Individuals who received notice of the Outcomes One data breach may be eligible to claim up to $3,500 plus one year of free medical data monitoring from a $1.7 million class action settlement.
If your personal health information was exposed in the Outcomes One data breach, there is a settlement with your name on it. Outcomes One Inc. agreed to resolve a class action lawsuit after a phishing attack in July 2025 compromised the names, demographic information, medical provider details, health insurance information, and medication information of approximately 257,500 people.
The company denies any wrongdoing but chose to settle rather than face a drawn-out trial. The result: real money available to people who were affected – and you don’t need a lawyer or extensive paperwork to get it.
Who can file a claim?
Individuals must meet all of the following criteria:
- They reside in the United States.
- Their personal information was potentially compromised in the Outcomes One data breach that occurred on or around July 1, 2025.
- They received a breach notification from Outcomes One Inc.
Were you affected by the Outcomes One data breach? You may be owed up to $3,500 plus free medical data monitoring.
File Your Claim NowHow much can class members receive?
Class members can claim several types of awards, depending on their circumstances and the documentation they provide:
- Cash Payment A (documented losses): Up to $3,500 for verified fraud or identity theft losses caused by the data breach. Requires supporting documentation such as bills, invoices, receipts, or account statements. Previously reimbursed losses are not eligible.
- Cash Payment B (alternative cash payment): Approximately $75 for class members who do not have documentation of specific losses. No documentation required beyond the claim form. Subject to pro rata adjustment based on the number of valid claims.
- Medical data monitoring: One year of free medical data monitoring for all class members, including credit monitoring, dark web scanning, and identity theft insurance. Available with either Cash Payment A or Cash Payment B. No documentation required.
How to claim a data breach payment
Class members can submit the online claim form using their unique ID and PIN from the settlement notice, or download, print, complete, and mail the PDF claim form to the settlement administrator. The claim deadline is May 5, 2026.
Outcomes One Inc. Data Incident Settlement Administrator, c/o Epiq Global, P.O. Box 2769, Portland, OR 97208-2769
What proof or documentation is necessary to submit a claim?
- All claimants must provide the unique ID and PIN from the settlement notice they received.
- Claimants filing for Cash Payment A must provide documentation such as bills, invoices, receipts, or account statements showing losses caused by the data breach.
- Claimants filing for Cash Payment B do not need to provide documentation beyond the claim form itself.
- Claimants requesting medical data monitoring do not need to provide documentation – it is automatically available to all valid claimants.
Payout options
- PayPal
- Venmo
- Zelle
- ACH transfer
- Physical check (mailed)
Settlement fund breakdown
The settlement fund covers:
When is the Outcomes One data settlement payout date?
The settlement administrator will issue payments within 30 days of completing the validity review of all claims or after the court grants final approval – whichever comes later. The final approval hearing is scheduled for May 20, 2026. No specific payout date has been announced – this is standard at this stage of the process.
All checks must be cashed within 90 days of issuance or they will expire.
Why did this class action settlement happen?
The class action lawsuit alleged Outcomes One Inc. – a healthcare technology service provider based in Florida – experienced a data breach on or around July 1, 2025, when a criminal third party gained unauthorized access to an employee’s email account through a phishing scheme. The breach exposed the personal and medical information of approximately 257,500 individuals.
Outcomes One denies any wrongdoing but agreed to settle to avoid the uncertainty and expense of litigation.
Is the Outcomes One data breach settlement legitimate?
Yes – this is a fully court-supervised settlement. Here is what confirms it:
- Case number: CACE 25-019099, filed in Florida state court
- Administrator: Epiq Global, one of the largest independent settlement administrators in the country
- Official site: outcomesonedataincident.com
- Notice: Sent directly by the settlement administrator – not by Outcomes One
The settlement received preliminary court approval on January 30, 2026. The final approval hearing is scheduled for May 20, 2026. Claims must be filed before May 5, 2026 – no payments will be issued before final approval.
How much will I actually receive from the Outcomes One settlement?
It depends on two things: what you claim and how many people file. The $1.7 million fund is split among all valid claimants after attorney fees and administrative costs.
- Up to $3,500 (documented losses) – requires bills, invoices, receipts, or account statements showing fraud or identity theft caused by the breach. Cannot include previously reimbursed losses.
- Approximately $75 (no docs needed) – the alternative cash payment. Fixed estimate, but subject to pro rata adjustment if claims exceed the fund.
- Medical data monitoring – one year of free monitoring including credit monitoring, dark web scanning, and identity theft insurance. Available to everyone regardless of which cash payment option you choose.
With 257,500 affected individuals, per-person payouts will depend on how many people file. Most people will receive approximately $75 plus medical data monitoring – which is still worth filing for.
What actually happened in the Outcomes One data breach?
On or around July 1, 2025, Outcomes One Inc. – a healthcare technology service provider that handles sensitive patient data – experienced a cybersecurity incident when a criminal third party gained unauthorized access to an employee’s email account through a phishing scheme.
What was exposed: Names, demographic information, medical provider details, health insurance information, and medication information. The breach affected approximately 257,500 individuals nationwide.
What the lawsuit claims: That Outcomes One failed to implement adequate security measures to protect sensitive personal and medical data from unauthorized access.
What Outcomes One says: They deny any wrongdoing – but agreed to a $1.7 million settlement rather than face trial.
Why do companies settle data breach lawsuits even when they deny wrongdoing?
Settlement does not mean admission of guilt. Companies settle for practical reasons:
- Litigation is expensive – legal fees alone can exceed the settlement amount
- Trials are unpredictable – a verdict could result in a far larger payout
- Settling ends years of ongoing litigation and negative press
- For plaintiffs, it guarantees a payout rather than risking nothing at trial
Courts still review every class action settlement to confirm it is fair and reasonable – that is what the May 20, 2026 fairness hearing is for. Denying wrongdoing while settling is standard practice and has no effect on your right to file a claim.