Modernizing Medicine Data Breach Settlement: $2,999,750, Claim by November 2, 2026
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
If you got a notice about the July 2025 Modernizing Medicine data breach, it is real and there is money on the table. ModMed, an electronic health record vendor used by medical practices, agreed to a $2,999,750 class action settlement. You can claim an estimated $75 with no proof, or up to $5,000 in documented losses, plus two years of medical data monitoring. The claim deadline is November 2, 2026; the opt-out and objection deadline is October 19, 2026.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Modernizing Medicine Lawsuit Says Happened
Modernizing Medicine, Inc. (ModMed) is a Boca Raton, Florida software company that sells electronic health record and practice-management systems to physician practices. Most people affected never dealt with ModMed directly — their doctor's office did.
According to the official settlement website, the case is about a targeted cyberattack on two ModMed servers used to move limited data from retiring record systems onto ModMed's current platform. The lawsuit alleges the attack ran on July 9 and July 10, 2025. Per HIPAA Journal, ModMed spotted suspicious activity on July 21, 2025, confirmed the access on July 29, 2025, told the affected practices on September 19, 2025, and began mailing patient letters on October 17, 2025.
The files may have held names, addresses, dates of birth, phone numbers, email addresses, Social Security numbers, health insurance information and medical details such as record numbers, diagnosis codes, medications and treatment information. The lawsuit alleges ModMed failed to train its staff on cybersecurity and failed to keep reasonable safeguards. ModMed denies doing anything wrong, and the court has not decided who is right.
Case Details
The Modernizing Medicine class action is Cavallaro-Kearins v. Modernizing Medicine, Inc., Case No. 9:25-cv-81443-EA, in the U.S. District Court for the Southern District of Florida. It was filed on November 19, 2025. The court granted preliminary approval of the settlement on June 29, 2026, and notices went out starting July 29, 2026. The final approval hearing is set for November 17, 2026 at 2:30 p.m. Eastern at the Paul G. Rogers Federal Building and U.S. Courthouse in West Palm Beach; the date can change, so check the official site.
Status: Settlement Open for Claims
Key dates: opt out or object by October 19, 2026; file a claim by November 2, 2026 (online, or postmarked by that date); final approval hearing on November 17, 2026. Nothing is paid until the court grants final approval and any appeals are resolved, so no payment date exists yet.
Don't miss the claim deadline
Claims are due by November 2, 2026. We'll email you 7 days and 1 day before the deadline.
Who Is in the Settlement Class
The court defined the class as “All living individuals residing in the United States who were sent a notice of the Data Incident indicating their Private Information was impacted in the Data Incident.” Directors and officers of ModMed, government entities, the judge and court staff are excluded.
The practical test is your mail. If you received a breach letter from ModMed or a settlement notice with a login ID and PIN, you are in. ClaimDepot reports up to 198,000 current and former patients of multiple podiatry practices; HIPAA Journal reports 198,795 people were reported to the federal health privacy regulator. The letter may name your doctor's practice rather than ModMed.
How Much the Modernizing Medicine Settlement Pays
Cash Payment A — documented losses: up to $5,000 for out-of-pocket losses between July 9, 2025 and November 2, 2026 — identity theft or fraud, credit report or freeze fees, replacing IDs, postage to banks. You need third-party proof such as receipts, emails or phone records; your own written statement alone does not count. A Cash A claim that is rejected and not cured is treated as Cash B.
Cash Payment B — flat payment: an estimated $75, no proof needed. It is pro rata, so the final amount can be higher or lower depending on how many valid claims come in.
Medical data monitoring: two years of CyEx Medical Shield Complete with $1 million in medical identity theft insurance.
The fund first pays attorneys' fees (class counsel may ask for up to one-third, which ClaimDepot puts at up to $999,917), costs and administration. To compare your options, try our data breach settlement calculator.
How cases like this one end
Our copy of the federal courts’ own case database covers 15,171 other personal property damage casesclosed in U.S. federal district courts between 2015 and 2025, 10.4% of them filed as class actions:
- 33.2% ended in a settlement recorded by the court. Another 19.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 33.2% and 52.3%.
- 5.9% were decided on a motion before any trial.
- 1 in 90 reached a trial (1.1%), after a median of 27.4 months.
- Median time from filing to the end of the case: 8.5 months.
- Only 236 of them (1.6%) record a money award at all; the median of those is $496,000.
These are base rates for this type of case (federal other personal property damage cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Modernizing Medicine Data Breach Timeline
- 1
July 9–10, 2025 — The Attack
Per the lawsuit, attackers access two ModMed servers used for record-system data conversion. ModMed confirms the unauthorized access on July 29, 2025.
- 2
September–October 2025 — Notices Go Out
ModMed notifies affected practices on September 19, 2025 and begins mailing letters to patients on October 17, 2025, per HIPAA Journal.
- 3
November 19, 2025 — Class Action Filed
Cavallaro-Kearins v. Modernizing Medicine, Inc. is filed in the Southern District of Florida as Case No. 9:25-cv-81443.
- 4
June 29, 2026 — Preliminary Approval
The court preliminarily approves the $2,999,750 settlement. Settlement notices begin going out July 29, 2026.
- 5
October 19 and November 2, 2026 — Deadlines
October 19, 2026 is the last day to opt out or object. November 2, 2026 is the last day to file a claim.
- 6
November 17, 2026 — Final Approval Hearing
The court decides whether to give final approval. Payments and monitoring codes follow only after final approval and any appeals.
Three Things to Watch For
A real settlement with a $75 no-proof payment draws copycats. Watch for these:
Look-alike claim sites
The only official site is ModernizingMedicineDataSettlement.com, and online claims need the login ID and PIN printed on your notice. A site that asks for your full Social Security number or bank login to “find your claim” is not the administrator.
Calls or texts naming your podiatrist
Because the breach was notified through practices, scammers can name your doctor to sound legitimate. The administrator's toll-free number is (833) 421-7331. It does not charge a fee to file or to release a payment.
“Pay to receive your $5,000”
Up to $5,000 is only for losses you prove with receipts or similar records. Nobody can guarantee that amount, and filing is free. Anyone selling help to “unlock” the maximum is selling nothing.
Modernizing Medicine Settlement — Questions People Actually Ask
Is the Modernizing Medicine settlement notice I got real?
Notices for Cavallaro-Kearins v. Modernizing Medicine, Inc. were authorized by the federal court in the Southern District of Florida and began going out July 29, 2026. Check that it points to ModernizingMedicineDataSettlement.com and the toll-free number (833) 421-7331. If in doubt, go to the website directly rather than clicking a link.
Who is Modernizing Medicine, and why did it have my data?
ModMed sells electronic health record software to medical practices. Your provider used it, so your records sat on ModMed's systems. The breach hit servers used to convert data from older record systems.
How much will I get from the Modernizing Medicine settlement?
Either an estimated $75 with no proof, or up to $5,000 for documented losses — not both. Everyone can also take two years of medical data monitoring. The $75 figure is an estimate and may move up or down with the number of claims.
What is the deadline?
Claims must be filed online or postmarked by November 2, 2026. Opt-out requests and objections are due October 19, 2026. After November 2, 2026, new claims are not accepted.
When will the Modernizing Medicine class action pay out?
Not before the final approval hearing on November 17, 2026. Payments go out only if the court grants final approval and after any appeals are resolved, so there is no payment date yet.
What happens if I do nothing?
You stay in the class, get no money or monitoring, and give up the right to sue ModMed over this breach. Filing a claim is the only way to receive benefits.
Should I opt out?
Only if you want to keep the right to sue ModMed on your own, typically because you had large losses. You must send a signed Opt-Out Request with the case name by October 19, 2026. Opting out means you get nothing from this settlement.
What else is worth doing now?
Freeze your credit at all three bureaus — it is free and reversible. Read your insurer's explanation-of-benefits statements for care you never received. Keep your breach letter and any receipts for losses; they support a documented-loss claim.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Other settlements still taking claims, with deadlines
Data Breach Settlement Calculator
Compare the flat payment with a documented-loss claim
Settlement Payout Calculator
Why pro rata payments rise or fall with the claim count
Simpluris Settlement Administration
The administrator running this claims process