OneTouchPoint Data Breach Settlement, Check If You Qualify, Dusterhoft v. OneTouchPoint Corp., No. 2025CV002181

If you got a letter in 2022 from your health plan — Anthem, Humana, Aetna ACE, Kaiser Permanente, or one of dozens of others — about a data breach at a vendor called OneTouchPoint, you’re likely part of Dusterhoft v. OneTouchPoint Corp., Case No. 2025CV002181. You can claim a flat $75 payment, or up to $5,000 with documentation, no later than November 16, 2026.

OneTouchPoint Data Breach Settlement — Key Facts

Settlement Amount	No fixed common fund — this is a claims-made settlement. Per-claimant benefits run from $75 (no proof needed) up to $5,000 (documented losses), plus optional credit monitoring
Claim Deadline	November 16, 2026
Who Qualifies	U.S. residents (and territories) whose Private Information OTP’s investigation confirmed was impacted in the April 2022 data incident, or named litigation plaintiffs
Estimated Payout	$75 flat (no proof required), or up to $500 (ordinary losses) / up to $5,000 (extraordinary losses, documented) / up to $100 (time spent) — plus 2 years of credit monitoring, optional and separate
Proof Required (Yes/No)	Only for ordinary-loss, extraordinary-loss, and time-spent claims. Not required for the $75 flat payment
Settlement Status	Preliminarily approved; final approval hearing pending
Court & Case Number	Circuit Court of Waukesha County, Wisconsin, No. 2025CV002181
Law Alleged	Negligence, breach of contract, state consumer-protection and data-privacy statutes, state breach-notification laws
Administrator	Analytics Consulting LLC
Official Claim Site	OTPDataIncident.com
Last Updated	September 10, 2026

Who Is OneTouchPoint and Why Are They Being Sued Over This Data Breach?

OneTouchPoint is a Wisconsin-based printing and mailing vendor that handles member communications — ID cards, welcome kits, health-assessment mailers — for dozens of health insurers and medical groups nationwide. That access to patient records is exactly what made it a target: a cybersecurity incident in April 2022 hit systems holding data OTP managed on behalf of clients including Anthem, Humana, and multiple Blue Cross Blue Shield plans.

What Did OneTouchPoint Do Between April 2022 and Now?

OTP discovered encrypted files on its systems on April 28, 2022, and told customers by early summer that an unauthorized actor had accessed its network. The company said it couldn’t determine exactly which files the intruder viewed, so it worked with each affected healthcare client to figure out whose records were on the compromised systems. Publicly filed breach notifications to state regulators, including Maine’s Attorney General, put the number affected at more than a million people nationwide — and OTP’s own later regulatory filings indicated that figure grew substantially as the investigation continued.

Plaintiffs say names, addresses, dates of birth, member IDs, and health-assessment information were exposed as a result. OTP disputes that any of this amounted to legal wrongdoing — the company “denies each and all of the claims and contentions alleged against it” in the lawsuit, according to the settlement notice, the standard posture in a case resolved without trial.

Did your health insurer send you a letter in mid-2022 mentioning a “third-party vendor incident” or a breach at a “business associate”? That’s very likely this case — most people remember their own insurer’s name, not OneTouchPoint’s.

Who Qualifies for the OneTouchPoint Data Breach Settlement?

Here’s exactly how to know if this case includes you.

• Anyone in the U.S. or its territories whose Private Information OTP’s own investigation confirmed was compromised in the April 2022 incident
• Anyone who received a notice that their information was impacted — even if the letter arrived under your health plan’s name, not OTP’s
• Named plaintiffs already involved in litigation over the breach
• Anyone sent a notice saying impact to their information “could not be confirmed” — they qualify for injunctive relief only, not a cash payment
• OTP’s own officers, directors, and their affiliated entities are excluded

There’s no need to prove your information was misused. Over a million people got a notice, and if yours was one of them, you’re already presumed eligible — filing is about claiming your benefit, not proving harm.

OneTouchPoint Data Breach Victims Outside Wisconsin — Are You Still Covered?

Yes. The lawsuit is in Wisconsin state court because that’s where OTP is based, but the settlement class covers residents of all 50 states and U.S. territories. Where you live doesn’t affect your eligibility — only whether your data was on the affected OTP systems.

Not sure if you qualify for the OneTouchPoint data breach settlement? A free consultation with a data privacy attorney can help before the November 16, 2026, deadline.

How Much Can OneTouchPoint Settlement Class Members Get? Up to $5,000 Per Person

OneTouchPoint Payout Without Proof — $75 Flat

Choose this if you don’t want to dig up receipts. Check a box, confirm you got a breach notice, and you’re done — no documentation required.

OneTouchPoint Payout With Proof — Up to $500 (Ordinary Losses) or $5,000 (Extraordinary Losses)

If you can document actual costs — bank fees, credit monitoring you paid for yourself, professional fees to fix identity theft — you can claim more. Ordinary losses cap at $500. Harder-to-prove extraordinary losses, like professional fees, cap at $5,000. You can’t combine ordinary, extraordinary, and time-spent claims past $5,000 total, and credit monitoring is separate from either cap.

Time Spent and Credit Monitoring

You can also claim $25 an hour for time spent dealing with the breach, up to 4 hours ($100 max), with no receipts needed — just a description of what you did. On top of any cash payment, every claimant can request two years of one-bureau credit monitoring with at least $1 million in fraud protection, at no extra cost.

The $75 flat payment sounds small next to the $5,000 cap. But $5,000 requires paperwork most people don’t have for a breach that happened three years ago — for most claimants, $75 plus free credit monitoring is the realistic number.

Payments may be reported to the IRS depending on the amount and payment method you choose. Check with a tax professional if you’re claiming a larger, documented amount.

How to File Your OneTouchPoint Data Breach Settlement Claim — Step by Step

1. Go to OTPDataIncident.com and start your claim, or use the Claim Number and PIN from your mailed notice at the direct claims portal
2. Enter your name, address, email, and phone number
3. Choose your benefit: the $75 flat payment, or documented ordinary losses, extraordinary losses, and/or time spent
4. Upload proof if you’re claiming losses — third-party documentation only; handwritten notes alone won’t qualify
5. Check the box for two years of credit monitoring if you want it
6. Choose how you want to get paid — PayPal, Venmo, Zelle, virtual prepaid card, or physical check — then sign and submit

Takes about 10 minutes for the flat payment; longer if you’re documenting losses. Either way, the deadline is November 16, 2026.

Should OneTouchPoint Class Members Opt Out or Object Before October 16, 2026?

What Opting Out of the OneTouchPoint Settlement Actually Means

Opting out means giving up any settlement payment — but keeping your right to sue OTP on your own over the breach. Most people shouldn’t do this without legal advice. The opt-out deadline is October 16, 2026, a full month before the claim deadline.

How to Object to the OneTouchPoint Settlement

Objecting means staying in the class while telling the court what you don’t like about the deal — the benefit amounts, the $1,500,000 attorneys’ fee request, or the $1,000-per-representative service awards. Objections must be mailed to both Class Counsel and OTP’s counsel by October 16, 2026, and must include the case title, your name, address, and phone number, your legal and factual reasons, and copies of any supporting documents.

Talk to a class action lawsuit attorney before October 16, 2026, if you’re considering either option.

OneTouchPoint Data Breach Settlement — Key Dates, 2026

Milestone	Date
Settlement Agreement Executed	July 2–10, 2026
Preliminary Approval	UNVERIFIED — exact date not stated in the documents reviewed
Opt-Out Deadline	October 16, 2026
Objection Deadline	October 16, 2026
Claim Filing Deadline	November 16, 2026
Final Approval Hearing	November 18, 2026, 10:00 a.m., Waukesha County Circuit Court
Expected Payment Date	UNVERIFIED — payments go out within 30 days of the Effective Date, which depends on when final approval becomes final and any appeals resolve

OneTouchPoint Data Breach — Frequently Asked Questions, No. 2025CV002181

Do I need a lawyer to file a OneTouchPoint settlement claim?

 No. You can file directly at OTPDataIncident.com. A data privacy attorney can help if you’re weighing whether to opt out and pursue an individual claim instead.

Is the OneTouchPoint data breach settlement legitimate?

 Yes. It’s supervised by the Circuit Court of Waukesha County, Wisconsin, which has granted preliminary approval. A final approval hearing is set for November 18, 2026.

When will OneTouchPoint settlement payments be sent? 

Not yet determined. Payments go out within 30 days of the settlement’s Effective Date, which follows final court approval and the resolution of any appeals.

What if I missed the OneTouchPoint claim deadline? 

Contact the Settlement Administrator, Analytics Consulting LLC, at 866-996-3808 before November 16, 2026, to ask about your options — late claims aren’t guaranteed a payout.

Will my OneTouchPoint settlement payment go on a 1099? 

Possibly, depending on the amount and how you’re paid. Talk to a tax professional about how a settlement payment affects your return.

Why did I get a notice under my health plan’s name instead of OneTouchPoint’s?

 OTP notified affected individuals on behalf of dozens of healthcare clients, and many of those notices went out under each client’s own name and letterhead rather than OTP’s. That’s why most people don’t recognize “OneTouchPoint” even though it’s the company that was actually breached.

I don’t remember getting a breach notice in 2022 — can I still check if I qualify?

 Yes. Call the Settlement Administrator at 866-996-3808 or email OTPDataIncident@noticeadministrator.com with your information to check your status.

Can I claim both the $75 flat payment and reimbursement for documented losses? 

No. You choose one or the other. Credit monitoring, however, is available in addition to whichever cash option you pick.

Sources Used in This OneTouchPoint Data Breach Settlement Article

• Notice of Proposed Class Action Settlement, Dusterhoft v. OneTouchPoint Corp., Case No. 2025CV002181: OTPDataIncident.com
• OTP Data Incident Claim Form: OTPDataIncident.com
• Fully Executed Class Action Settlement Agreement and Release: OTPDataIncident.com
• Direct claim-filing portal (Claim Number/PIN login): dusterhoftonetouchpoint.claims-administrator.com
• OneTouchPoint, Inc. data breach notification filed with the Maine Office of the Attorney General, July 27, 2022 (reporting 1,073,316 individuals impacted; OTP’s subsequent filings with state regulators indicated a larger number as the investigation continued): maine.gov

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official Settlement Agreement, Notice, and Claim Form, and against OneTouchPoint’s breach notification filed with the Maine Attorney General’s Office, on September 10, 2026. Last Updated: September 10, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.