CPAP Medical Supplies data breach settlement
Brett Conner v. CPAP Medical Supplies and Services, Inc.
Also known as CPAP data breach
The lawsuit was about a December 2024 cyberattack on CPAP Medical that exposed health and insurance data.
Copied from the official notice. Last compared Nov 7, 2026.
- You could get
- Medical data monitoring Up to $5,000 for losses you can show with paperwork.
Source
“All Class Members are eligible to claim two years of CyEx Medical Shield Complete.”
From the administrator site: Official FAQ page. Last compared Nov 7, 2026.
- You need
- Papers needed Needs the code from your notice LoginID and PIN from your notice (to file online); without them, email info@CPAPDataIncidentSettlement.com with your name and address Takes work: describes the claim form only
Source
“To start your online claim form, you must login with your LoginID and PIN. You can find your LoginID and PIN on the Notice that was sent to you. If you are unable to locate your ID and PIN, please contact us by emailing info@CPAPDataIncidentSettlement.com. Please request your LoginID and PIN by providing your full name and mailing address. ... You need to submit proof, like bank statements or receipts, to show how much you spent or lost. You can also provide notes or papers you made yourself to explain or support other proof, but those notes or papers alone are not enough to make a valid claim.”
From the administrator site: Official online claim form login page. Last compared Nov 7, 2026.
- Who can file
- Sent CPAP Medical's notice about its December 2024 data incident
Source
“The Court has defined the Class this way: “All living individuals residing in the United States who were sent notice by Defendant that their Private Information may have been impacted in the Data Incident.” ... Excluded from the Class are: (a) all persons who are directors, officers, and agents of Defendant; (b) governmental entities; (c) the Judge assigned to the Action, that Judge’s immediate family, and Court staff; and (d) any Settlement Class Member who timely and properly opt outs of the Settlement.”
From the administrator site: Official FAQ page. Last compared Nov 7, 2026.
- Where
- Anywhere in the U.S.
Source
“All living individuals residing in the United States who were sent notice by Defendant that their Private Information may have been impacted in the Data Incident.”
From the administrator site: Official long-form notice (PDF on official site's document host). Last compared Nov 7, 2026.
- Time to file
- About 15 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: cpapdataincidentsettlement.com. Last compared Nov 7, 2026.
Free. The official site never charges.
Quick answers
How much is the CPAP Medical Supplies data breach settlement payout?
Medical data monitoring. Up to $5,000 for losses you can show with paperwork.
Where is the CPAP Medical Supplies data breach settlement claim form?
On the official site, cpapdataincidentsettlement.com. Filing is free. The last day to file is Nov 26, 2026.
When will the CPAP Medical Supplies data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Dec 1, 2026.
Is the CPAP Medical Supplies data breach settlement legit?
The settlement administrator (the company that handles claims) is Simpluris, and the official site is cpapdataincidentsettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if you live in the U.S. and CPAP Medical Supplies sent you notice that your data may have been hit in its 2024 incident.
You are not included if you are a CPAP director, officer or agent, a government entity, or the judge, the judge's family or court staff.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
All living individuals residing in the United States who were sent notice by Defendant that their Private Information may have been impacted in the Data Incident.
From the administrator site: Official long-form notice (PDF on official site's document host)
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
How to file
-
Find the code from your notice
- LoginID and PIN from your notice (to file online); without them, email info@CPAPDataIncidentSettlement.com with your name and address
-
Gather what you need
You will need supporting documents.
- For a cash payment: proof of losses such as bank statements or receipts; notes you made yourself are not enough alone
-
File online, or by mail
At cpapdataincidentsettlement.com, by Nov 26, 2026. Filing is free.
Or mail a paper claim form to:CPAP Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958
The deadline note says: “By mail, the notice and claim page say postmarked no later than November 26, 2026, but the paper claim form says received by that day, so mail early.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Dec 1, 2026.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- Brett Conner v. CPAP Medical Supplies and Services, Inc.
- Court
- Circuit Court for Broward County, Florida
- Case number
- CACE-26-011830
- Administrator
- Simpluris
- Official site
- cpapdataincidentsettlement.com
- Settlement fund
- Up to $500,000 for documented-loss payments (the most CPAP will pay for that benefit)
- Full payout terms
- Up to $5,000 for documented losses, plus data monitoringUp to $5,000.00 back for documented out-of-pocket losses from the data incident (losses between December 13, 2024 and November 26, 2026; proof such as bank statements or receipts required). CPAP will pay at most $500,000.00 for this benefit, and payments are reduced pro rata if valid claims exceed that. There is no cash payment without documents. Two years of CyEx Medical Shield Complete medical data monitoring may also be claimed.
- Effort
- Hard, about 15 minutes
Other dates
- Opt-out (exclusion) deadline
- (passed) source document
- Objection deadline
- (passed) source document
- Final approval hearing
- (ahead) source document
The court’s exact words
All living individuals residing in the United States who were sent notice by Defendant that their Private Information may have been impacted in the Data Incident.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The settlement concerns a targeted cyberattack on CPAP Medical Supplies and Services' computer systems in December 2024, in which files that may have held names, addresses, email addresses, phone numbers, Social Security numbers, driver's license numbers, health insurance information, medical histories, treatment plans and financial information were accessed. Per the notice, the class is living people residing in the United States whom CPAP sent notice that their information may have been impacted. Excluded: CPAP's directors, officers and agents, governmental entities, the judge, the judge's immediate family and court staff, and people who opt out. Read the notice for the full definition.
Sources and checks (5)
Every fact people act on was copied from the official source and compared with it. How we check
- Official long-form notice (PDF on official site's document host) administrator site
- Official FAQ page administrator site
- Official online claim form login page administrator site
- Official paper claim form (PDF on official site's document host) administrator site
- Official settlement website home page administrator site
What changedLast change Oct 27, 2026
- Page created. Claims open until November 26, 2026. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.