People who received notice of the May 2025 data breach at Covenant Health have until Dec. 30 to claim from a $2 million settlement. The form offers an estimated $75 payment, or up to $5,000 for documented losses, and the amounts can shrink if more valid claims arrive than the fund can cover. Opting out or objecting has an earlier cutoff, Dec. 15.
The case is In re: Covenant Health Data Security Litigation, No. PENSC-CV-2025-63, in Penobscot County Superior Court in Maine. The defendants are Covenant Health Inc., St. Joseph Healthcare Foundation, St. Joseph Hospital and St. Joseph Hospital in Nashua, New Hampshire. Kroll Settlement Administration runs the claims process, according to the settlement website.
The class covers people living in the United States whose private information was compromised in the incident on or around May 18, 2025, and who were sent notice of it. Anyone with a letter in hand is the person this settlement is written for. The first decision is which cash option fits what the person can prove.
What changed this year: Social Security and Medicare change every year, and nobody sends you a memo. The Retirement Money Brief breaks down what changed and what to do. Bonus when you subscribe: our Scam & Identity-Theft Action Card.
Get the Brief and the scam action card →
We may earn a commission from links on this page.
The $75 payment and the $5,000 tier
Cash Payment A reimburses documented losses of up to $5,000. Cash Payment B is a pro rata payment, which the website estimates at $75. The website warns that payments “may be subject to pro rata adjustment” based on how many valid claims come in.
Pro rata matters because the pot is fixed at $2 million. The website says the fund also pays settlement administration fees, court-awarded attorneys’ fees, costs and expenses, and court-awarded service awards, in addition to credit monitoring. The $75 estimate is the administrator’s projection, and it can move up or down.
Two years of credit monitoring come with the settlement. A person who does nothing gets no cash, according to the site, but stays eligible for the monitoring. A person who files gets a shot at the cash tiers.
What happened in May 2025
Covenant Health learned on May 26, 2025, that an attacker had breached its systems on May 18, BleepingComputer reported. The Qilin ransomware group claimed the attack in late June and said it had taken 852 GB of data across nearly 1.35 million files. The data exposed included names, addresses, dates of birth, Social Security numbers, medical record numbers, health insurance information and treatment details.
The count of affected patients grew sharply. Covenant first reported in July that 7,864 people were affected, then revised the figure to 478,188 after finishing the bulk of its analysis, BleepingComputer reported. Notification letters began going out Dec. 31, 2025, and the company offered 12 months of free identity protection.
The settlement class is defined by notice, not by the full count. Whoever was sent a letter is covered, and the settlement website does not say how many people that is. Social Security numbers and insurance details are the data behind the documented-loss tier, which reimburses fraud costs that can be proved.
Dec. 15 and Dec. 30, the two dates that matter
Opt-out requests and written objections are due Tuesday, Dec. 15. An opt-out must be mailed to the administrator and postmarked by that day. An objection must be filed with the court or mailed to it by the same date, with copies to class counsel, defense counsel and the administrator.
The claim form is due Wednesday, Dec. 30. It can be submitted through the site’s online claim form or mailed with a postmark by that date. The deadline is the same for both cash tiers.
No final approval hearing date has been set. The website lists it only as a day in 2027. Payments follow court approval, so the check, if one comes, arrives well after the claim deadline.
The paper trail for Cash Payment A is the part that takes time. The claim form asks for documented losses, so a person who intends to claim up to $5,000 needs statements, receipts or bills in hand before the Dec. 30 deadline. Someone who plans to take the estimated $75 has less to assemble.
Two other outcomes are worth knowing. A person who opts out by Dec. 15 keeps the right to sue Covenant separately but gets no payment from this fund. A person who stays in and does nothing gives up the right to sue over the released claims, receives no cash and remains eligible for credit monitoring.
Choosing between the claim tiers
A person who paid for a credit freeze, fixed a fraudulent charge or cleaned up identity theft after the breach should look at Cash Payment A. The $5,000 ceiling applies to documented losses, so receipts and statements are what the claim rests on. A person with no losses to prove is the one the $75 estimate is meant for.
The two cash tiers are separate paths, and the notice describes valid claims being weighed against the $2 million fund. That is why the $75 is labeled an estimate. The notice ties the amount to valid claims, and a claim that misses Dec. 30 is not one of them.
Anyone unsure whether a letter belongs to this case can match the settlement name against the notice and call Kroll at (833) 453-2423. The mailing address for paper forms is Kroll Settlement Administration, P.O. Box 225391, New York, NY 10150-5391. Matching the letter to the May 2025 incident comes first.
Did a Covenant Health letter reach the right address?
The $75 figure is a pro rata estimate, and the claim form is the only way to get it. Someone who files late, files on the wrong tier, or loses track of which notice belongs to which breach can miss money that was set aside for them.
The Settlement & Refund Recovery System includes the four-date rule for reading a settlement notice, a step-by-step filing walkthrough and a claim log and payment tracker. Its Part 3 lays out the scam-proof rules, which matter when a breach letter is followed by look-alike texts.
Track the Dec. 30 claim with a settlement filing guide and log →
More Financial Reading
- 21 Ways to Stretch a $2,087 Social Security Check
- 15 Places to Find Your Share of the $4.25 Billion States Give Back
- 15 Ways Retirees Are Tapping a Record $14.9 Trillion in Home Equity
This article was produced with AI assistance and edited for accuracy against the sources linked above.