Covenant Health Inc.

This settlement addresses allegations that Covenant Health Inc. failed to adequately protect patients' personal and health information following a ransomware attack in May 2025.

Covenant Health Inc., along with St. Joseph Healthcare Foundation, St. Joseph Hospital, and St. Joseph Hospital Nashua, New Hampshire, have agreed to a $2 million class action settlement to resolve claims stemming from a ransomware attack on May 18, 2025. The lawsuit alleged that the defendants failed to adequately protect patients' personally identifiable information and private health information. The compromised data included names, addresses, dates of birth, Social Security numbers, medical record numbers, health insurance information, dates of treatment, diagnoses, and specific treatment details. Individuals residing in the United States who received a notice from Covenant Health informing them that their data was compromised in the May 18, 2025 incident are eligible to file a claim. Class members can opt for either documented losses up to $5,000 plus credit monitoring, or a pro...

You may be eligible if you:

• Individuals residing in the United States whose private information was compromised in the May 18, 2025, data incident involving Covenant Health.
• Individuals who received a notice from Covenant Health informing them that the data breach affected their information.

• Basic contact information
• Dates tied to your purchase or account activity
• Proof of purchase or supporting documents

If you do not have every document, you may still be able to file. Many settlements accept claims without receipts.

• Submit an online claim form or print and mail a PDF claim form to the settlement administrator.
• For documented losses, provide third-party documentation of unreimbursed losses and expenses incurred as a result of the data incident.
• For the pro rata cash payment or credit monitoring, no documentation is required.
• The deadline to file a claim is December 30, 2026.