Washington Gastroenterology $4.6M Data Breach Settlement

If your personal or medical information was exposed in the October 2024 cyberattack on Washington Gastroenterology, PLLC, you may be able to claim money and free medical record monitoring from a $4.6 million class action settlement. The practice says the incident may have reached the information of about 583,741 people.

CLAIM DEADLINE: January 10, 2027. Claim online by 11:59 p.m. Pacific Time, or mail a paper claim postmarked by that date. The deadline to opt out or object is earlier: December 11, 2026. If you do nothing, you get no benefits.

Washington Gastroenterology denies any wrongdoing, and the court has not decided who is right. Current status (as of October 15, 2026): The notice and claim process is active, but final approval is pending. The Pierce County Superior Court has scheduled the final approval hearing for January 29, 2027, at 9:00 a.m. Pacific Time.

Washington Gastroenterology Settlement Quick Facts

Detail	Information
Case name	In re Washington Gastroenterology, PLLC Data Breach Litigation
Case number	Lead Case No. 25-2-11194-1
Court	Superior Court of Washington, County of Pierce
Judge	Hon. Clarence Henderson, Jr.
Defendant	Washington Gastroenterology, PLLC
Settlement amount	$4,600,000
People potentially affected	About 583,741
Cash option A	Up to $4,000 with documentation
Cash option B	About $75 (estimate) with no documentation
Extra benefit	Two years of one-bureau medical record and credit monitoring
Claim deadline	January 10, 2027
Opt-out and objection deadline	December 11, 2026
Final approval hearing	January 29, 2027, 9:00 a.m. PT
Settlement administrator	Epiq
Class counsel	Raina Borrelli and Thomas E. Loeser
Official website	wagastrodataincidentsettlement.com

What Happened in the Washington Gastroenterology Data Breach?

According to the settlement agreement, an unauthorized third party accessed Washington Gastroenterology’s computer systems and network on or around October 23, 2024. The practice became aware of the incident on or about January 28, 2025. It began notifying employees on May 23, 2025 and patients on August 22, 2025.

The information involved was some combination of names, Social Security numbers, financial and banking information, medical information and health insurance information. It differs from person to person, and the settlement does not establish that every category was taken for every individual, or that anyone’s data was sold or used for identity theft.

What Did the Washington Gastroenterology Class Action Allege?

Several class actions were filed in Pierce County Superior Court and consolidated. The consolidated complaint, filed October 24, 2025, alleges the practice failed to adequately protect personal and medical information. It brings claims for:

negligence
breach of implied contract
unjust enrichment
invasion of privacy
violation of the Washington Consumer Protection Act
violation of Washington’s data breach notification law
violation of the Uniform Health Care Information Act

A separate federal lawsuit, Abeyta v. Washington Gastroenterology, in the Eastern District of Washington, is being dismissed without prejudice as part of the deal. Its two plaintiffs were added as class representatives in the state case.

The parties held an all-day mediation on March 17, 2026 with mediator Jill Sperber of Judicate West. They did not settle that day, but both sides accepted a mediator’s proposal on March 24, 2026. The settlement agreement is dated August 19, 2026. Washington Gastroenterology says it settled to avoid the cost and risk of further litigation.

Which Laws Apply to the Washington Gastroenterology Data Breach?

Washington Consumer Protection Act, RCW Chapter 19.86. Prohibits unfair or deceptive acts in trade or commerce and allows injured plaintiffs to seek damages and attorney fees under RCW 19.86.090. The plaintiffs allege the practice’s data security and breach handling violated this law.
Washington data breach notification law, RCW 19.255.010. Requires a business that suffers a breach of personal information to notify affected Washington residents, and to notify the Attorney General when more than 500 Washington residents are affected, generally within 30 days after the breach is discovered. The plaintiffs assert a claim under this law. The court has not decided whether it was violated.
Washington Uniform Health Care Information Act, RCW Chapter 70.02. Governs how health care providers may use and disclose patients’ health care information, and RCW 70.02.170 provides a civil remedy for violations. The plaintiffs assert a claim under it.

HIPAA Breach Notification Rule, 45 C.F.R. §§ 164.400–414. Requires covered health care providers to notify affected individuals of a breach of unsecured protected health information without unreasonable delay and no later than 60 days after discovery, and to notify the federal government. HIPAA does not give individuals a private right to sue, which is one reason breach lawsuits like this one rely on state law and common-law claims.
Washington Superior Court Civil Rule 23. The state court rule that governs class actions in Washington, including approval of class settlements under CR 23(e). The court must find the settlement fair, reasonable and adequate.

These are the legal frameworks involved, not findings. Washington Gastroenterology denies the claims and the court has not ruled on them.

Washington Gastroenterology $4.6 Million Data Breach Settlement, Claim Up to $4,000 by January 10, 2027

Who Qualifies for the Washington Gastroenterology Settlement?

You are in the settlement class if you are a living individual residing in the United States whose private information was compromised in the data incident. That includes everyone who received a breach notice from the practice.

Excluded are:

the practice’s directors, officers and employees, and employees of entities it controls
government entities
the judge, the judge’s immediate family and court staff
anyone who validly opts out
anyone found guilty of, or pleading no contest to, criminal charges for causing the incident

If you received a postcard notice, you are on the class list. If you are not sure, or you believe you were affected but did not get a notice, call the administrator at 1-877-377-7781 or email [email protected].

What Does the Washington Gastroenterology Settlement Provide?

Class members can claim medical record monitoring plus one of two cash payments. You cannot get both cash options.

Cash Payment A: Documented Losses (Up to $4,000)

You can be reimbursed for losses tied to the breach if you give reasonable documentation, such as receipts, bank statements or billing records. Covered items include:

unreimbursed losses from actual identity theft that are fairly traceable to the breach and occurred between October 23, 2024 and the day you file
postage, copying, scanning and faxing
mileage, travel and parking
notary and research charges
cell phone, long distance, data and text message charges, only if you are billed by the minute, by the amount of data, or by the message
bank fees
professional fees, such as accountants and attorneys

You will not be reimbursed for anything already paid back by another source, including the credit monitoring offered in the practice’s breach notification letter. The $4,000 is a maximum, not a guaranteed payment. If you do not provide enough documentation, or your claim is rejected and you do not fix it, it is processed as a Cash Payment B.

Cash Payment B: Alternate Cash (About $75)

You do not need to document any loss. You receive an equal pro rata share of the net settlement fund, currently estimated at $75. The actual amount may go up or down depending on how many valid claims come in. If Cash Payment A claims use up the net fund, there may be nothing left for Cash Payment B.

Medical Record Monitoring (Two Years)

You can claim this on top of either cash option. It is a two-year, one-bureau medical record and credit monitoring product with real-time alerts and identity theft insurance up to $1,000,000. You can claim it even if you already received monitoring through the practice’s notification letter.

Order of Payment if Claims Exceed the Fund

If total claims are more than the fund can cover, the administrator pays in this order: monitoring first, then Cash Payment A, then Cash Payment B. Any reductions are applied on an equal percentage basis.

How Is the $4.6 Million Fund Paid and Divided?

The practice pays the fund in two installments: $1,000,000 within 30 days after preliminary approval, and the remaining $3,600,000 within 30 days after final approval.

The fund pays for:

all valid claims for cash and monitoring
notice and administration costs
attorneys’ fees and costs approved by the court
service awards for the class representatives

How much goes to fees: Class counsel says it will ask for fees of up to one-third of the fund, about $1.53 million, plus reasonable costs. Service awards are capped at $4,000 per class representative, and the agreement reportedly lists eight, which could total $32,000. The court decides all of these amounts and can award less. The $4.6 million is a gross fund, so the cash available to class members is smaller.

How to File a Washington Gastroenterology Settlement Claim

Go to the claim site. Submit online at the official claim page, or download the paper form and mail it.
Enter your information. The form asks for your name and mailing address, with phone and email optional. It also asks for the unique ID and PIN on your postcard notice. If you did not get a postcard or lost it, call 1-877-377-7781.
Pick your benefits. Choose Cash Payment A or B, and check the box for medical record monitoring if you want it. For Payment A, attach clear copies of your supporting documents.
Choose how to be paid. Options are Zelle, PayPal, Venmo, a virtual prepaid Visa or Mastercard, an ACH transfer to a bank account, or a paper check or physical prepaid Mastercard by mail. If a digital payment fails, the administrator may send a check.
Sign and submit by January 10, 2027.

Submission method	Deadline
Online claim form	January 10, 2027, 11:59 p.m. Pacific Time
Paper claim form	Postmarked by January 10, 2027

Mail paper claims to:

Washington Gastroenterology Data Breach Incident Settlement Administrator P.O. Box 6630 Portland, OR 97228-6630

Mail it at least a week early, because the post office does not always postmark mail the day you drop it off. Save your confirmation email and claim code if you file online, or keep copies and proof of mailing if you file by post.

Only one claim per person is allowed. If your form is incomplete, the administrator can send a notice of deficiency, and you generally have 15 days from that notice, or until the claim deadline if later, to respond. Filing is free.

Your Options: Claim, Opt Out, Object or Do Nothing

Choice	Result	Deadline
File a valid claim	You may receive the cash benefit you chose and monitoring; you give up claims covered by the release	January 10, 2027
Opt out	No benefits, but you keep your right to sue	December 11, 2026
Object	You tell the court your concerns and stay in the class; you can still file a claim	December 11, 2026
Do nothing	No benefits, and you are bound by the settlement if it is approved	None

How to Opt Out of the Washington Gastroenterology Settlement

Mail a signed written request, postmarked by December 11, 2026, to the administrator at the P.O. box above. Include your full name, address, phone number, email if any, your physical signature, and a statement that you want to be excluded from In re Washington Gastroenterology, PLLC Data Breach Litigation. You cannot opt out by phone or email, and group opt-outs are not allowed. If you opt out, you get no benefits and you cannot object. If you already have your own lawsuit over the same claims, tell your lawyer promptly.

How to Object to the Washington Gastroenterology Settlement

If you stay in the class, you can tell the court you disagree with the settlement, the fee request or the service awards. File your objection with the court at 930 Tacoma Ave. South, Tacoma, WA 98402 by December 11, 2026. Also mail it, postmarked or shipped by that date, to class counsel, the practice’s counsel and the administrator. The notice requires your grounds, how many times you have objected to class settlements in the past five years, and your signature. The full list is in the official notice. An objection does not guarantee the court will change or reject the settlement.

What Am I Giving Up in the Washington Gastroenterology Settlement?

If you do not opt out, you release the practice and related entities from claims connected to the data incident or the allegations in the case, including claims you do not know about. Related entities named in the agreement include Gastroenterology Associates and Cardinal Health. The release does not apply to people who opt out.

Key Dates in the Washington Gastroenterology Settlement

Date	Event
October 23, 2024	Cyberattack on the practice’s systems
January 28, 2025	Practice becomes aware of the incident
May 23, 2025	Notifications begin for employees
August 22, 2025	Notifications begin for patients
October 24, 2025	Consolidated complaint filed
March 17, 2026	Mediation
March 24, 2026	Mediator’s proposal accepted
August 19, 2026	Settlement agreement dated
December 11, 2026	Deadline to opt out or object
January 10, 2027	Claim deadline
January 29, 2027, 9:00 a.m. PT	Final approval hearing, Pierce County Superior Court, Tacoma
Not set	Payment date

The hearing may be moved or held by video or phone without further notice, so check the settlement website. You do not have to attend.

When Will Washington Gastroenterology Settlement Payments Be Sent?

Benefits go out after the court grants final approval and the settlement becomes final. The agreement gives the administrator 45 days from the effective date to send payments. If someone objects, the effective date is 30 days after the final approval order, or later if there is an appeal. No payment date has been announced, and filing by January 10 does not mean immediate payment.

A few payment details to know:

Checks expire. Paper checks must be cashed within 90 days.
Wrong information means forfeiture. If payment cannot be delivered because the information you gave was incorrect or incomplete, you can lose your payment.
Leftover money. Funds left after the check-cashing period go to TacomaProBono Community Lawyers, subject to court approval.
Termination. The practice can cancel the settlement if 600 or more class members opt out or object. The settlement also ends if the court does not approve it.

Who Are the Lawyers for the Washington Gastroenterology Class?

Raina Borrelli and Thomas E. Loeser. Their fees come from the settlement fund if the court approves them, not from class members directly.

Washington Gastroenterology $4.6 Million Settlement FAQ

Is the Washington Gastroenterology settlement legitimate?

Yes. It is a court-supervised class settlement in Pierce County Superior Court, administered by Epiq. Use the official site, wagastrodataincidentsettlement.com. You never have to pay to file a claim. Final approval is still pending.

Is the Washington Gastroenterology $4.6 million settlement approved?

Not yet. The court-authorized notice and claim process is active, and the final approval hearing is January 29, 2027, at 9:00 a.m. Pacific Time.

Who qualifies for the Washington Gastroenterology data breach settlement?

Living U.S. residents whose private information was compromised in the October 2024 incident, including people who received a breach notice, subject to the exclusions above.

Do I need proof to get the $75 payment?

No. Cash Payment B requires no documentation. Cash Payment A requires reasonable proof of your losses.

Can I get $4,000 without receipts?

No. The $4,000 is a maximum for documented losses. Without documentation, you can request the alternate cash payment, currently estimated at $75.

Is the $75 payment guaranteed?

No. It is an estimate that can rise or fall with the number of valid claims, and if higher-priority benefits use up the net fund, the alternate payment may not be funded.

Can I get both cash payments?

No. You choose one cash option, but you can add the two years of medical record monitoring.

What if I already got credit monitoring from the practice?

You can still claim the settlement’s monitoring. You cannot be reimbursed under Payment A for expenses already covered by the earlier monitoring.

What if my losses came from a different data breach?

The form asks you to certify that your expenses relate to this incident and not another breach, and have not been reimbursed by another source.

What happens if I do nothing?

You get no benefits. Unless you opt out by December 11, 2026, you are still bound by the settlement release if the court approves it.

What is the Washington Gastroenterology claim deadline?

January 10, 2027, by 11:59 p.m. Pacific Time online, or postmarked by that date for paper claims.

Who do I contact with questions?

Epiq at 1-877-377-7781, [email protected], or by mail at the P.O. box above. Do not contact the court.

Official Washington Gastroenterology Settlement Documents

Settlement administrator: Epiq, 1-877-377-7781, [email protected]

Mailing address: Washington Gastroenterology Data Breach Incident Settlement Administrator, P.O. Box 6630, Portland, OR 97228-6630

Sources Used in This Article

Settlement Agreement dated August 19, 2026, with exhibits (postcard notice, long form notice, claim form), In re Washington Gastroenterology, PLLC Data Breach Litigation, wagastrodataincidentsettlement.com
Court-authorized settlement notice and settlement FAQ (updated October 14, 2026), wagastrodataincidentsettlement.com
RCW Chapters 19.86, 19.255 and 70.02; 45 C.F.R. §§ 164.400–414; Washington Superior Court Civil Rule 23

Disclaimer: This article is general legal information, not legal advice. I am not a practicing attorney. Washington Gastroenterology denies wrongdoing, and the settlement does not establish liability. Terms and deadlines may change.

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement notice, settlement agreement, FAQ and claim form run by the administrator (wagastrodataincidentsettlement.com), as of October 15, 2026. Last Updated: October 15, 2026.

About the Author

Israr Ahmad is a legal content researcher with 4+ years of experience covering class action settlements and consumer rights cases. He has researched and published coverage of 2,500+ settlements using verified court records, settlement administrator filings, and government sources. Learn more about Israr.