CPAP Data Incident Settlement: Receipts-Only Cash, Claims Close November 26, 2026
Settlement — Claims Process
The CPAP data incident settlement is the deal in Conner v. CPAP Medical Supplies and Services, Inc., the Jacksonville sleep-therapy supplier whose network was accessed in December 2024. It is not the Philips CPAP recall. Everyone in the class can claim two years of medical-data monitoring. Cash comes only with proof of out-of-pocket losses — up to $5,000 each, $500,000 in total. Opt out or object by October 30, 2026; claim by November 26, 2026.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by any company named on this page, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What the Lawsuit Says Happened
CPAP Medical Supplies and Services sells sleep-apnea equipment, much of it to active-duty and retired service members and their families. According to the settlement agreement, an unauthorized third party was inside its network between December 13 and December 21, 2024, potentially affecting nearly 90,000 current and former patients and employees.
The company's notice letter says it discovered on June 27, 2025 that the accessed systems held personal and health information; letters went out from about August 15, 2025. The settlement notice lists the possible data: names, addresses, email addresses, phone numbers, Social Security numbers, driver's license numbers, health insurance information, medical histories, treatment plans and financial information.
The lawsuit alleges the company failed to protect that information. CPAP denies wrongdoing, and no court has decided who is right.
Case details
The settlement is in Brett Conner v. CPAP Medical Supplies and Services, Inc., Case No. CACE-26-011830, in the Circuit Court for Broward County, Florida, before Judge Michele Towbin Singer. It started in federal court: four class actions were filed in the U.S. District Court for the Middle District of Florida and consolidated, and a motion to dismiss was granted in part and denied in part. After the parties agreed terms on June 4, 2026, they dismissed the federal action and refiled in state court. The preliminary approval order was entered on July 29, 2026. Class counsel are Jeff Ostrow (Kopelowitz Ostrow P.A.) and Mariya Weekes (Milberg PLLC); the administrator is Simpluris. Official site: CPAPDataIncidentSettlement.com.
Status: Preliminarily Approved, Claims Open Until November 26, 2026
October 30, 2026 — last day to opt out or to file an objection with the Clerk.
November 26, 2026 — last day to file a claim (online, or postmarked by mail).
December 1, 2026, 8:30 a.m. Eastern — final approval hearing, held by Zoom. The notice warns the date can change without further notice.
Nothing is paid before final approval and the end of any appeals. We covered the payout structure in our news story: CPAP Medical Supplies settlement: documented losses only, no flat payment.
Who Is in the Settlement Class
The court's definition: “All living individuals residing in the United States who were sent notice by Defendant that their Private Information may have been impacted in the Data Incident.” Directors, officers and agents of CPAP, government entities, the judge and court staff are excluded.
The practical test is your mail. If you received a breach letter from CPAP Medical Supplies and Services in 2025, or a settlement notice in 2026, you are almost certainly in the class. The settlement notice carries a login ID and PIN for the online claim form. Not sure? The administrator answers at (833) 285-3011 or info@CPAPDataIncidentSettlement.com.
What the Settlement Pays
Medical data monitoring: every class member may claim two years of CyEx Medical Shield Complete, which includes $1 million of medical identity theft insurance. You must ask for it on the claim form.
Documented losses: up to $5,000 per person for out-of-pocket costs caused by the incident between December 13, 2024 and November 26, 2026 — identity-theft losses, credit report or freeze fees, ID replacement, postage. You need receipts or bank statements; your own notes alone are not enough, and costs someone else already reimbursed do not count. The total is capped at $500,000, cut pro rata if claims exceed it. That cap covers only 100 full $5,000 claims, or about $5.55 per class member across 90,133 people.
Class counsel will ask the court to approve $400,000 in fees and costs and $1,000 service awards per class representative. If approved, CPAP pays them separately, not from the cash-loss cap. Payments go out electronically within 45 days of the settlement becoming effective. Use our data breach settlement calculator to tally your documented costs.
CPAP Data Incident Timeline
December 13–21, 2024 — The Network Is Accessed
Per the settlement agreement, an unauthorized third party is inside CPAP's network for about a week, potentially reaching data on nearly 90,000 patients and employees.
June 27, 2025 — Affected Data Identified
After a forensic investigation and document review, CPAP says it discovered that the accessed systems held personal and health information.
August 15, 2025 — Letters and Federal Suits
Notification letters start going out, reporting up to 90,133 people to the Maine Attorney General. Four class actions follow in the Middle District of Florida.
June 4, 2026 — Settlement Terms Agreed
After a partial ruling on the motion to dismiss, the parties settle, dismiss the federal action and refile in Broward County circuit court as CACE-26-011830.
July 29, 2026 — Preliminary Approval
Judge Michele Towbin Singer preliminarily approves the deal and appoints Simpluris. Notices start going out August 28, 2026.
October 30 – December 1, 2026 — Deadlines and Hearing
Opt-out and objection deadline October 30, claim deadline November 26, final approval hearing December 1, 2026 by Zoom.
Three Things to Watch For
A settlement with a well-known product name in it attracts confusion and imposters:
“CPAP settlement” pages about the Philips recall
Searches for CPAP settlements mix this data breach with the Philips Respironics device cases. A site promising recall money for this breach, or breach money for a recalled machine, is mixing up two unrelated cases. The only claim site for this one is CPAPDataIncidentSettlement.com.
Calls promising cash without receipts
This settlement has no flat payment, so anyone offering a guaranteed check in exchange for your Social Security number or a fee is not the administrator. The real claim form uses the login ID and PIN printed on your notice.
Messages aimed at military families
CPAP's customers are largely service members and their families, which makes a message invoking your benefits or your unit sound plausible. Simpluris does not need your military ID or bank login; check any contact against (833) 285-3011.
CPAP Data Incident Settlement — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is the CPAP data incident settlement real?
Yes. It is the preliminarily approved settlement, with a court-ordered notice program, in Conner v. CPAP Medical Supplies and Services, Inc., Case No. CACE-26-011830, Circuit Court for Broward County, Florida. The administrator is Simpluris, the official site is CPAPDataIncidentSettlement.com and the toll-free line is (833) 285-3011.
How much is the CPAP data incident settlement payout per person?
It depends entirely on your receipts. There is no flat payment. Documented out-of-pocket losses are reimbursed up to $5,000 per person, with a $500,000 total cap shared pro rata if claims exceed it. Everyone can also claim two years of medical-data monitoring with $1 million of identity theft insurance.
What are the deadlines?
Opt out or object by October 30, 2026. File a claim by November 26, 2026, online or postmarked. The final approval hearing is December 1, 2026 at 8:30 a.m. Eastern by Zoom.
When will payments be made?
Only after final approval and after any appeals are resolved. Under the agreement, cash payments go out electronically no later than 45 days after the settlement becomes effective, and monitoring codes activate at the same point.
Is this the same as the Philips CPAP recall settlement?
No. This case is about stolen data at a medical-supply company. The Philips case concerns recalled devices: in June 2021 Philips Respironics recalled certain CPAP, BiPAP and ventilator machines over breaking-down foam, about 15 million devices worldwide, per the FDA. For those payments see our CPAP settlement checks page.
What is the recall on CPAP machines?
The best-known recall is Philips Respironics' June 2021 recall of certain CPAP, BiPAP and ventilator machines because the sound-dampening PE-PUR foam can break down. On April 9, 2024 a federal court entered a consent decree against Philips. That recall has nothing to do with this data breach settlement.
What settlements are paying out right now?
This one is not paying yet; it is still collecting claims. For settlements open for claims or distributing money, see our open class action settlements list.
I have no receipts. Should I still file?
Yes, if you want the free monitoring: it requires a claim but no proof of loss. Without documents you cannot get cash. If you paid for a credit freeze, a replacement ID or postage because of the breach, find the bank statement now, before November 26, 2026.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Philips CPAP Settlement ChecksThe device recall settlements, a different case from this data breach
- Data Breach Settlement CalculatorEstimate what a documented-loss claim could be worth
- Open Class Action SettlementsSettlements still accepting claims, sorted by deadline
- Doxim Data Incident SettlementAnother data incident settlement, with its claim window now closed