A notice in the mail decides who is in the ModMed settlement. Anyone sent notice of the data incident, including notice of the settlement, is a class member, and claims against the $2,999,750 fund are due November 2, 2026. That leaves one week for patients of podiatry practices who may have set the envelope aside.
Who counts: anyone sent the notice
The administrator’s site defines the class by the notice itself, not by a treatment date or a practice name. The notification mailing is listed as July 29, 2026. A patient who got nothing but believes data was affected can call the administrator at (833) 421-7331.
ClaimDepot, a settlement tracker, reports that as many as 198,000 current and former patients of multiple podiatry practices were affected. Modernizing Medicine, known as ModMed, is the defendant.
The administrator says the incident was discovered in July 2025 and was a targeted cyberattack on two ModMed computer servers used for electronic health record data conversion. ClaimDepot lists the exposed data as names, addresses, birth dates, phone numbers, email addresses, Social Security numbers and medical information.
Online claims need the login ID and PIN printed on the notice. The site has a help link for patients who cannot find them, and a PDF claim form can be mailed instead. The administrator calls the claim form the only way to receive benefits or payments.
What changed this year: Social Security and Medicare change every year, and nobody sends you a memo. The Retirement Money Brief breaks down what changed and what to do. Bonus when you subscribe: our Open Settlements & Refund Tracker.
Get the Brief and the settlements tracker →
We may earn a commission from links on this page.
Cash A, Cash B and the two-year monitoring offer
Cash A pays up to $5,000 for out-of-pocket losses between July 9, 2025 and November 2, 2026, ClaimDepot reports. The claim needs third-party documentation, and personal statements or affidavits alone do not count. Receipts and bank or card records are the evidence that fits.
The loss window opens July 9, 2025, the same month the administrator says the incident was discovered, and closes on the filing deadline. A charge from before July 9, 2025 falls outside the window ClaimDepot lists, however it was caused.
Cash B is a one-time estimated $75 with no documentation. The administrator’s pages state no dollar amounts, so the figure is the tracker’s reading of the notice. “Estimated” matters: the final payment depends on how many patients file.
ClaimDepot lists two years of CyEx Medical Shield Complete for class members, with $1 million in medical identity theft insurance, credit monitoring, dark web scanning, security freeze assistance and victim support. The administrator’s rule that a valid, timely claim form is the only route to benefits still governs.
The arithmetic shows why “estimated” is the right word. If all 198,000 reported patients filed for Cash B at $75, the bill would be $14.85 million, nearly five times the whole fund. Few will file, but the number of claims is what sets the final payment.
Payments are expected about 75 days after final approval, ClaimDepot says, by PayPal, Venmo, Zelle or virtual prepaid card. If the court approves at the hearing, that points to late January or early February.
About a third of the fund goes to lawyers
Attorneys’ fees of up to $999,917 plus litigation costs are listed by ClaimDepot, which is about one-third of the $2,999,750. Administration costs are still to be determined, and monitoring costs rise with the number of claims. Fees alone leave about $1,999,833, and administration and monitoring come out of that before any cash goes to claimants, so what is left for patients is not fixed yet.
The judge decides. The administrator’s site refers to class counsel’s application for attorneys’ fees and costs, and the posted calendar sets the final approval hearing for November 17 at 2:30 p.m. The calendar names no courthouse.
The October 19 dates for objecting and opting out have passed. A patient who opted out receives no settlement benefits but keeps the right to sue ModMed separately, the administrator explains. Everyone else stays in the class and needs only the form, which is where the opt-out question ends for anyone holding a notice today.
Cash A is the only tier that rewards effort. A patient with a documented loss tied to the breach can claim up to $5,000, while everyone else lands on the estimated $75. Because the two are alternatives, the choice is made on the form, and the documents have to be in hand before it is.
One week for the paperwork
November 2 is a Monday. The online form is the fastest route, the administrator says, and a mailed form leaves far less margin. Losses that count for Cash A run through the filing deadline, so receipts dated this week still qualify.
For a patient, the open question is whether the summer notice is still on file. It holds the ID and PIN that open the online form, and it names the one date that cannot be repaired. The administrator’s number, (833) 421-7331, is the route for anyone who cannot find the notice or the PIN, and a call made early in the week leaves time to file before the Monday deadline passes.
Did a ModMed breach notice arrive this summer?
Everything in this settlement hangs on one notice and one date. A notice set aside as junk mail, or a claim form read against the wrong date, ends the right to the cash and the monitoring on November 2.
The Settlement & Refund Recovery System includes a step-by-step filing walkthrough and the four-date rule for reading a settlement notice, which separates the opt-out, objection, claim and hearing dates. A claim log and payment tracker records the filing afterward.
Get the four-date rule and filing tracker for the ModMed notice before November 2 →
More Financial Reading
- 21 Ways to Stretch a $2,087 Social Security Check
- 15 Places to Find Your Share of the $4.25 Billion States Give Back
- 21 Ways Retirees Can Raise $1,000 Fast Without a Job
This article was produced with AI assistance and edited for accuracy against the sources linked above.
