DAP Health Data Breach Settlement: $1.3 Million, Claim by October 21, 2026
Claim window open
File by October 21, 2026 · 5 days left · as of Oct 16, 2026
If you got a letter from DAP Health or Borrego Health about a July 2024 email breach, you are in a $1.3 million class settlement. The claim deadline is October 21, 2026 — online or postmarked. The final approval hearing was set for October 1, 2026; as of October 16, 2026 we could not confirm its outcome, and nothing has been paid.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
Can I Still File?
The claim deadline, what the settlement pays and where to file — plus other settlements still taking claims.
File by Oct 21 · 5 days left
DAP Health Data Breach Settlement
Fund: $1.3M
Other settlements with open claim windows
- SitusAMC Data Breach$5.3M · claim by November 6, 2026
- Kelly Benefits Data Breach$5 million · claim by December 28, 2026
- Wellstar MyChart Lawsuit$4.25M · claim by November 10, 2026
We are not a claims administrator and not affiliated with any settlement. File only at the official settlement website — filing is always free.
What the Lawsuit Said Happened
DAP Health, a nonprofit community health network in Southern California, says it detected a cybersecurity attack on or about July 22, 2024. According to its breach report as described by HIPAA Journal, an unauthorized third party got into an email server and took emails and files containing patient data. Notification letters went out starting December 2024, some under the name of its subsidiary Borrego Health.
The court notice lists exposed data that included names, Social Security numbers, dates of birth, driver’s license and passport numbers, financial account numbers, Medicare/Medicaid numbers, health insurance details, diagnoses, treatments, lab results and prescriptions. The lawsuit alleged the breach was preventable and pleaded negligence, breach of implied contract, unjust enrichment, and violations of California’s Confidentiality of Medical Information Act, Unfair Competition Law and Consumer Privacy Act. DAP Health denies any wrongdoing or liability.
Case details
The case is Donald Crosslin and Matthew Paone v. DAP Health, Inc., Case No. CVRI2500186, in the Superior Court of California, County of Riverside, before Judge Harold W. Hopp. It is a state-court case, not a federal one. Crosslin filed on January 10, 2025; a second suit, Paone v. DAP Health, Inc. (CVRI2500382), filed February 5, 2025, was dismissed on May 13, 2025 so its plaintiff could join the first case. The amended complaint followed on June 6, 2025. The court’s records are reachable through the Riverside Superior Court website. Class Counsel are John Nelson of Milberg, PLLC and Kristen Lake Cardoso of Kopelowitz Ostrow P.A.
Status: Settled, Claims Open Until October 21, 2026
Either way, filing a claim by the deadline is the only way to get money. Our news report has the fee-by-fee breakdown: what the $1.3 million works out to per person.
Don't miss the claim deadline
Claims are due by October 21, 2026. We'll email you 7 days and 1 day before the deadline.
Who Can Claim
The class is all individuals in the United States whose private information was compromised in the incident, including everyone who received a notice letter. The settlement agreement puts the class at approximately 129,973 people; the breach was reported to federal regulators as affecting 129,048.
Your notice letter is the simplest proof. It may carry DAP Health’s name or Borrego Health’s. The extra $75 payment is only for people who were California residents on July 22, 2024 and were sent notice by DAP Health. Judges, Class Counsel, DAP Health and its officers, and anyone who opted out are excluded.
How Much the DAP Health Settlement Pays
Documented losses: up to $5,000 per person, with real documentation such as bank statements or receipts. A signed statement alone is not enough.
Cash payment: an estimated $25, no documents needed.
California payment: an extra $75 for qualifying California residents.
Monitoring: two years of credit and medical record monitoring.
The $25 is paid last. Fees of up to $433,333.33 (one third of the fund), costs of up to $30,000, service awards of up to $5,000 each, administration, monitoring, loss claims and the $75 payments all come out first. If those use up the fund, the notice says no cash or California payments are made at all. Divided across the whole class, $1.3 million is about $10 per person before any deductions — the estimate works only because most people never claim.
DAP Health Data Breach Settlement Timeline
July 22, 2024 — Attack Detected
DAP Health identifies a cybersecurity attack on its systems. Emails and files with patient data are taken from an email server.
December 2024 — Letters Go Out
DAP Health begins notifying affected people, some letters under the Borrego Health name. The breach is reported to HHS as affecting 129,048 people.
January 10, 2025 — Class Action Filed
Crosslin v. DAP Health, Inc. (CVRI2500186) is filed in Riverside County Superior Court. A second suit follows on February 5, 2025 and is folded in.
September 1, 2026 — Opt-Out and Objection Deadline
Last day to exclude yourself or object, by postmark. Anyone who did not opt out stays in the class and is bound by the settlement.
October 1, 2026 — Final Approval Hearing
Scheduled before Judge Harold W. Hopp. As of October 16, 2026, we could not confirm the outcome.
October 21, 2026 — Claim Deadline
Claims must be submitted online or postmarked by this date. After it, no new claims are accepted.
Three Things to Watch For
A real settlement with a close deadline draws copycats. Check these before you hand over anything:
Look-alike claim sites
The court notice names one website, DAPDataSettlement.com, and one phone line, 1-877-269-0487. Paper claims go to DAP Data Incident Settlement Administrator, PO Box 3245, Portland, OR 97208-3245. Anything else asking for your Social Security number is not the claims process.
Calls or texts naming Borrego Health
Because some letters used the Borrego Health name, a caller citing it can sound legitimate. Filing is free; no administrator asks for a fee or payment to release your $25 or $75.
“Opt out and get more” pitches
The opt-out deadline was September 1, 2026, and opting out never paid anything from this fund. Treat any offer to “opt you out” now as a red flag; the notice also says opt-outs could not be done by phone or email.
DAP Health Settlement — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is the DAP Health data breach settlement legit?
Yes. It is a court-authorized settlement in Crosslin and Paone v. DAP Health, Inc., Case No. CVRI2500186, Riverside County Superior Court. The official notice says “A court has authorized this Notice.” The only official site is DAPDataSettlement.com and the phone line is 1-877-269-0487.
What is the typical payout per person for this data breach settlement?
The no-documents cash payment is estimated at $25, plus $75 for qualifying California residents. Documented losses can be reimbursed up to $5,000. The $25 is an estimate and can drop — or be eliminated — if loss and monitoring claims use up the fund.
What is the DAP Health settlement payout date?
There is none yet. Benefits are paid only after the court grants final approval and the settlement becomes final. If there were objections, that is generally at least 30 days after the final order, longer if anyone appeals. The fund must then be paid to the administrator within 30 days. Check DAPDataSettlement.com for updates.
When is the claim deadline?
October 21, 2026. Submit online at DAPDataSettlement.com by then, or mail a paper form postmarked by that date. Postmarks are applied at processing facilities, so mail early or get a manual postmark at the counter.
How can I check if I have been affected?
Look for a notice letter from DAP Health or Borrego Health sent from December 2024 onward. Everyone who received one is in the class. If you are unsure, call the administrator at 1-877-269-0487.
Who qualifies for the extra $75?
Class members who were residents of California on July 22, 2024 and to whom DAP Health sent notice of the incident. You still have to claim it on the form.
How will I be paid?
The settlement agreement lets claimants choose digital methods such as PayPal or Venmo; otherwise a paper check is mailed. Paper checks are void after 90 days, and uncashed money goes to the Electronic Frontier Foundation.
Who pays for the settlement?
According to the settlement agreement, DAP Health’s insurer, Tokio Marine HCC, funds the $1.3 million on DAP Health’s behalf. DAP Health denies wrongdoing and settled to avoid the cost and risk of continuing the lawsuit.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements still taking claims, with deadlines
- Data Breach Settlement CalculatorEstimate a per-person share from fund size and claims
- Settlement Payout CalculatorHow fees and claim rates shrink a fund
- ApolloMD Data Breach SettlementAnother healthcare data breach settlement