Between February 16 and May 12, 2024, an unknown attacker got into ConnectOnCall, the after-hours on-call answering service that healthcare providers used to take late-night calls from patients. The company has since agreed to a $4,950,000 settlement. Claims must be submitted or postmarked by November 2, 2026, one week from today.
The answering service that sat between patients and their doctors
ConnectOnCall “was an after-hours on-call answering service used by healthcare providers in the United States,” the settlement FAQ says. The site does not name the practices that used it. The platform handled communications between providers and patients, the kind of traffic the lawsuit says was taken.
The lawsuit alleges an unknown threat actor accessed the platform and took data, including some provider-patient communications. It does not allege that anyone’s data was misused. The administrator’s site refers to “Private Information” without listing which kinds of personal details were exposed.
ConnectOnCall began notifying people who may have been affected on or about December 11, 2024, the FAQ says. ClaimDepot, a settlement tracker, reports that more than 900,000 people were affected and that ConnectOnCall.com LLC and Phreesia Inc. agreed to pay the settlement.
The class is all living individuals residing in the United States whose private information may have been impacted. Anyone who got a settlement notice holds a unique ID. ClaimDepot reports that online claims need that ID plus the PIN printed on the notice, while mailed claims need the ID alone.
What changed this year: Social Security and Medicare change every year, and nobody sends you a memo. The Retirement Money Brief breaks down what changed and what to do. Bonus when you subscribe: our Open Settlements & Refund Tracker.
Get the Brief and the settlements tracker →
We may earn a commission from links on this page.
Where the $4.95 million goes first
The FAQ spells out a payment order. Monitoring is paid first, then documented losses, then the alternate cash. If valid claims add up to more than the fund, the payments are reduced pro rata, which is why every dollar figure in the notice is a ceiling.
Cash Payment A covers up to $5,000 for documented, unreimbursed losses tied to the incident. ClaimDepot says receipts, statements or proof of fraud or identity theft back such a claim. Cash Payment B is for class members with no documented loss and tops out at $75. A and B are alternatives, not a pair, and B needs no receipts at all.
The monitoring benefit runs two years with one credit bureau through CyEx Medical Shield Complete, which includes dark web monitoring, medical identity monitoring and real-time alerts. It carries insurance of up to $1,000,000 for medical identity theft. The FAQ says a timely, valid claim form is required to receive it.
Before claimants see anything, the fund pays costs. ClaimDepot lists attorneys’ fees of up to $1,650,000, administration of about $490,000 and service awards of up to $2,500 per class representative. Fees and administration alone leave about $2.81 million, and monitoring is paid from that too.
The two cash tiers are written as alternatives, joined by “or,” while the monitoring is listed with them as an “and.” The FAQ requires a claim form for the monitoring as well, so the same November 2 date governs all three benefits.
Cash A is the harder claim. The loss has to be tied to the incident, unreimbursed and documented, and the lawsuit itself does not allege misuse of anyone’s data. A patient who lost money to fraud or paid to repair a stolen medical identity should gather those receipts before sitting down at the form.
The $75 is a maximum. ClaimDepot says the administrator sets the final amount after counting claims. With more than 900,000 people reported in the class, the fund divides quickly if a large share files.
A short runway to November 2
Claims go in through the settlement site or by mailing a PDF form to the administrator, Epiq Global, at P.O. Box 4274, Portland, OR 97208-4274, ClaimDepot says. The administrator’s toll-free line is 1-877-313-8735.
The October 19 deadlines to opt out or object have already passed, so the form is the remaining step. November 2 falls on a Monday, and a mailed form must carry that postmark, which leaves no room for a form still sitting on the kitchen table next weekend. Benefits are provided only after the court approves the settlement and it becomes final, the FAQ says.
The final approval hearing is November 17 at 10:00 a.m. ET before Judge Sanket J. Bulsara in the U.S. District Court for the Eastern District of New York, 100 Federal Plaza, Central Islip. ClaimDepot expects payments about 80 days after approval, which would be early February at the earliest.
The timeline is long. The incident ended in May 2024, notices began in December 2024, and money from a hearing in November 2026 would arrive in 2027. A claim form filed now has to be remembered through all of that.
Payouts can come by PayPal, Venmo, Zelle, ACH, digital Mastercard or paper check, ClaimDepot reports. The site does not name the doctors’ offices that used the service, so the notice itself is the best evidence that a patient is in the class.
Did a late-night call to a doctor’s office go through ConnectOnCall?
Cash A pays only for documented losses, and a claim form that arrives after November 2 pays nothing. Money from this fund is expected months after the November 17 hearing, long after the paperwork is out of mind.
The Settlement & Refund Recovery System includes a claim log and payment tracker, built to record what was filed, when, and what has come back. It also has a step-by-step filing walkthrough and a large-print quick-start for readers who want the steps on one page.
Get the claim log and payment tracker for the ConnectOnCall November 2 filing →
More Financial Reading
- 21 Ways to Stretch a $2,087 Social Security Check
- 15 Places to Find Your Share of the $4.25 Billion States Give Back
- 17 Medicare Money Moves Now That Part D Caps at $2,400
This article was produced with AI assistance and edited for accuracy against the sources linked above.
