoint’s systems during that window

You do not qualify if you’re one of OnePoint’s own officers or directors, a parent or subsidiary entity, the presiding judge or her immediate family, court staff, or someone a court has found guilty of causing the breach itself.

If you got a postcard or letter about this, you don’t need to track down extra proof of eligibility. Just file.

OnePoint Patient Care Data Breach Victims Outside Kentucky — Are You Still Covered?

Yes. This is a federal class action, so coverage is nationwide — it isn’t limited to Kentucky just because that’s where the case is filed. Ninety-nine of the affected people named in state filings live in Maine alone, and the rest are spread across the country.

Not sure if you qualify for the OnePoint Patient Care data breach settlement? A free consultation with a data privacy attorney can help before the October 8, 2026 deadline.

How Much Can OnePoint Patient Care Data Breach Settlement Class Members Get? Up to $3,500 Per Person

Two paths, one form. Choose Cash Payment A and submit receipts, bills, or account statements tied to the breach, and you can be reimbursed up to $3,500. Skip the paperwork and pick Cash Payment B instead, and you’re in line for an estimated $100 with no documentation required.

Neither figure is locked in. More valid claims than the fund can cover means a pro-rata cut for everyone; fewer claims, and checks could grow. Payment goes out by check or digital transfer — but only after final approval.

Class Counsel can ask for up to a third of the $2,115,000 fund, or roughly $705,000, plus up to $2,500 for each Class Representative, before anyone else gets paid. That’s normal here. Still worth knowing before you decide the payout is worth your time.

Payments over $600 may appear on a 1099. Check with a tax professional before you spend it.

If a $3,500 documented-loss tier sounds familiar, it should — the Illinois Bone & Joint Institute data breach settlement used a comparable structure for a similar healthcare data breach, so it’s worth a look if you were affected by both.

How to File Your OnePoint Patient Care Data Breach Settlement Claim — Step by Step

1. Go to onepointsettlement.com and click “Submit a Claim.”
2. Enter your name, mailing address, phone, email, and the Unique ID printed on your notice letter.
3. Choose Cash Payment A (documented losses) or Cash Payment B (no-proof alternate cash).
4. If you picked Option A, upload receipts, bills, or statements showing losses tied to the Data Incident from August 8, 2024 onward.
5. Pick check or digital payment, sign, and submit.
6. Save your confirmation. Watch your email — the administrator may ask for more documents.

Takes about 10 minutes. You have until October 8, 2026.

Should OnePoint Patient Care Class Members Opt Out or Object Before August 24, 2026?

What Opting Out of the OnePoint Patient Care Settlement Actually Means

Opting out means no payment, but you keep your right to sue OnePoint on your own over this breach. Your written request needs your signature and must be mailed — not emailed, not called in — postmarked by August 24, 2026. Most people shouldn’t opt out without talking to a lawyer first.

How to Object to the OnePoint Patient Care Settlement

Objecting keeps you inside the class while telling the court what you don’t like about the deal. Your written objection needs your contact information, the case number, your grounds, and your signature, filed with the court and mailed to Class Counsel, Defendant’s Counsel, and the Settlement Administrator by August 24, 2026.

Talk to a class action lawsuit attorney before August 24, 2026 if you’re weighing either option.

OnePoint Patient Care Data Breach Settlement — Key Dates, 2026

Milestone	Date
Settlement Proposed	UNVERIFIED — exact agreement date not stated in the Notice or FAQ
Claims Period Opens	UNVERIFIED — not specified; the claim portal is currently live
Claim Filing Deadline	October 8, 2026
Opt-Out Deadline	August 24, 2026
Objection Deadline	August 24, 2026
Final Approval Hearing	September 23, 2026, 1:30 p.m. ET, Louisville, KY
Expected Payment Date	UNVERIFIED — payment follows final approval and any appeals; no date set yet

OnePoint Patient Care Data Breach — Frequently Asked Questions, No. 3:24-cv-00649-RGJ

Do I need a lawyer to file a OnePoint Patient Care data breach settlement claim? 

No. You can submit a claim yourself at onepointsettlement.com. A consumer rights lawyer matters more if you’re weighing whether to opt out or object.

Is the OnePoint Patient Care settlement legitimate? 

Yes. Judge Rebecca Grady Jennings of the Western District of Kentucky authorized the notice, and Epiq — an established class action settlement administrator — is running the claims process.

When will OnePoint Patient Care settlement payments be sent?

 Not before the Final Approval Hearing on September 23, 2026, and only after the court signs off and any appeals resolve.

What if I miss the October 8, 2026 OnePoint Patient Care claim deadline?

 Late claims typically aren’t accepted. Filing now, well ahead of the deadline, is the safer move.

Will my OnePoint Patient Care settlement payment show up on a 1099?

 Possibly. Payments over $600 may be reported. Ask a tax professional how that applies to your return.

What is the “Unique ID” on the OnePoint Patient Care claim form?

 It’s the identifier printed on the notice letter OnePoint mailed you. Call 1-844-635-2035 if you can’t find yours.

Why did OnePoint Patient Care’s affected-victim count jump from 795,916 to 1,741,152?

 OnePoint’s October 2024 report to federal regulators listed 795,916 people. Its November 2024 filing with the Maine Attorney General more than doubled that figure, to 1,741,152 — a fact confirmed directly in that state filing.

Can I sue OnePoint Patient Care on my own instead of joining the settlement?

 Only if you opt out by August 24, 2026. Staying in the class and filing a claim means giving up that right in exchange for your settlement class member benefits.

Sources Used in This OnePoint Patient Care Data Breach Article

• Official Settlement Notice — OnePoint Data Incident Settlement Notice: https://onepointsettlement.com/Content/Documents/Notice.pdf
• Settlement Administrator FAQ (Epiq) — OnePointSettlement.com, updated June 30, 2026: https://onepointsettlement.com/Home/FAQ
• Official Claim Form — OnePoint Data Incident Settlement Claim Form: https://onepointsettlement.com/Content/Documents/OnePoint%20Data%20Incident%20Settlement_%20Claim%20Form.pdf
• Official Claims Portal — Submit a Claim: https://onepointsettlement.com/Login
• Office of the Maine Attorney General — Data Breach Notification, filed Nov. 22, 2024: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/495c517f-43f3-4ad5-96e8-a993fb737cd6.html

Researched and written by Israr, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement notice, claim form, and Settlement Administrator FAQ at onepointsettlement.com, plus the Maine Attorney General’s data breach notification filing, on August 1, 2026. Last Updated: August 1, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.