OneTouchPoint Data Breach Settlement: $75 Cash or Up to $5,000, Claim by November 16, 2026
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
OneTouchPoint (OTP) is a Wisconsin print and mailing vendor that sent letters and member materials for health plans and providers — so most people in this case never dealt with it directly. Its April 2022 ransomware attack was reported to federal regulators as affecting 2,651,396 people. A class action settlement now pays a flat $75 with no proof, or reimbursement of documented losses up to $5,000, plus two years of credit monitoring. Claims are due November 16, 2026. Only people whose data OTP confirmed was hit can get money.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the OneTouchPoint Lawsuit Says Happened
OneTouchPoint provides print, marketing execution and supply-chain services to organizations in the health-care sector, from a base in Hartland, Wisconsin. Health plans used it to print and mail member materials, which is why it held member records.
According to reporting on the case, a ransomware group first got into OTP's network on April 27, 2022, and files were found encrypted on April 28, 2022. Data exposed and potentially stolen included names, subscriber ID numbers, diagnoses, medications, addresses, dates of birth and other health details. A federal judge later noted that OTP began notifying people about three months after discovery.
The onetouchpoint lawsuit alleges that the breach should have been prevented with reasonable security. The consolidated complaint pleads negligence, negligence per se, breach of contract, breach of implied contract, breach of fiduciary duty, breach of confidence and invasion of privacy, among other claims. OTP denies all wrongdoing and settled to avoid the cost and risk of further litigation.
Case Details
The settlement is in state court: Dusterhoft v. OneTouchPoint, Inc., Case No. 2025CV002181, Circuit Court of Waukesha County, Wisconsin. The court granted preliminary approval on July 16, 2026, and the final approval hearing is set for November 18, 2026, at 10:00 a.m. at the Waukesha County Circuit Court, 515 W Moreland Blvd, Waukesha. The notice says that date can change without further notice.
The onetouchpoint class action began in federal court. On September 29, 2022, the U.S. District Court for the Eastern District of Wisconsin consolidated 12 actions under the master docket Dusterhoft v. OneTouchPoint, Inc., No. 2:22-cv-00882. The settlement itself is being approved in the Waukesha County case, not in that federal docket.
Official website: OTPDataIncident.com, run by the court-approved administrator, Analytics Consulting LLC.
Status: Settlement Open for Claims, Final Approval Pending
Nothing has been paid yet. Under the notice, benefits go out only if the court grants final approval and any appeals are resolved or the time to appeal expires. Attorneys' fees and costs (up to $1,500,000) and administration costs are paid by OTP, not out of class members' benefits. The court will also decide whether to award a $1,000 service award to the plaintiffs.
Our news report on the settlement terms: OneTouchPoint settlement: $75 without receipts or up to $5,000 with them.
Don't miss the claim deadline
Claims are due by November 16, 2026. We'll email you 7 days and 1 day before the deadline.
Who Can Claim — and Who Cannot
The settlement has two classes, and only one of them can get money.
Monetary Settlement Class: people in the U.S. and its territories whose private information OTP's investigation determined was impacted in the April 2022 incident, plus the named plaintiffs. These people can claim cash and credit monitoring.
Injunctive Relief Settlement Class: people OTP sent a notice of potential impact, but whose impact could not be confirmed. They get no cash and no credit monitoring — only the benefit of OTP's security changes, which run for no less than five years.
The practical test is your settlement notice. Online claims ask for the claim number and PIN printed on it. If you are not sure which class you are in, the administrator answers at 866-996-3808 or OTPDataIncident@noticeadministrator.com. The notice asks people not to contact the court or the clerk about the settlement.
What the OneTouchPoint Settlement Pays
Option A — documented claims: ordinary out-of-pocket losses (bank fees, postage, credit reports and similar) up to $500; extraordinary proven losses (fraud losses, professional fees, credit repair) up to $5,000; and lost time at $25 per hour for up to four hours ($100 maximum), with an attestation.
Option B — flat cash: a one-time $75 payment with no documents and no time attestation. It replaces Option A; you cannot take both.
Either way: you can also elect two years of one-bureau credit monitoring with at least $1 million in fraud protection.
For most people without receipts, the $75 is the realistic figure. The documented track only beats it if you can show real costs. To compare, see the data breach settlement calculator and our list of open class action settlements.
OneTouchPoint Breach and Settlement Timeline
- 1
April 27–28, 2022 — The Ransomware Attack
Attackers first access OTP's network on April 27; encrypted files are discovered on April 28. Health plan member data is exposed.
- 2
Mid-2022 — Notices and Lawsuits
OTP begins notifying people about three months after discovery. A dozen class actions follow in federal court in Wisconsin.
- 3
September 29, 2022 — Federal Cases Consolidated
The Eastern District of Wisconsin consolidates 12 actions under Dusterhoft v. OneTouchPoint, No. 2:22-cv-00882.
- 4
July 16, 2026 — Preliminary Approval
The Waukesha County Circuit Court preliminarily approves the settlement in Case No. 2025CV002181. Notices go out with claim numbers and PINs.
- 5
October 16 and November 16, 2026 — Deadlines
October 16, 2026 is the last day to opt out or object. November 16, 2026 is the last day to file a claim online or by postmarked mail.
- 6
November 18, 2026 — Final Approval Hearing
The court decides whether to approve the deal, fees and service awards. Payments follow only after approval and any appeals.
Three Things to Watch For
A health-plan breach with a $75 no-proof payment draws imitators. Watch for these:
Look-alike claim sites
The only official site is OTPDataIncident.com, run by Analytics Consulting LLC. Claiming is free. A site asking for a fee, your full Social Security number or bank login to “release” your $75 is not the administrator.
Calls quoting your health plan
OTP mailed for health plans, so a caller may name your insurer to sound real. The administrator's number is 866-996-3808. Note that one passage of the official notice misprints it as 886-996-3808 — use 866.
“You qualify for up to $5,600” pitches
Some sites add every cap together. The $75 flat payment replaces the documented-loss route, and the $5,000 cap needs proof of real losses. Anyone promising a fixed large amount is guessing or selling something.
OneTouchPoint Settlement — Questions People Actually Ask
What is OneTouchPoint, and why did it have my information?
OneTouchPoint is a Hartland, Wisconsin company that provides print, marketing and mailing services to health-care organizations. Health plans used it to send member mail, so your name, member ID and in some cases health details sat in its systems even though you never dealt with it.
How many people were affected by the OneTouchPoint data breach?
OTP reported the breach to the HHS Office for Civil Rights as affecting 2,651,396 individuals. Only those whose impact OTP confirmed can claim money; people who got a “potential impact” letter that could not be confirmed are in the injunctive-relief class only.
How much can I get from the onetouchpoint settlement?
Either a flat $75 with no proof, or documented reimbursement: up to $500 for ordinary losses, up to $5,000 for extraordinary losses and up to $100 for lost time. Two years of credit monitoring can be added either way.
What is the deadline?
Claims must be filed online or postmarked by November 16, 2026. The deadline to opt out or object is October 16, 2026.
When will payments be made?
Not before the final approval hearing on November 18, 2026. Benefits are distributed only after final approval and after any appeals are resolved or the appeal period expires. No payment date has been announced.
Is the settlement notice or email real?
A real notice names Dusterhoft v. OneTouchPoint, Case No. 2025CV002181, points to OTPDataIncident.com and carries a claim number and PIN. The administrator is Analytics Consulting LLC, PO Box 2005, Chanhassen, MN. It never charges a fee.
What if I do nothing?
If you are in the monetary class and do nothing, you get no payment and you still give up your right to sue OTP over the April 2022 incident. Filing a claim is the only way to receive benefits.
Should I opt out?
Opting out keeps your right to sue OTP on your own but means no settlement benefits. It only makes sense if you have significant losses and are prepared to pursue them separately. Opt-outs must be individually signed and postmarked by October 16, 2026; mass opt-outs are not allowed.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements still taking claims, sorted by deadline
Data Breach Settlement Calculator
Estimate what a breach claim with documented losses may pay
Settlement Payout Calculator
How claim rates and caps shape what each person gets
Aesto Health Data Breach
Another health-care vendor breach affecting millions of patients