Highlands Oncology Settlement: $50 or Up to $4,250 — Claims Close October 22, 2026
Claim window open
File by October 22, 2026 · 7 days left · as of Oct 15, 2026
The Highlands Oncology settlement resolves the class action over the 2025 ransomware attack on the Arkansas cancer practice, which exposed data of 113,575 people. You can claim $50 with no proof, or up to $4,250 for documented losses, plus three years of medical-identity monitoring. The claim deadline is October 22, 2026. If you got a notice for this case, it is genuine, and doing nothing means you get nothing.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
Can I Still File?
The claim deadline, what the settlement pays and where to file — plus other settlements still taking claims.
File by Oct 22 · 7 days left
Highlands Oncology Settlement
Other settlements with open claim windows
- Gabapentin Lawsuit$533M · claim by November 9, 2026
- RealPage Settlement$359.9 million · claim by January 29, 2027
- RealPage Payout Date$359.9M · claim by January 29, 2027
We are not a claims administrator and not affiliated with any settlement. File only at the official settlement website — filing is always free.
What the Lawsuit Says Happened
Highlands Oncology Group is a physician-owned cancer practice serving Northwest Arkansas, Southwest Missouri and Southeast Oklahoma. According to its breach disclosure as reported by the HIPAA Journal, an intruder got into its network on January 21, 2025 and moved in and out undetected until June 2, 2025, when ransomware encrypted files. A $700,000 ransom was reportedly demanded; whether it was paid has not been confirmed.
The files may have contained names, dates of birth, Social Security numbers, driver’s license or state ID numbers, passport numbers, card and financial account numbers, medical treatment information, medical record numbers, patient account numbers and health insurance policy information. The lawsuit alleges negligence, negligence per se, breach of implied contract, unjust enrichment and intrusion upon seclusion. Highlands Oncology denies wrongdoing, and the court has not decided who is right. This was not the practice’s first incident: the HIPAA Journal reports an earlier ransomware attack in November 2023.
Case details
The case is In re Highlands Oncology Group Data Breach Litigation, Case No. 72CV-25-3420, in the Circuit Court for Washington County, Arkansas — a state court, not a federal one. The first suit was filed on August 5, 2025; thirteen suits were eventually consolidated into one complaint. Highlands moved to dismiss, the parties went to mediation, and the court granted preliminary approval of the settlement. The court appointed Milberg PLLC and Stranch, Jennings & Garvey, PLLC as Class Counsel. Official site: HighlandsOncologySettlement.com.
Status: Settlement Open for Claims Until October 22, 2026
Don't miss the claim deadline
Claims are due by October 22, 2026. We'll email you 7 days and 1 day before the deadline.
Who Can File a Claim
The court defined the class as “all individuals residing in the United States whose Private Information was compromised in the Data Breach on or around June 2025.” Directors and officers of Highlands Oncology, government entities and the judge’s family and staff are excluded.
The practical test is your mail. Breach letters went out starting August 1, 2025, and the settlement notice was mailed on July 16, 2026. If you were a Highlands patient and are unsure, the administrator answers eligibility questions free at (833) 421-7336 or info@HighlandsOncologySettlement.com.
How Much the Highlands Oncology Settlement Pays
Cash Payment A — documented losses: up to $4,250 for out-of-pocket losses from fraud or identity theft between June 2, 2025 and October 22, 2026 — for example credit freeze fees, replacing IDs, postage. Receipts or bank statements are required; your own notes alone are not enough.
Cash Payment B — flat payment: a one-time $50, no proof needed. The official site lists it as a fixed $50; a HIPAA Journal report described it as an estimated pro rata amount, so the official notice controls.
Medical data monitoring: three years of CyEx Medical Shield Complete with $1 million in medical identity theft insurance.
Class Counsel will ask for $400,000 in fees and costs and $1,500 service awards, which Highlands Oncology pays separately.
Highlands Oncology Breach and Settlement Timeline
January 21, 2025 — Intruder Gets In
Per the breach disclosure, an attacker gains access and returns intermittently over the following months without being detected.
June 2, 2025 — Ransomware Discovered
Highlands Oncology identifies the attack when ransomware encrypts files.
August 1–5, 2025 — Letters and First Lawsuit
Notification letters begin going out on August 1; the first class action is filed on August 5. Thirteen suits are later consolidated in Washington County, Arkansas.
July 16, 2026 — Settlement Notice Mailed
After preliminary approval, the administrator mails notice to class members describing the $50 and $4,250 options.
October 7, 2026 — Opt-Out Deadline Passes
The last day to exclude yourself or object. Class members who did not opt out are bound by the settlement.
October 22 and November 6, 2026 — Claims Close, Final Hearing
Claims are due October 22, 2026. The court holds the Final Approval Hearing on November 6, 2026; payments follow final approval and any appeals.
Three Things to Watch For
A cancer practice’s patient list with Social Security numbers and a short claim window is what imposters look for:
Look-alike claim sites
The only official site is HighlandsOncologySettlement.com, run for the court-appointed settlement administrator. A look-alike page that charges a fee or asks for your bank login to “verify” you is not the administrator.
“Last chance” texts promising more than $50
The no-proof payment is $50. Anything above that requires documented losses up to $4,250. A message promising a bigger guaranteed payout, or charging a fee to file, is a scam — filing is free.
Calls posing as your cancer clinic
Exposed medical record and insurance numbers make it easy for a caller to sound like your clinic. Hang up and call Highlands or the administrator at (833) 421-7336 using a number you look up yourself.
Highlands Oncology Settlement — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Did Highlands Oncology have a security breach?
Yes. An attacker accessed its network from January 21, 2025 until ransomware was discovered on June 2, 2025. The practice reported 113,575 affected people to the Maine Attorney General; the federal HHS breach portal lists 111,766. Letters went out starting August 1, 2025.
How much is the Highlands Oncology settlement payout per person?
You choose either a flat $50 with no proof, or reimbursement of documented losses up to $4,250. Everyone can also enroll in three years of medical data monitoring with $1 million in identity theft insurance.
What is the deadline to file a claim?
October 22, 2026 — online by that date, or mailed with a postmark no later than October 22, 2026. Claims filed after that date are not accepted.
When will I get paid?
Not before the Final Approval Hearing on November 6, 2026. Payments are distributed only if the court grants final approval and after any appeals are resolved, so no payment date has been set.
Is the settlement notice I received real?
A notice for In re Highlands Oncology Group Data Breach Litigation, Case No. 72CV-25-3420, is genuine. Check it against the official site and the administrator’s P.O. Box 25226, Santa Ana, CA 92799 address and phone number (833) 421-7336.
Can I still opt out or object?
No. The opt-out and objection deadline was October 7, 2026. If you did not opt out, you are in the class and release your claims whether or not you file — so filing is the only way to get anything.
Who owns Highlands Oncology?
Highlands Oncology, founded in 1996, describes itself as an independent, physician-owned cancer center based in Springdale, Arkansas.
Who is the CEO of Highlands Oncology?
Its first CEO, Jeff Hunnicutt, who started on October 1, 2018, stepped down effective June 19, 2026, according to Talk Business & Politics. Dr. Thad Beck was named interim CEO during the transition; we have not confirmed whether a permanent successor has been named since. That leadership change has no effect on the settlement.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements still taking claims, sorted by deadline
- Data Breach Settlement CalculatorEstimate what a breach settlement might pay you
- Settlement Payout CalculatorHow claim rates and fees shape per-person payouts
- Moffitt Cancer Center LawsuitAnother cancer-care privacy case and where it stands