Claim forms are open in a proposed class action settlement tied to a June 2023 cyberattack on Valley Oaks Health, with payments capped at $5,580 per person.
The deal covers anyone whose private information was potentially exposed when intruders were inside the organization’s systems from roughly June 8 to June 13, 2023. Records in scope included names, dates of birth, Social Security numbers, diagnoses and clinical notes, driver’s licence or state identification numbers, financial account details, biometric data or DNA profiles, and account logins.
Payment comes in tiers. The largest slice, up to $5,000, goes to class members who can document identity theft or fraud, while ordinary out-of-pocket costs are reimbursed to $500 and hours lost to the incident are paid at an hourly rate.
Health sector settlements have followed a similar shape through 2026, trading modest cash payments and credit monitoring for a release of claims. Three years on from the intrusion, the tiers also tell a familiar story: documented losses are easy to prove and rarely claimed, while the paperwork around identity theft is what most eligible patients never finish.
