Washington Gastroenterology data breach settlement
In re Washington Gastroenterology, PLLC Data Breach Litigation
Also known as Washington Gastroenterology PLLC; WA Gastro data breach; In re Washington Gastroenterology Data Breach Litigation
The lawsuit was about a 2024 cyberattack on Washington Gastroenterology that exposed SSNs and health data.
Copied from the official notice. Last compared Nov 3, 2026.
- You could get
- About $75 Up to $4,000 for losses you can show with paperwork.
Source
“a pro rata (a legal term meaning equal share) Cash Payment in the estimated amount of $75”
From the administrator site: Official settlement website home page. Last compared Nov 3, 2026.
- You need
- No receipt needed Needs the code from your notice Unique ID and PIN from your Postcard Notice (to file online); without them, contact the settlement office or file a paper form Some paperwork: describes the claim form only
Source
“Before Claim Filing: You will need the Unique ID and PIN from your Postcard Notice. If you didn’t receive or have lost your Notice, contact the Settlement Administrator at 1-877-377-7781 or email info@WAGastroDataIncidentSettlement.com ... Documents should be clear, readable copies, and note that anything you submit will not be returned to you.”
From the administrator site: Official Submit a Claim page (instructions and login). Last compared Nov 3, 2026.
- Who can file
- U.S. residents hit by the Oct 2024 Washington Gastro breach
Source
“You are included in the Settlement Class if you are a living individual residing in the United States whose Private Information was compromised in the Data Incident, including all those who received notice of the breach. ... Excluded from the Settlement Class are all persons who are: (a) directors, officers, and employees of Defendant, and any entity in which Defendant has a controlling interest; (b) governmental entities; (c) the Judge assigned to the lawsuit, that Judge’s immediate family, and Court staff;”
From the administrator site: Official notice (PDF on the settlement website). Last compared Nov 3, 2026.
- Where
- Anywhere in the U.S.
Source
“The Settlement Class includes all living individuals residing in the United States whose Private Information was compromised in the Data Incident, including all those who received notice of the breach.”
From the administrator site: Official settlement website home page. Last compared Nov 3, 2026.
- Time to file
- About 4 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: wagastrodataincidentsettlement.com. Last compared Nov 3, 2026.
Free. The official site never charges.
Quick answers
How much is the Washington Gastroenterology data breach settlement payout?
About $75. Up to $4,000 for losses you can show with paperwork.
Where is the Washington Gastroenterology data breach settlement claim form?
On the official site, wagastrodataincidentsettlement.com. Filing is free. The last day to file is Jan 10, 2027.
When will the Washington Gastroenterology data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Jan 29, 2027.
Is the Washington Gastroenterology data breach settlement legit?
The settlement administrator (the company that handles claims) is Epiq, and the official site is wagastrodataincidentsettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if you live in the U.S. and your data was compromised in the Washington Gastroenterology data incident.
It covers the cyberattack on or around October 23, 2024, including people who got a notice of the breach.
You are not included if you are a Washington Gastroenterology director, officer or employee, or the judge or court staff.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
all living individuals residing in the United States whose Private Information was compromised in the Data Incident, including all those who received notice of the breach.
From the administrator site: Official settlement website home page
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
Official payout table
The amounts the settlement itself sets. We do not work out a personal amount.
| Option and condition | Amount |
|---|---|
| Cash Payment B: Alternate Cash (no documents)Estimate; can change with the number of claims | $75 |
| Cash Payment A: Losses you can show with paperwork (instead of B)The most one claim can get | Up to $4,000 |
Choose A or B, not both. Cash payments may rise or fall shared among everyone who files with the total value of valid claims.
Cash Payment A – Documented Losses: You may submit a Claim Form and provide reasonable documentation for losses related to the Data Incident for up to $4,000 per Settlement Class Member; OR Cash Payment B – Alternate Cash: Instead of Documented Losses, without providing documentation, you may submit a Claim Form to receive a pro rata (a legal term meaning equal share) Cash Payment in the estimated amount of $75; AND Medical Record Monitoring: In addition to either Cash Payment A or Cash Payment B, you may also submit a Claim Form to receive two years of one-bureau of medical record and credit monitoring product.
From the administrator site: Official settlement website home page
Estimates can change with the number of valid claims and court deductions. Guidance only.
How to file
-
Find the code from your notice
- Unique ID and PIN from your Postcard Notice (to file online); without them, contact the settlement office or file a paper form
-
Gather what you need
No proof of purchase is required.
- For documented losses: clear copies of receipts, statements or other documents (they are not returned)
-
File online, or by mail
At wagastrodataincidentsettlement.com, by Jan 10, 2027. Filing is free.
Or mail a paper claim form to:Washington Gastroenterology Data Breach Incident, Settlement Administrator, P.O. Box 6630, Portland, OR 97228-6630
The deadline note says: “Online or by mail postmarked by 11:59 PM PST on January 10, 2027, as the claim page prints it (filing online needs the Unique ID and PIN from your Postcard Notice).”“The notice advises mailing at least a week early.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Jan 29, 2027.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- In re Washington Gastroenterology, PLLC Data Breach Litigation
- Court
- Superior Court of Washington, County of Pierce
- Case number
- 25-2-11194-1
- Administrator
- Epiq
- Official site
- wagastrodataincidentsettlement.com
- Settlement fund
- $4.6 million
- Full payout terms
- About $75, or up to $4,000 for documented lossesEither up to $4,000 for documented losses (Cash Payment A), or, without documents, an equal (pro rata) cash payment estimated at $75 (Cash Payment B); plus, with either, two years of one-bureau medical record and credit monitoring. Cash payments may go up or down pro rata depending on the total value of valid claims; the fund pays monitoring first, then documented losses, then alternate cash.
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (ahead) source document
- Objection deadline
- (ahead) source document
- Final approval hearing
- (ahead) source document
The court’s exact words
all living individuals residing in the United States whose Private Information was compromised in the Data Incident, including all those who received notice of the breach.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The settlement concerns a cybersecurity attack on Washington Gastroenterology, PLLC on or around October 23, 2024 that may have exposed names, Social Security numbers, financial and banking information, medical information and health insurance information. Per the notice, the class is all living individuals residing in the United States whose Private Information was compromised in the incident, including all who received notice of the breach. Excluded: directors, officers and employees of the defendant and entities it controls, governmental entities, the judge, the judge's immediate family and court staff, people who opt out, and anyone convicted of (or pleading no contest to) causing the incident. Read the notice for the full definition.
Sources and checks (4)
Every fact people act on was copied from the official source and compared with it. How we check
- Official settlement website home page administrator site
- Official notice (PDF on the settlement website) administrator site
- Official Submit a Claim page (instructions and login) administrator site
- Official claim form (PDF on the settlement website) administrator site
What changedLast change Oct 27, 2026
- Page created. Claims open until January 10, 2027. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.
Opting out
To leave the settlement and keep your right to sue on your own, follow the official notice by Dec 11, 2026. If you opt out, you get no payment. Opting out and objecting have separate rules; we cannot tell you which is right for you.