St. Andrew’s Resources for Seniors Data Breach Settlement, Did You Get a Notice? Here’s What to Do
St. Andrew’s Resources for Seniors System agreed to settle a class action lawsuit after a February 2024 cybersecurity incident allowed an unauthorized party to access employee email accounts containing sensitive personal, medical, and financial information. If you received a notice from St. Andrew’s about this breach, you may qualify for up to $5,080 in cash plus two years of free medical identity monitoring. You must file a claim to receive any benefit. The claim deadline is May 21, 2026.
Quick Facts
| Field | Detail |
| Settlement Amount | TBD — fund covers all class member payments, monitoring, fees, and administration |
| Claim Deadline | May 21, 2026 |
| Who Qualifies | U.S. residents who received a notice from St. Andrew’s about the February 2024 data breach |
| Payout Per Person | Up to $5,080 (documented losses + lost time) OR $50 flat payment (no proof needed) |
| Proof Required | Yes — for loss claims; No — for $50 alternative payment and credit monitoring |
| Settlement Status | Proposed — awaiting final court approval |
| Administrator | Simpluris, Inc. |
| Official Website | standrewsdatasettlement.com |
Current Status and What Happens Next
- Proposed settlement — the court has not yet granted final approval. The settlement is currently open for claims while the court review process continues.
- Opt-out deadline: April 21, 2026 — if you want to preserve your right to sue St. Andrew’s separately, you must submit your exclusion request before this date.
- Final approval hearing: June 8, 2026 at 9:30 a.m. CST — if the court approves the settlement, the administrator will issue payments and monitoring codes within 60 days after final approval and the resolution of any appeals.
What Is the St. Andrew’s Data Breach Lawsuit About?
St. Andrew’s Resources for Seniors System is a St. Louis-area organization that provides assisted living, in-home care, and rehabilitation services to seniors and their families. On or around February 8, 2024, St. Andrew’s discovered suspicious activity in certain employee email accounts. The organization launched an investigation with the help of third-party forensic specialists, which confirmed an unauthorized actor had accessed those accounts. St. Andrew’s did not complete its review of the affected data until January 6, 2025 — nearly a year after the breach — and began notifying affected individuals on February 7, 2025.
Plaintiff Barnett and other affected individuals filed the class action lawsuit Barnett, et al. v. St. Andrew’s Resources for Seniors System, Case No. 2522-CC09432, in the Circuit Court for the City of St. Louis, Missouri. The lawsuit alleged St. Andrew’s failed to adequately protect the sensitive personal, health, and financial information it held — information that seniors and their families had entrusted to the organization when seeking care services.
St. Andrew’s denies any wrongdoing. The organization agreed to settle to avoid the cost and uncertainty of continued litigation, and the court has not made any finding that St. Andrew’s did anything wrong.
What Personal Information Was Exposed?
The data breach potentially exposed a wide range of highly sensitive information. The exact information affected varies by individual, but the breach may have included:
- Full names and home addresses
- Social Security numbers
- Driver’s license numbers, state identification numbers, and passport numbers
- Military identification numbers
- Financial account information and payment card information
- Health insurance information
- Medical information
If you received a notice from St. Andrew’s, your letter specifies which categories of your personal information were potentially involved. Medical and financial information are particularly sensitive for seniors — this type of data can be used for medical identity theft, fraudulent insurance billing, or financial fraud. The settlement’s credit monitoring benefit specifically includes medical identity protection, which is especially important given the nature of the exposed data.
Who Is Eligible to File a Claim?
- You may qualify if you currently reside in the United States or its territories.
- You may qualify if a February 2024 cybersecurity incident at St. Andrew’s Resources for Seniors System potentially affected your personal information.
- You may qualify if you received a notice from St. Andrew’s — either by mail or email — informing you that your information may have been impacted.
- You may qualify whether you were a client, resident, patient, family member, or employee whose information St. Andrew’s held.
- You do not qualify if you did not receive a notice from St. Andrew’s about this specific breach incident.
Your notice includes a unique ID and PIN that you will need to file your claim online. Check your mail carefully — including anything that arrived from St. Andrew’s or a settlement administrator since February 2025. If a family member helps manage your mail and you think you may have missed your notice, contact Simpluris at (833) 647-9065 or [email protected].
Related article: State Farm Bank & Afni $110M Repossession Settlement, Cash, Debt Write-Off & Credit Relief
How Much Can You Receive?
The settlement offers four benefit options. You can select the one that best fits your situation. You may also add credit monitoring to any cash benefit option.
| Benefit Type | Maximum Amount | Proof Required |
| Out-of-Pocket Losses | Up to $5,000 | Yes — receipts, bank/credit card statements, or other third-party records |
| Lost Time (included within loss cap) | Up to $80 (4 hours × $20/hr) | Written description + attestation under penalty of perjury |
| Alternative Cash Payment | $50 flat | No |
| Medical Identity Monitoring (2 years) | Free + $1M identity theft insurance | No |
Out-of-pocket losses cover documented, unreimbursed expenses you incurred as a result of the breach. Eligible expenses include unreimbursed losses from identity theft or fraud, fees paid for credit monitoring or credit freeze/unfreeze services, costs to replace government-issued IDs, and postage costs to contact financial institutions or banks by mail. You must submit receipts, bank or credit card statements, or other supporting third-party records.
Lost time covers up to four hours you spent dealing with the breach at $20 per hour — a maximum of $80. You must have spent at least one full hour on breach-related tasks and provide a written description of those activities along with a signed attestation under penalty of perjury. Lost time claims fall within the $5,000 out-of-pocket loss cap.
The $50 alternative cash payment requires no documentation at all. If you have not experienced documented losses but still want compensation for the privacy risk and inconvenience the breach caused, simply select this option on your claim form. This is the fastest option, particularly for seniors who may find documentation gathering difficult.
CyEx Medical Shield Complete provides two years of one-bureau medical identity monitoring plus $1,000,000 in identity theft protection insurance. Given that medical information was among the data exposed, this monitoring is especially valuable — medical identity theft can result in fraudulent bills and incorrect information in your health records.
How to File a Claim
Step 1 — Locate your unique ID and PIN from the notice St. Andrew’s sent you by mail or email. You will need both to file online.
Step 2 — Visit the official claim portal at standrewsdatasettlement.com and click “Submit a Claim,” or download the paper claim form from the same website to mail your submission. You may also call (833) 647-9065 to request a paper claim form be mailed to you.
Step 3 — Select the benefit you want to claim: out-of-pocket losses, lost time, the $50 alternative cash payment, and/or the two-year medical identity monitoring service.
Step 4 — If you are claiming out-of-pocket losses, upload or attach your supporting documentation — receipts, bank statements, or credit card statements showing your unreimbursed expenses. If claiming lost time, write a clear description of the time you spent addressing the breach and sign the attestation.
Step 5 — Submit your completed claim online or by email to [email protected] by May 21, 2026. If mailing a paper form, ensure it is postmarked by May 21, 2026, to: St. Andrew’s Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958.
Step 6 — Save your claim confirmation number or keep a copy of your mailed form for your records.
Estimated time to complete: 5 minutes for the $50 alternative payment; 15–25 minutes if gathering and uploading documentation for loss claims. Family members may assist seniors in completing the online form.
Important Deadlines and Dates
| Milestone | Date |
| Breach Occurred (Suspicious Activity Detected) | February 8, 2024 |
| St. Andrew’s Completed Data Review | January 6, 2025 |
| Breach Notification Letters Sent to Affected Individuals | February 7, 2025 |
| Lawsuit Filed (Barnett, et al. v. St. Andrew’s) | 2025 |
| Opt-Out (Exclusion) Deadline | April 21, 2026 |
| Objection Deadline | April 21, 2026 |
| Claim Filing Deadline | May 21, 2026 |
| Final Approval Hearing | June 8, 2026 at 9:30 a.m. CST |
| Expected Payment Date | Within 60 days after final approval and resolution of any appeals |
Frequently Asked Questions
Do I need a lawyer to file a claim in this settlement?
No. You can file your claim directly at standrewsdatasettlement.com or by mailing a paper form without hiring an attorney. Class counsel already represents all class members at no individual cost. If you want your own legal advice, you may hire an attorney at your own expense. Family members may also help seniors complete the online claim form.
Is this St. Andrew’s settlement legitimate?
Yes. The settlement, Barnett, et al. v. St. Andrew’s Resources for Seniors System, Case No. 2522-CC09432, is a court-supervised class action pending in the Circuit Court for the City of St. Louis, Missouri. The official settlement website is standrewsdatasettlement.com, administered by Simpluris, Inc. You can verify any communication by calling (833) 647-9065 or emailing [email protected].
When will I receive my payment?
The final approval hearing is scheduled for June 8, 2026 at 9:30 a.m. CST. If the court approves the settlement and no appeals follow, Simpluris will issue payments and monitoring codes within 60 days after that process concludes. Payment arrives by check for mailed submissions or by digital payment for online submissions.
What if I miss the May 21, 2026 claim deadline?
If you do not file a claim by May 21, 2026, you will not receive any payment or monitoring benefit from this settlement. You will still be bound by the settlement’s release of claims against St. Andrew’s — meaning you give up the right to sue separately — unless you submitted an opt-out request before April 21, 2026.
Will this settlement payment affect my taxes?
Settlement payments may count as taxable income depending on the nature of the compensation and your individual tax situation. A qualified tax professional can advise you on how to report any payment you receive. The settlement administrator will issue appropriate tax documentation.
Why is the medical identity monitoring especially important for seniors?
Medical identity theft is particularly dangerous for seniors because stolen health insurance information and medical records can be used to fraudulently bill Medicare or Medicaid, obtain prescriptions, or alter your official medical records. CyEx Medical Shield Complete — the monitoring service included in this settlement — specifically monitors for this type of fraud and includes $1,000,000 in identity theft protection insurance, making it a valuable benefit to claim alongside any cash payment.
What if I did not receive a notice but think I should qualify?
If you received services from St. Andrew’s Resources for Seniors and believe your personal information may have been affected but did not receive a settlement notice, contact the settlement administrator at (833) 647-9065 or [email protected] to verify whether you are in the class. Do not wait — contact them well before the May 21, 2026 claim deadline.
Can a family member file on behalf of a senior who received the notice?
Nothing in the settlement prohibits a family member or caregiver from assisting a senior in completing and submitting the claim form. The claim form requires the unique ID and PIN from the notice the senior received. If the notice has been lost or misplaced, contact Simpluris at (833) 647-9065 to request replacement login information.
Sources and References
- Official Settlement Website — standrewsdatasettlement.com
- Official Claim Portal — standrewsdatasettlement.com/form/claim
- Settlement FAQ — standrewsdatasettlement.com/faq
- Maine Attorney General — St. Andrew’s Resources for Seniors Data Breach Notice
Seniors and families who had medical information exposed in similar healthcare breaches may also want to review the General Physician P.C. $2.5 million data breach settlement with a claim deadline of May 27, 2026. If your Social Security number and health insurance details were among the information exposed, understanding your full range of options is important — the Independent Living Systems $14 million data breach settlement shows how similar senior care data breaches have been resolved.
Last Updated: March 14, 2026
Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah