City of Hope Data Breach Settlement: $8.5 Million, Claim Deadline Passed
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
City of Hope is the cancer center in Duarte, California — not a city government. Its 2023 data breach led to an $8.5 million class settlement in Los Angeles Superior Court. The claim deadline was January 13, 2026, and it has passed. Final approval was reported granted on February 20, 2026. If you filed a claim in time, your payment comes by check or the electronic method you chose; if you did not, there is nothing left to file.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the City of Hope Lawsuit Was About
City of Hope detected suspicious activity on its network on or around October 13, 2023. Its investigation found that an outside party had accessed systems and copied files between September 19, 2023 and October 12, 2023. Notification letters went out starting April 2, 2024, to roughly 827,149 people.
Per HIPAA Journal, exposed data included contact details, Social Security numbers, driver’s license numbers, financial information, health insurance information, medical records and diagnoses. The consolidated city of hope lawsuit alleged negligence, breach of fiduciary duty, breach of implied contract and invasion of privacy, and alleged that City of Hope failed to implement reasonable cybersecurity safeguards. City of Hope denies liability; the settlement is a compromise, not a finding.
Case Details
In re City of Hope Data Security Breach Litigation, Lead Case No. 24STCV09935, Superior Court of California, County of Los Angeles, before Judge David S. Cunningham III (Department 11, Spring Street Courthouse). Three other suits were consolidated into it: Nos. 24STCV14723, 24STCV20862 and 24STCV20488. The lead caption is Rodriguez v. City of Hope. This is a state-court case, not a federal one. The administrator is Kroll Settlement Administration; the court-approved site is cityofhopedatabreachsettlement.com, phone (833) 630-8405.
Status: Settled, Claims Closed January 13, 2026
Under the class notice, approved claims are paid only after the time for appeals runs out. We found no public confirmation that payments have been mailed. If you filed, watch for a check or an electronic payment, and cash any check promptly: checks void 180 days after they are issued.
Who Was in the Settlement Class
The class is everyone City of Hope sent a notice about this incident — in practice, people who got a letter or email in or after April 2024. Most are current or former patients. ClassAction.org puts the class at 774,038 people; the breach notices covered about 827,149.
Being a class member is not the same as getting paid. Only people who submitted a valid claim form by January 13, 2026 receive money. Everyone else in the class who did not opt out by December 15, 2025 is still bound by the settlement and has released these claims.
What the Settlement Pays
Documented losses: up to $5,000 per person, including up to four hours of lost time at $25 per hour.
Or an alternative cash payment: estimated at $100, adjusted pro rata.
Plus, for California residents: an extra payment estimated at $250, also pro rata.
Claimants also received a code for CyEx medical-identity and credit monitoring. The final per-person amounts depend on how many valid claims were filed; the administrator posts them on the official site.
City of Hope Data Breach Timeline
- 1
September 19 – October 12, 2023 — The Intrusion
An unauthorized party accesses City of Hope systems and copies files, per the settlement agreement.
- 2
October 13, 2023 — Activity Detected
City of Hope identifies suspicious activity on its network and starts an investigation.
- 3
April 2, 2024 — Notices Mailed
Letters go to about 827,149 people. Class actions follow in Los Angeles Superior Court and are consolidated under No. 24STCV09935.
- 4
September 15, 2025 — Preliminary Approval
Judge David S. Cunningham III preliminarily approves the $8.5 million settlement. Kroll issues notice on October 15, 2025.
- 5
January 13, 2026 — Claim Deadline
The last day to file a claim. Opt-outs and objections had closed on December 15, 2025.
- 6
February 20, 2026 — Final Approval
Final approval hearing; final approval reported granted. Payments follow the appeal period. As of October 2026, no public payment date has been announced.
Three Things to Watch For
A closed claim period and a large class of cancer patients is an attractive target:
“Late claim” or “reopen your claim” offers
The deadline was January 13, 2026. Nobody can file a City of Hope claim for you now, for a fee or otherwise. Pages still collecting Social Security numbers for this settlement are harvesting data.
Payment emails asking you to “verify” bank details
Real payments go to the check address or electronic method you chose when you filed. Before you click anything, check the sender against the official site or call Kroll at (833) 630-8405 — do not use a number from the message itself.
Calls citing your diagnosis or treatment
The stolen files included medical records, so a caller may sound informed about your care. Kroll does not phone to ask for your full Social Security number, insurance login or a processing fee. Hang up and use the official contact details.
City of Hope Data Breach Settlement — Questions People Ask
Can I still file a City of Hope data breach settlement claim?
No. The claim deadline was January 13, 2026. If you filed on time, you do not need to do anything else unless the administrator contacts you.
When will City of Hope settlement payments arrive?
After final approval and the end of the appeal period. Final approval was reported on February 20, 2026. As of October 2026 we found no public confirmation of a mailing date; the official site and Kroll at (833) 630-8405 are the authoritative sources for payment status.
How much will I get?
Up to $5,000 for documented losses, or an alternative payment estimated at $100, plus an extra amount estimated at $250 for California residents. The alternative and California amounts are pro rata, so the final figures depend on the number of valid claims.
I got a City of Hope letter. Was I in the class?
Yes, if City of Hope sent you a notice about the 2023 incident. Without a filed claim, though, you receive no payment — and unless you opted out by December 15, 2025, you have released these claims.
Is the City of Hope lawsuit a lawsuit against a city?
No. City of Hope is a private nonprofit cancer center, so this is not a lawsuit against city government. People searching for a new york city lawsuit or a new york city settlement are usually looking for something different: claims against the City of New York require a notice of claim to the NYC Comptroller first, and tort notices must be served within 90 days. For injury cases, see our New York City car accident calculator.
I searched how to sue the City of Los Angeles — is this relevant?
Only by location: this case is in Los Angeles Superior Court, but the defendant is a hospital, not the city. If you are researching how to sue the city of los angeles for an injury, California requires a government claim before most suits against a city, and its deadlines are short — talk to a lawyer promptly. Our Los Angeles personal injury calculator covers typical values.
What data was exposed in the City of Hope breach?
Per HIPAA Journal: contact information, Social Security numbers, driver’s license numbers, financial information, health insurance information, medical records, medical histories and diagnoses. Your own notice letter lists what applied to you.
What should I do now?
Freeze your credit at all three bureaus; it is free. Read insurer explanation-of-benefits statements for care you never received. If you filed a claim, keep your Class Member ID and make sure the administrator has your current address.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements that are still taking claims right now
Data Breach Settlement Calculator
Estimate what a data breach claim typically pays
Change Healthcare Data Breach
Another health-data breach case and where it stands
Class Action Payout Calculator
How pro rata shares shrink or grow with claim rates