Yuma Regional Medical Center $1.985M Data Breach Settlement, Claim Up to $4,000 Plus Cash by February 1, 2027

Yuma Regional Medical Center has agreed to a $1,985,000 class action settlement over an April 2022 cyberattack that may have exposed the personal and medical information of about 720,217 current and former patients. If the hospital sent you a notice about the breach, you may qualify for up to $4,000 in documented losses, a separate pro-rata cash payment that needs no proof of loss, and one year of medical-data monitoring with $1 million in identity-theft insurance.

The claim deadline is February 1, 2027. The deadline to opt out or object is earlier, on January 4, 2027, and the final approval hearing is March 1, 2027.

The settlement resolves Clarke v. Yuma Regional Medical Center, No. 2:22-cv-01061-PHX-SMB, in the U.S. District Court for the District of Arizona. The hospital denies wrongdoing. The judge has granted preliminary approval, not final approval, so no payments will go out until the court rules.

Official settlement website: YumaSettlement.com File a claim online: Official claim portal

Yuma Regional Medical Center Settlement: Quick Facts

Detail	Verified information
Settlement fund	$1,985,000 (non-reversionary)
Defendant	Yuma Regional Medical Center
Case	Clarke v. Yuma Regional Medical Center
Case number	2:22-cv-01061-PHX-SMB
Court	U.S. District Court, District of Arizona
Judge	Susan M. Brnovich
Data incident	April 21–25, 2022
People notified	About 720,217
Who qualifies	All living individuals who were sent notice of the data incident, subject to exclusions
Cash Payment A	Up to $4,000 for documented losses
Cash Payment B	Pro-rata cash payment; amount not fixed; no proof of loss required
Medical-data monitoring	One year, with $1 million in identity-theft insurance, no deductible
Additional security commitment	More than $750,000, separate from the fund
Claim deadline	February 1, 2027
Opt-out and objection deadline	January 4, 2027
Final approval hearing	March 1, 2027, 10 a.m. Mountain Time
Official settlement website	YumaSettlement.com
Claim portal	yumasettlement.pnclassaction.com
Settlement administrator	Eisner Advisory Group LLC
Administrator phone and email	1-855-591-2021; [email protected]
Status	Preliminary approval granted; claims open

Who Qualifies for the Yuma Regional Medical Center Settlement?

The class is all living individuals who were sent notice of the data incident. That is narrower than “anyone who was ever a Yuma Regional patient.” You likely qualify if the hospital mailed you a letter saying your information may have been involved in the April 2022 incident, or if you received a settlement notice.

Excluded are the hospital itself, anyone who validly opts out, the assigned judges and their specified family and staff, and anyone convicted of or pleading no contest to criminal involvement in the incident.

What if you never received a Yuma Regional Medical Center breach notice?

Not getting a notice does not prove your data was safe. But because the class depends on notice having been sent, being treated at the hospital is not enough on its own. Contact the administrator and ask whether your name is in the settlement records.

Phone: 1-855-591-2021 Email: [email protected]

How Much Can You Get From the Yuma Regional Medical Center Settlement?

The settlement offers two cash options and medical-data monitoring. You can claim both cash payments, which many settlements do not allow.

Cash Payment A: up to $4,000 for documented losses

You can ask for reimbursement of actual, unreimbursed losses tied to the data incident, up to $4,000. Losses must have happened between April 21, 2022, and February 1, 2027. Examples:

• Money lost to identity theft or fraud
• Fees for credit monitoring or credit reports
• Costs to place or lift a credit freeze
• Costs to replace identification documents
• Postage and other qualifying response costs

You need reasonable third-party proof, such as bank statements, invoices, receipts or letters. Your own notes can explain a loss but cannot support a claim by themselves. You cannot recover anything already repaid by an insurer, bank or monitoring provider. The $4,000 is a maximum, not a guaranteed amount.

Cash Payment B: pro-rata cash with no proof of loss

You can also request a one-time pro-rata cash payment. No receipts or proof of loss are required, but you must be an eligible class member and file a valid claim. The money left after the agreement’s deductions is divided among valid claimants. Those deductions are administration costs, approved attorneys’ fees and costs, service awards, monitoring costs and Cash Payment A payments.

There is no fixed amount. Anyone promising a guaranteed $50, $100 or $200 from this settlement is not relying on the official notice.

One year of medical-data monitoring with $1 million in identity-theft insurance

Class members get one year of medical-data monitoring, including up to $1 million in identity-theft insurance with no deductible, subject to the policy terms. The agreement and FAQ say monitoring is provided automatically. The website’s general rights summary, however, says a timely claim is needed for settlement benefits. Because those statements are not fully consistent, call or email the administrator to confirm how to activate monitoring.

A valid claim is required for either cash payment.

How Do You File a Yuma Regional Medical Center Settlement Claim?

You can file online or by mail.

Online

1. Go to YumaSettlement.com and choose Submit a Claim.
2. Enter the Settlement Claim ID from your notice.
3. Confirm your name and contact details.
4. Choose Cash Payment A if claiming documented losses, and upload your proof.
5. Choose Cash Payment B if you also want the pro-rata payment.
6. Pick a payment method and submit.
7. Save your confirmation.

Online deadline: February 1, 2027, at 11:59:59 p.m. Mountain Time.

By mail

Download the official four-page claim form, complete and sign it, attach proof if you claim Cash Payment A, and mail it to:

Yuma Settlement c/o Settlement Administrator P.O. Box 1031 Baton Rouge, LA 70821

It must be postmarked by February 1, 2027. The form also allows you to email an image of the signed form to [email protected] by the deadline.

What if you lost your Claim ID?

The online portal asks for the Claim ID from your postcard notice. If you cannot find it, contact the administrator. The paper form marks the Claim ID as “if known,” but the administrator still has to confirm you qualify. Never make up a Claim ID or file for someone else without authority.

How Will Yuma Regional Medical Center Settlement Payments Be Made?

The official claim form lists PayPal, Venmo, Zelle and a physical check. If you choose a check, make sure your mailing address is current. There is no fee to file, and a legitimate administrator will never ask you to pay to receive money.

What Happened in the April 2022 Yuma Regional Medical Center Data Breach?

According to the settlement agreement, the hospital identified a cyberattack on its internal systems on April 25, 2022. The plaintiffs allege unauthorized people had access between April 21 and April 25. About 720,217 people were notified. The information at issue included names, Social Security numbers, health insurance information and medical information from care at the hospital, though not every person’s records held every category.

The plaintiffs say the hospital did not adequately protect information entrusted to it, creating risks of identity theft and medical identity theft. The hospital denies wrongdoing, and the settlement is not a court finding that every notified person’s data was stolen or misused.

What Claims Did Patients Bring Against Yuma Regional Medical Center?

Several lawsuits were filed after the incident and were consolidated in the federal case. The amended consolidated complaint, filed December 13, 2024, asserted:

• Negligence
• Breach of implied contract
• Unjust enrichment
• Breach of fiduciary duty
• Violations of the Arizona Consumer Fraud Act

No court made a final finding of liability.

Which Laws Apply to the Yuma Regional Medical Center Data Breach?

Arizona Consumer Fraud Act (A.R.S. § 44-1521 et seq.)

The Act bars deception, fraud and concealment of material facts in the sale of goods or services (see A.R.S. § 44-1522). The complaint invokes it for the hospital’s alleged failure to protect patient data.

Arizona confidentiality of medical and payment records (A.R.S. § 12-2292)

Arizona Revised Statutes § 12-2292 gives medical and payment records statutory confidentiality protection, and it underlies the plaintiffs’ argument that patients’ information deserved heightened care.

Arizona data breach notification law (A.R.S. § 18-552)

Arizona requires entities to notify affected individuals within 45 days of determining a breach occurred. When more than 1,000 Arizonans are affected, notice to the Arizona Attorney General and to the consumer reporting agencies is also required. This is a related law. The reporting on the complaint does not list it as a pleaded claim.

HIPAA Security and Breach Notification Rules (45 C.F.R. Parts 160 and 164)

The plaintiffs relied on HIPAA’s data-security requirements to describe the hospital’s obligations. HIPAA generally gives individuals no private right to sue for money damages, which is why the case rests on state and common-law claims. Patients can still complain to the U.S. Department of Health and Human Services Office for Civil Rights.

Common-law claims

Negligence asks whether the hospital owed and breached a duty to protect patient data and caused harm. Implied contract and unjust enrichment look at whether patients gave their information, and payment, in exchange for reasonable protection. Breach of fiduciary duty concerns the special trust in the patient relationship.

Federal rules that govern the settlement

• Federal Rule of Civil Procedure 23(e): a class settlement needs court approval after notice to class members, a hearing and a finding that it is fair, reasonable and adequate. That is the March 1, 2027 hearing.
• Class Action Fairness Act (28 U.S.C. § 1332(d)): the basis for large class actions in federal court. Its notice provision, 28 U.S.C. § 1715, requires notice of a proposed settlement to federal and state officials.
• Article III standing: after TransUnion LLC v. Ramirez, 594 U.S. 413 (2021), data-breach plaintiffs must show concrete harm, and defendants often use that to challenge these cases. Settlement avoided that fight for both sides.

Credit freezes under federal law (15 U.S.C. § 1681c-1)

Credit freezes are free by federal law. The settlement may reimburse older freeze fees paid before that rule, but you should not need to pay for one now.

How Did the Yuma Regional Medical Center Settlement Reach $1.985 Million?

The parties mediated on May 29, 2026, with mediator Bruce Friedman and reached agreement on the main terms. The written agreement was filed September 24, 2026, and the court granted preliminary approval in an order filed October 1, allowing notice and claims administration to begin.

The $1,985,000 is a non-reversionary fund, so unclaimed money does not go back to the hospital. Leftover funds are handled under the agreement’s redistribution terms. The hospital has also committed more than $750,000 toward data-security improvements, separate from the fund.

How much will the attorneys receive?

Class counsel will ask for $825,000 in attorneys’ fees, about 41.6% of the $1,985,000 fund, plus litigation costs. They will also ask for $2,500 service awards for each class representative. The judge decides whether to approve these amounts, and they reduce the money left for individual payments. Class members pay nothing out of pocket.

The court appointed Bryan L. Bleichner of Chestnut Cambronne PA and Jean Martin of Aylstock Witkin Kreis Overholtz, PLC as class counsel.

What Are Your Options and Deadlines in the Yuma Regional Medical Center Settlement?

Action	Deadline	What it means
Submit a claim	February 1, 2027	Request cash benefits
Opt out	January 4, 2027	Get no benefits and keep any individual right to sue the hospital over these claims
Object	January 4, 2027	Tell the judge why you oppose part or all of the settlement
Final approval hearing	March 1, 2027	Court decides on approval, fees and objections
Do nothing	None	No cash payment; generally bound by the release if approved

What happens if you do nothing?

You get no cash payment, and unless you opt out you generally give up the right to bring separate claims covered by the release once the settlement is finally approved. The agreement describes monitoring as automatic, but confirm with the administrator as noted above.

Can you object and still file a claim?

Yes. You can object without opting out and still seek benefits. Written objections must follow the notice’s procedures, including filing with the court and sending copies to counsel.

Should you opt out of the Yuma Regional Medical Center settlement?

Opting out means you cannot receive benefits but you keep whatever legal claims you may have against the hospital. That choice has real consequences. Read the release, and speak with a qualified attorney before January 4, 2027 if you are thinking about an individual claim.

When Will Yuma Regional Medical Center Settlement Payments Be Sent?

No payment date has been announced. Judge Susan M. Brnovich set the final approval hearing for March 1, 2027, at 10 a.m. Mountain Time at the federal courthouse in Phoenix, or by an authorized remote option. If the settlement is approved and any appeals are resolved, the agreement generally calls for payment within 60 days after it becomes effective or after a claim is approved, whichever is later. Do not expect checks in March 2027. Timing depends on the court’s decision, possible appeals and claim processing.

How Do Other Medical Data Breach Settlements Compare With Yuma’s?

Each settlement has its own rules and deadlines, and being in one does not qualify you for another. For comparison:

• Cardiology Associates of Mobile $1.25M Data Breach Settlement, Who Qualifies, Up to $4,000, Cash Payment and Claim Deadline also pays documented losses plus a separate pro-rata payment.
• Washington Gastroenterology $4.6 Million Data Breach Settlement, Claim Up to $4,000 by January 10, 2027 uses a different cash-payment structure.
• Hampton Regional Medical Center Data Breach Settlement, Up to $5,000 or About $20, Claim by January 11, 2027 is another hospital case.

How Can You Protect Yourself After the Yuma Regional Medical Center Breach?

1. Check your health insurance statements (explanation of benefits) for services you did not receive.
2. Review bank and credit card accounts for unfamiliar charges.
3. Place a free credit freeze with Equifax, Experian and TransUnion, and consider a fraud alert.
4. Pull your free credit reports and look for accounts you did not open.
5. Report identity theft to the Federal Trade Commission at IdentityTheft.gov.
6. Keep records of every loss and expense. You will need them for Cash Payment A.

Frequently Asked Questions About the Yuma Regional Medical Center Settlement

Is the Yuma Regional Medical Center $1.985 million settlement legitimate?

Yes. It is documented in federal court filings, including the settlement agreement and the preliminary approval order, and the authorized administrator runs YumaSettlement.com.

Who can file a claim in the Yuma Regional Medical Center settlement?

Living individuals who were sent notice of the April 2022 data incident, subject to the exclusions.

Can I claim both Cash Payment A and Cash Payment B?

Yes. You may request up to $4,000 for documented losses and the separate pro-rata payment.

Can I get money without proof of loss?

Yes. Cash Payment B does not require proof of loss, but you must be eligible and file a valid claim.

Do I need receipts to get $4,000?

Yes. You must document qualifying losses connected to the breach. The $4,000 is a maximum.

What if I lost my breach letter or Claim ID?

Call 1-855-591-2021 or email [email protected] and ask the administrator to check your records.

Do I have to be a current Yuma Regional patient?

No. Former patients can qualify if they were sent notice.

Can I claim if my identity was never stolen?

Yes. Actual identity theft is not required for the pro-rata payment.

How much is the pro-rata payment?

It is not known yet. It depends on the money left in the fund and the number of valid claims.

What is the Yuma Regional Medical Center settlement claim deadline?

February 1, 2027.

When is the final approval hearing?

March 1, 2027, at 10 a.m. Mountain Time, subject to court changes.

What if my claim is denied?

The administrator can ask for more information, and the agreement provides for review of disputed or incomplete claims. Respond quickly to any notice asking you to fix your claim.

Bottom Line

Yuma Regional Medical Center’s $1,985,000 settlement offers cash and monitoring to people notified about the April 2022 data breach. File by February 1, 2027. Eligible people may request both documented-loss reimbursement and the pro-rata payment. The hospital denies wrongdoing, and payments depend on final court approval and any appeals. Use only the official website, keep your filing confirmation, and ignore sites that promise guaranteed amounts.

Sources and Official Documents

• Yuma Settlement: Official Settlement Website
• Official Online Claim Portal
• Official Mail-In Claim Form (PDF)
• Court-Authorized Long-Form Notice (PDF)
• Settlement Agreement (PDF)
• Preliminary Approval Order (PDF)
• First Amended Consolidated Complaint (PDF)
• Official Settlement FAQs
• Official Court Documents
• Arizona Revised Statutes § 12-2292

Disclaimer: This is general legal information, not legal advice. Talk to a qualified attorney about your own rights, exclusions or objections.

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official Long-Form Notice, Settlement Agreement, Preliminary Approval Order and Claim Form, and the settlement website run by the administrator (YumaSettlement.com), as of November 13, 2026. Last Updated: November 13, 2026.