Quantum Health Data Breach: Is There a Settlement? (August 2026 Status)
Quantum Health — a Dublin, Ohio healthcare-navigation company that coordinates benefits for 570+ employer health plans serving over 3 million members — was breached after an employee answered a fraudulent phone call in May 2026. Stolen files include Social Security numbers and medical information. The total number of affected people has not been disclosed yet. Here's the honest status: no settlement exists, no lawsuit has even been filed yet — and here's what you should actually do today.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened — and What Attorneys Are Investigating
On May 29, 2026, an unauthorized caller tricked a Quantum Health employee in a vishing (voice-phishing) attack and gained access to the company's network. Between May 29 and June 1, 2026, the intruder accessed and stole files from Quantum Health systems; the company detected a service outage on June 1 and secured its network. On July 8, 2026, the investigation confirmed the stolen files contained personal information. Law firms investigating potential class actions point to the classic questions in healthcare-vendor breaches: whether Quantum Health's safeguards and employee training were reasonable, and whether notification was prompt enough. Quantum Health has since brought in CrowdStrike and MOXFIVE to overhaul its security.
Case Details
As of August 14, 2026, no class action complaint has been filed yet — this is the pre-litigation stage. Multiple plaintiffs' firms are publicly investigating and screening affected individuals, including The Lyon Firm, Wilshire Law Firm, Dapeer Law, Cole & Van Note, and Bryson Harris Suciu & DeMay (via ClassAction.org). There is NO settlement administrator and NO official claims site for this breach — none exists. Quantum Health's own incident response is handled by Kroll (notification letters and identity monitoring), which is a breach-response vendor, not a settlement administrator.
Current Status
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is Affected?
The total number of affected people has not been disclosed as of August 14, 2026 — treat any site quoting a precise total with suspicion. What IS confirmed: Quantum Health coordinates healthcare for members of 570+ employer and plan clients serving over 3 million people nationwide; a Massachusetts filing confirms at least 653 Massachusetts residents had Social Security numbers exposed; and affected plan sponsors are alerting members — the Board of Pensions of the Presbyterian Church (U.S.A.) alone reported roughly 16,000 of its Medical Plan members were hit. You most likely encountered Quantum Health through your employer's health plan, often as the phone number on the back of your insurance card. If you receive a letter from Quantum Health or Kroll about this incident, you are affected.
Is There a Payout?
Timeline
- 1
May 29, 2026 — A Phone Call Opens the Door
An unauthorized caller tricks a Quantum Health employee in a vishing (voice-phishing) attack and gains access to the company's IT network. Quantum Health is a healthcare-navigation firm based in Dublin, Ohio that acts as the benefits front door for hundreds of employer health plans.
- 2
May 29 – June 1, 2026 — Files Accessed and Stolen
The intruder accesses and acquires files from Quantum Health systems. On June 1 the company detects a service outage — members nationwide temporarily lose access to navigation services — and secures its network.
- 3
June–July 2026 — Investigation Confirms Personal Data Was Taken
Quantum Health gives client plans a preliminary incident report on June 9. On July 8, 2026, the forensic review confirms the stolen files contained personal information. The company brings in cybersecurity firms CrowdStrike and MOXFIVE to overhaul its security infrastructure.
- 4
July 30–31, 2026 — Regulators Notified, Letters Begin Mailing
Quantum Health reports the breach to Massachusetts regulators on July 30 (at least 653 Massachusetts residents' Social Security numbers exposed) and publishes a public notice. Kroll begins mailing notification letters with free credit-monitoring instructions. Affected plan sponsors alert their members — the Presbyterian Church (U.S.A.) Board of Pensions reports roughly 16,000 of its members were affected.
- 5
August 2026 — Law Firms Investigate Class Actions
Multiple plaintiffs' firms — The Lyon Firm, Wilshire Law Firm, Dapeer Law, Cole & Van Note, and Bryson Harris Suciu & DeMay among them — publicly investigate and screen affected individuals. No complaint has been filed yet; the total affected count remains undisclosed.
- 6
Settlement — Not Yet
When a lawsuit is filed, and eventually when a settlement fund, administrator, and claim form actually exist, this page will be updated with the official links and deadlines. Until then: there is nothing to file.
Scam & Misinformation Warnings
A healthcare breach exposing Social Security numbers plus medical data is a magnet for fraud — and this one literally began with a scam phone call. Watch for these:
Fake 'Quantum Health settlement claim' sites
No claims portal exists — there isn't even a filed lawsuit yet. Any page, ad, or social post offering a Quantum Health payout form today is a scam or clickbait. When a real settlement comes, the administrator's URL will appear in court filings — and on this page.
Calls or emails that quote your real data
This breach started with a vishing call — and now the thieves hold real Social Security numbers, insurance details, and medical information. A caller quoting your genuine details is not proof of legitimacy. Quantum Health's official outreach comes by mailed letter from Kroll; its incident line is (844) 958-8913. Never hand personal information to an inbound caller citing this breach.
Fee-charging 'lawsuit sign-up' or 'breach protection' services
Nobody legitimate charges to 'add you' to a class action — if a class is ever certified, affected people are included automatically. Credit freezes at Equifax, Experian, and TransUnion are free by law; skip any paid 'breach protection' upsell.
Frequently Asked Questions
Is there a Quantum Health data breach settlement?
No. As of August 14, 2026 there is no settlement, no claims administrator, no fund — and no lawsuit has been filed yet. What exists: notification letters mailing through Kroll, free identity monitoring, and multiple law firms investigating potential class actions. Given that Social Security numbers plus health data were exposed, litigation is likely; a settlement would then be a 1–3 year path. Bookmark this page; we update it when anything changes.
I got a Quantum Health or Kroll letter — what should I do right now?
Four things: (1) Keep the letter — it documents that you're in the affected group. (2) Enroll in the free Kroll credit monitoring before the deadline printed in your letter. (3) Freeze your credit for free at Equifax, Experian, and TransUnion — the strongest protection when your SSN is exposed. (4) Watch bank statements and health-insurance Explanation of Benefits documents for services you never received.
How much money will I get?
Honestly: $0 today — there is no fund and no filed lawsuit. For a realistic reference point if a settlement eventually happens: comparable healthcare-breach settlements have paid documented out-of-pocket losses (often capped around $2,500–$10,000) plus small pro-rata cash payments (typically $50–$100). That is speculation until an actual settlement exists.
I've never heard of Quantum Health — why did they have my data?
Quantum Health is a healthcare-navigation and care-coordination company based in Dublin, Ohio. Employers hire it to run the benefits front door for their health plans — often it's the member-services number on the back of your insurance card. It serves 570+ employer and plan clients covering over 3 million members, so it holds insurance and medical data for many people who never chose to deal with it directly. Affected clients confirmed so far include the Board of Pensions of the Presbyterian Church (U.S.A.).
What data was stolen — and how many people are affected?
Depending on the individual: name, Social Security number, date of birth, email, address, phone number, demographic information, health-insurance details (policy numbers, claims and benefits information), and medical information such as treatment details, diagnoses, prescriptions, provider names, and dates of service. Your letter states what was involved for you. The total affected count has NOT been disclosed yet — a Massachusetts filing confirms at least 653 residents there, and one client plan alone reported ~16,000 members hit; the federal HHS filing should eventually reveal the full number.
Do I need to sign up for the lawsuit?
There is no lawsuit to sign up for yet. Law firms advertising a 'Quantum Health class action' are at the investigation stage — filling out their forms means volunteering as a potential client or named plaintiff, which is optional. If a class action is filed and later certified or settled, everyone fitting the class definition is included automatically; you'd only act later to file a claim or opt out.
When will there be a settlement?
This breach is earlier in the cycle than most: notification letters only began in late July 2026, and no complaint has been filed yet. The typical sequence — first suits within weeks or months of notification, consolidation, motions, discovery, then a settlement in 1–3 years if at all. The milestones to watch: the first filed complaint, the total affected count in the HHS filing, and consolidation. We update this page at each milestone.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Conduent Breach (62.2M affected)
Healthcare breach — consolidated litigation, no settlement yet
DentaQuest Breach (15M+ affected)
Healthcare breach — same no-settlement-yet stage
Medtronic Breach (3.8M affected)
Healthcare breach — same no-settlement-yet stage
Data Breach Settlement Calculator
All breach trackers + payout estimator