Covenant Health data breach settlement
In re: Covenant Health Data Security Litigation
Also known as St. Joseph Hospital; St. Joseph Hospital Nashua; St. Joseph Healthcare Foundation; In re Covenant Health Data Security Litigation
The lawsuit claimed Covenant Health failed to protect patient data exposed in a May 2025 IT breach.
Copied from the official notice. Last compared Nov 3, 2026.
- You could get
- About $75 Up to $5,000 for losses you can show with paperwork.
Source
“a payment estimated to be $75”
From the administrator site: Official settlement website home page. Last compared Nov 3, 2026.
- You need
- No receipt needed Needs the code from your notice Class Member ID from your postcard notice (the online form asks for it first) Some paperwork: describes the claim form only
Source
“To receive a documented losses payment, you must elect Cash Payment A on the Claim Form and attest under penalty of perjury to incurring documented losses. You must also submit reasonable documentation supporting the losses. ... Reasonable documentation is third-party documentation such as receipts, invoices, credit card statements, phone bills, or other documentation not “self-prepared” that demonstrates the costs incurred.”
From the administrator site: Official FAQ page. Last compared Nov 3, 2026.
- Who can file
- Sent a notice about Covenant Health's May 2025 data incident
Source
“The Settlement Class consists of all persons residing in the United States whose Private Information was compromised by the Data Incident and who were sent notice of the Data Incident. Patients of any Covenant Health facility may be included in the Settlement Class. ... Yes, excluded from the Settlement Class are: (a) directors and officers of Defendants; (b) the Judge(s) assigned to the Action, and any of their immediate family members and Court staff; and (c) any Settlement Class Member who properly opts out of the Settlement.”
From the administrator site: Official FAQ page. Last compared Nov 3, 2026.
- Where
- Anywhere in the U.S.
Source
“The Settlement Class consists of all persons residing in the United States whose Private Information was compromised by the Data Incident and who were sent notice of the Data Incident.”
From the administrator site: Official FAQ page. Last compared Nov 3, 2026.
- Time to file
- About 4 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: covenanthealthdatasettlement.com. Last compared Nov 3, 2026.
Free. The official site never charges.
Quick answers
How much is the Covenant Health data breach settlement payout?
About $75. Up to $5,000 for losses you can show with paperwork.
Where is the Covenant Health data breach settlement claim form?
On the official site, covenanthealthdatasettlement.com. Filing is free. The last day to file is Dec 30, 2026.
When will the Covenant Health data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Is the Covenant Health data breach settlement legit?
The settlement administrator (the company that handles claims) is Kroll, and the official site is covenanthealthdatasettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if you were sent notice that your data was compromised in Covenant Health's data incident around May 18, 2025.
It covers people residing in the United States; patients of any Covenant Health facility may be included.
You are not included if you are a director or officer of a defendant, or the judge, the judge's family or court staff.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
The Settlement Class consists of all persons residing in the United States whose Private Information was compromised by the Data Incident and who were sent notice of the Data Incident.
From the administrator site: Official FAQ page
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
Official payout table
The amounts the settlement itself sets. We do not work out a personal amount.
| Option and condition | Amount |
|---|---|
| Cash payment (a share of the fund)Estimate; can change with the number of claims | $75 |
| Losses you can show with paperworkThe most one claim can get | Up to $5,000 |
Both cash amounts may be increased or decreased depending on how many people file. Losses need third-party documents.
The Settlement Fund will provide Cash Payments to Settlement Class Members (Cash Payment A – Documented Losses: up to $5,000 for Documented Losses and/or Cash Payment B – Pro Rata Cash: a payment estimated to be $75) and two (2) years of Credit Monitoring, ... Payment amounts may be subject to pro rata (proportional) adjustment based on the amount of Valid Claims submitted.
From the administrator site: Official settlement website home page
Estimates can change with the number of valid claims and court deductions. Guidance only.
How to file
-
Find the code from your notice
- Class Member ID from your postcard notice (the online form asks for it first)
-
Gather what you need
No proof of purchase is required.
- For documented losses: third-party records such as receipts, invoices or statements, and a signed attestation
-
File online, or by mail
At covenanthealthdatasettlement.com, by Dec 30, 2026. Filing is free.
Or mail a paper claim form to:In re: Covenant Health Data Security Litigation, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391
The deadline note says: “Online by 11:59 p.m. ET on December 30, 2026 (the online form asks for the Class Member ID from your postcard notice), or by mail postmarked by December 30, 2026.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- In re: Covenant Health Data Security Litigation
- Court
- Superior Court of Penobscot County, Maine
- Case number
- PENSC-CV-2025-63
- Administrator
- Kroll
- Official site
- covenanthealthdatasettlement.com
- Settlement fund
- $2,000,000
- Full payout terms
- About $75, plus up to $5,000 for documented lossesUp to $5,000 for documented losses (documents required) and/or a pro rata cash payment estimated at $75; cash amounts may go up or down pro rata depending on valid claims. Class members also get two years of credit monitoring (CyEx Medical Shield Complete).
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (ahead) source document
- Objection deadline
- (ahead) source document
The court’s exact words
The Settlement Class consists of all persons residing in the United States whose Private Information was compromised by the Data Incident and who were sent notice of the Data Incident.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The settlement concerns unauthorized access to Covenant Health's IT environment on or around May 18, 2025, which potentially exposed patients' names, addresses, dates of birth, medical record numbers, Social Security numbers, treatment and health insurance information; notices went out from about July 11, 2025. Defendants are Covenant Health Inc., St. Joseph Healthcare Foundation, St. Joseph Hospital, St. Joseph Hospital Nashua, N.H., and other Covenant Health facilities. Per the site, the class is people residing in the United States whose information was compromised and who were sent notice; patients of any Covenant Health facility may be included. Excluded: directors and officers of the defendants, the judge(s), their immediate families and court staff, and people who opt out. Read the notice for the full definition.
Sources and checks (3)
Every fact people act on was copied from the official source and compared with it. How we check
- Official settlement website home page administrator site
- Official FAQ page administrator site
- Official online claim form (first screen) administrator site
What changedLast change Oct 27, 2026
- Page created. Claims open until December 30, 2026. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.
Opting out
To leave the settlement and keep your right to sue on your own, follow the official notice by Dec 15, 2026. If you opt out, you get no payment. Opting out and objecting have separate rules; we cannot tell you which is right for you.