Palomar Health Data Breach Settlement, Check If You Qualify Castro et al. v. Arch Health Partners, No. 37-2024-00024339-CU-NP-CTL

There’s a $3.1 million fund waiting for people whose information got caught up in the 2024 Palomar Health Medical Group data breach. Arch Health Partners, which runs Palomar Health Medical Group’s clinics across San Diego and Riverside counties, agreed to the payout to settle a lawsuit over the incident. You have until October 22, 2026, to file a claim.

Palomar Health Data Breach Settlement — Key Facts

Detail	Info
Settlement Amount	$3,100,000
Claim Deadline	October 22, 2026
Who Qualifies	Anyone whose private information was accessed, acquired, or disclosed in the Palomar Health Medical Group data incident (April 23 – May 5, 2024)
Estimated Payout	Up to $5,000 (documented losses) or an estimated $60 (no-proof cash payment)
Proof Required	Yes, for the $5,000 tier. No, for the ~$60 tier
Settlement Status	Preliminarily approved; final approval hearing pending
Court & Case Number	Superior Court of California, San Diego County — No. 37-2024-00024339-CU-NP-CTL
Law Alleged	UNVERIFIED — the specific causes of action pled in the complaint could not be confirmed from an accessible primary-source filing
Administrator	Angeion Group
Official Claim Site	PHMGDataSettlement.com
Last Updated	September 16, 2026

Who Is Palomar Health and Why Are They Being Sued for a Data Breach?

Arch Health Partners, doing business as Palomar Health Medical Group, runs hospitals, clinics, labs, and outpatient centers across North San Diego County and South Riverside County. That footprint means one connected system holds medical histories, Social Security numbers, and insurance details for well over a million patients. When hackers got into that system in the spring of 2024, they landed in a database built to serve an entire region — which is a big part of why this breach reportedly touched more than 1.14 million people.

What Did Palomar Health Do Between April 23 and May 5, 2024?

Palomar Health Medical Group identified the incident on May 5, 2024. A forensic investigation later determined that unauthorized parties had access to the group’s systems starting April 23, 2024 — nearly two weeks before anyone caught it. During that window, the intruders could reach names, addresses, birth dates, driver’s license and Social Security numbers, health insurance details, and medical history.

The lawsuit, filed in San Diego Superior Court, argued that Palomar Health Medical Group had a duty to keep that information locked down and didn’t do enough to stop it from leaking out. The official settlement notice describes the incident as involving “unauthorized access to or acquisition of the Private Information” during that period. Arch Health Partners hasn’t admitted wrongdoing. They agreed to settle instead of taking the case to trial.

That’s more than a million people who didn’t click a bad link or fall for a scam — this happened entirely on Palomar Health’s end of the system.

Who Qualifies for the Palomar Health Data Breach Settlement?

Here’s exactly how to know if this case includes you.

• Anyone who received a notice letter or email from Palomar Health Medical Group about the 2024 data incident
• Patients whose records were stored in Palomar Health Medical Group’s systems between April 23 and May 5, 2024
• People whose Social Security number, driver’s license, or health insurance information may have been exposed during that window
• Those treated at any Arch Health Partners hospital, clinic, lab, or outpatient center during the class period

You generally don’t qualify if you were never a patient of Palomar Health Medical Group or Arch Health Partners, or if your care happened outside the April 23 – May 5, 2024 window.

Palomar Health Patients Outside California — Are You Still Covered?

This isn’t limited to San Diego. The settlement class covers any individual in the United States whose private information was compromised in the breach, regardless of where you live now. Location only matters if you want to attend the final approval hearing in person — eligibility itself is nationwide.

Not sure if you qualify for the Palomar Health data breach settlement? A free consultation with a data privacy attorney can help you sort it out before the October 22, 2026 deadline.

That money is yours if you file a claim. If you don’t, it goes back into the settlement pool for everyone else.

How Much Can Palomar Health Settlement Class Members Get? Up to $5,000 Per Person

Class members choose one of two cash options, plus free credit monitoring.

Palomar Health Payout With Proof — Up to $5,000

If you can show documented, out-of-pocket losses tied to the breach — bank fees, time off work, identity-restoration costs — you can file for reimbursement up to $5,000. You’ll need to submit records like receipts or statements with your claim.

Palomar Health Payout Without Proof — About $60

If you don’t have documentation, or don’t want to dig for it, you can instead claim an estimated $60 cash payment. No proof required.

What Pro-Rata Means for Your Palomar Health Check

Both payout amounts are estimates. The fund is fixed at $3.1 million, so if far more people file valid claims than expected, individual checks shrink to make sure everyone gets paid. Fewer claims filed means a bigger check for the people who did file. Payments over $600 may appear on a 1099 — check with a tax professional if that applies to you.

With more than 1.14 million people eligible and a $3.1 million fund, the no-proof payment is only estimated at around $60 — and it could drop further if claim volume runs high. That’s normal for a breach at this scale, but it’s worth knowing before you decide which tier makes sense for your time.

How to File Your Palomar Health Data Breach Settlement Claim — Step by Step

1. Go to PHMGDataSettlement.com and click “Submit Claim.”
2. Enter the ID and confirmation code from your settlement notice, or your name and contact details if you filed without one.
3. Choose the documented-loss payment (up to $5,000) or the no-proof cash payment (about $60).
4. Upload proof if you’re claiming documented losses — receipts, bank statements, or records of time missed from work.
5. Opt in for the free two years of credit monitoring if you want it, then submit.
6. Save your confirmation number. Angeion Group, the settlement administrator, will email you if anything else is needed.

Takes about 10 minutes. The claim deadline is October 22, 2026, and payments won’t go out until the court grants final approval and any appeals are resolved.

Should Palomar Health Class Members Opt Out or Object Before October 7, 2026?

What Opting Out of the Palomar Health Settlement Actually Means

Opting out means giving up any payment from this settlement. In return, you keep the right to sue Palomar Health Medical Group on your own over the same breach. Most people shouldn’t do this without legal advice first. The opt-out deadline is October 7, 2026.

How to Object to the Palomar Health Settlement

Objecting means staying in the class while telling the court you think the deal isn’t good enough. Your written objection has to follow the format spelled out in the settlement notice and reach the Superior Court of California, County of San Diego, by October 7, 2026.

Talk to a class action lawsuit attorney before October 7, 2026 if you’re considering either option.

Palomar Health Data Breach — Frequently Asked Questions, No. 37-2024-00024339-CU-NP-CTL

Do I need a lawyer to file a Palomar Health data breach settlement claim?

 No. Filing a claim is a free legal claim process you can do yourself at PHMGDataSettlement.com. A data privacy attorney is only worth consulting if you’re weighing whether to opt out or object.

Is the Palomar Health data breach settlement legitimate?

 Yes. It’s a real class action settlement filed under Case No. 37-2024-00024339-CU-NP-CTL in San Diego Superior Court, administered by Angeion Group and posted on the court-approved site PHMGDataSettlement.com.

When will Palomar Health settlement payments be sent?

 Payments go out only after the court grants final approval and resolves any appeals. The final approval hearing is scheduled for November 6, 2026, so payments will likely follow sometime after that.

What if I missed the Palomar Health claim deadline?

 Once October 22, 2026 passes without a filed claim, you generally lose the right to a cash payment from this settlement, though your legal rights may still be affected as a class member. Contact a consumer rights lawyer if you think you have a case for missing it.

Will my Palomar Health settlement payment go on a 1099?

 Payments over $600 may be reported to the IRS on a 1099 form. Check with a tax professional about how your specific payout should be handled.

How do I know if my information was part of the Palomar Health data breach?

 If you received a notice letter or email referencing the 2024 Palomar Health Medical Group data incident, your information was likely included. If you’re unsure, PHMGDataSettlement.com lets you check using details from your notice.

How much is the Palomar Health data breach settlement worth in total?

 Arch Health Partners agreed to fund $3.1 million to resolve the case. That figure covers cash payments, credit monitoring costs, attorneys’ fees, and settlement administration — not just individual payouts.

Sources Used in This Palomar Health Article

• Official Settlement Website — PHMGDataSettlement.com, administered by Angeion Group: https://www.phmgdatasettlement.com/
• HIPAA Journal — “Palomar Health Medical Group; Summit Medical Group Settle Data Breach Lawsuits,” September 2026: https://www.hipaajournal.com/palomar-health-summit-health-medical-groups-data-breach-settlements/
• ComplianceHome — “Palomar Health Medical Group Agrees to $3.1 Million Data Breach Settlement”: https://www.compliancehome.com/palomar-health-medical-group-agrees-to-3-1-million-data-breach-settlement/

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official PHMGDataSettlement.com settlement website, HIPAA Journal, and ComplianceHome, as of September 16, 2026. Last Updated: September 16, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.