$2.8M Gryphon Healthcare data breach class action settlement

Gryphon Healthcare has agreed to a $2.8 million class action lawsuit settlement to resolve claims that it failed to prevent a 2024 data breach that compromised sensitive patient information.

The Gryphon Healthcare settlement benefits individuals whose personal information was potentially exposed in the Gryphon Healthcare data breach in July 2024. This includes individuals who received a data breach notification letter from Gryphon.

According to the class action lawsuit resolved by this settlement, Gryphon failed to implement reasonable cybersecurity measures that could have prevented the Gryphon Healthcare data breach. The plaintiffs in the case argued that Gryphon’s failure to protect their information from cybercriminals was negligent and in violation of state laws.

Gryphon Healthcare is a medical billing company that provides services to hospitals, clinics and other healthcare providers.

Gryphon has not admitted any wrongdoing but agreed to a $2.8 million class action settlement to resolve these allegations.

Under the terms of the Gryphon Healthcare settlement, class members can receive a cash payment or reimbursement for out-of-pocket expenses.

Class members who experienced data breach-related losses such as identity theft, fraud, credit-related fees, ID replacement costs and more can receive up to $5,000 in reimbursement for these expenses. Class members must provide documentation of these expenses in order to receive reimbursement.

Class members who did not experience data breach-related losses can receive a smaller payment of $100. No documentation is required for these alternative payments.

All class members are eligible for two years of free identity theft protection and medical data monitoring through CyEx Medical Shield Complete. This service includes $1 million in medical identity theft insurance and other benefits.

The deadline for exclusion and objection is March 17, 2026.

The final approval hearing for the Gryphon Healthcare data breach settlement is scheduled for Aug. 31, 2026.

To receive settlement benefits, class members must submit a valid claim form by April 16, 2026.

Who’s Eligible

Individuals whose personal information was potentially exposed in the July 2024 Gryphon Healthcare data breach, including those who were sent a data breach notification letter.

Potential Award

Up to $5,000 for out-of-pocket losses or a cash payment of $100.

Proof of Purchase

Documentation of out-of-pocket expenses, such as bank statements or receipts.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

04/16/2026

Case Name

Morris, et al. v. Gryphon Healthcare LLC, et al., Case No. 2024-77384, in the Texas District Court for Harris County

Final Hearing

08/31/2026

Settlement Website

GryphonHealthcareDataSettlement.com

Claims Administrator

Morris v. Gryphon Healthcare LLC
c/o Settlement Administrator
P.O. Box 25226
Santa Ana, CA 92799-9958
[email protected]
833-647-8963

Class Counsel

Gary M. Klinger
MILBERG COLEMAN BRYSON PHILLIPS GROSSMAN PLLC

A. Brooke Murphy
MURPHY LAW FIRM

Tyler J. Bean
SIRI & GLIMSTAD LLP

Defense Counsel

Lindsay Nickle
David Yudelson
CONSTANGY, BROOKS, SMITH & PROPHETE LLP