$2M Covenant Health data breach class action settlement

Covenant Health agreed to a $2 million class action settlement to resolve claims that it failed to prevent a 2025 data breach that compromised sensitive patient information.

The Covenant Health settlement benefits individuals whose private information was compromised in the Covenant Health data breach on May 18, 2025, and who received a notice of the data breach.

Plaintiffs in the class action lawsuit accused Covenant Health of failing to prevent a 2025 data breach that compromised sensitive information, such as Social Security numbers and health insurance data. Covenant Health could have prevented the data breach with reasonable cybersecurity measures, the plaintiffs contend.

Covenant Health, a nonprofit health system in New England, has not admitted any wrongdoing but agreed to a $2 million class action settlement to resolve the data breach class action lawsuit.

Under the terms of the Covenant Health settlement, class members can receive up to $5,000 for documented losses related to the data breach. This could include expenses such as bank fees, fraudulent charges, credit monitoring costs and more.

Class members can also receive a pro rata share of the class action settlement fund. These payments will vary depending on the number of participating class members and the amount of the net settlement fund after the documented losses have been paid. Pro rata are estimated to be $75, but actual payments may be higher or lower.

All class members are eligible for two years of free credit monitoring through CyEx Medical Shield Complete. This service includes dark web monitoring, high-risk transaction monitoring, lost wallet protection and up to $1 million in identity theft insurance.

As a part of the class action settlement, Covenant Health agreed to make changes to its cybersecurity policies to better secure its systems and environments.

The deadline for exclusion and objection is Dec. 15, 2026.

The final approval hearing for the Covenant Health data breach settlement has not been scheduled.

To receive settlement benefits, class members must submit a valid claim form by Dec. 30, 2026.

Who’s Eligible

The class action settlement benefits individuals whose personal information was compromised by a data breach at Covenant Health in May 2025 and who received a notice of the data breach.

Potential Award

Up to $5,000 for documented losses or a pro rata cash payment of $75

Proof of Purchase

Class members who wish to claim documented losses must submit receipts, invoices, credit card statements, phone bills or other third-party documentation, excluding self-prepared documentation.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

12/30/2026

Case Name

In re: Covenant Health Data Security Litigation, Case No. PENSC-CV-2025-63, in the Superior Court of Penobscot County, Maine

Final Hearing

TBD

Settlement Website

CovenantHealthDataSettlement.com

Claims Administrator

In re: Covenant Health Data Security Litigation
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
833-453-2423

Class Counsel

Casondra Turner
MILBERG PLLC

Andrew W. Ferich
AHDOOT & WOLFSON P.C.

William B. Federman
FEDERMAN & SHERWOOD

Defense Counsel

Edward J. McAndrew
BAKER & HOSTETLER LLP

Clifford Ruprecht
RUPRECHT & BISCHOFF LLP