Heritage Provider Network Inc. and several affiliated medical entities have agreed to a $49,995,000 settlement to resolve a class action lawsuit related to a large-scale data breach in December 2022. The breach may have exposed the personal and medical information of over 3.4 million individuals.
Who Is Eligible?
Individuals are eligible if they received a notice from Heritage Provider Network or any of its affiliates in or around February or March 2023 regarding the December 2022 data breach.
Covered affiliates include:
- Regal Medical Group
- Lakeside Medical Group
- ADOC Medical Group
- Greater Covina Medical Group
- Affiliated Doctors of Orange County Medical Group
- Arizona Priority Care
- Community Surgery Center of Glendale
- Pacific Family Hospice
- Valley’s Best Hospice
What Information Was Involved?
The breach potentially exposed:
- Names
- Social Security numbers
- Addresses
- Dates of birth
- Medical information
- Other personal data
Settlement Benefits
Eligible class members may claim one or more of the following:
1. Fraud and Out-of-Pocket Expense Reimbursement
Up to $10,000 for documented, unreimbursed costs directly linked to the data breach. Examples include:
- Identity theft-related losses
- Late fees and overdraft charges
- Card cancellation or replacement fees
- Credit monitoring or freezing costs
This category is capped at $2 million. If claims exceed this amount, payments will be reduced proportionally.
2. Compensation for Time Spent
Class members can claim up to 7 hours of lost time at $30 per hour (maximum $210) for time spent addressing breach-related issues. This category is capped at $1 million and may also be reduced if claims exceed the limit.
3. General Settlement Payment
All class members can submit a claim to receive a pro rata share of the remaining settlement fund (after deducting expenses and other payments). Estimated payments range from $68.72 to $357.97, depending on the number of approved claims.
4. Identity Theft Monitoring Services
Three years of CyEx identity theft protection, which includes:
- Credit monitoring
- Health care ID monitoring
- Dark web scanning
- $1 million in identity theft insurance
- Additional security features
This service is offered in addition to cash benefits, and its cost will be covered separately by the defendants.
How to Submit a Claim
Deadline to file a claim: December 22, 2025
Claim forms may be submitted:
- Online using the unique ID and PIN provided in your settlement notice
- By mail (PDF claim form)
- By email (electronic image of completed form)
Mailing address:
Regal Medical Data Breach Litigation
c/o Settlement Administrator
P.O. Box 25412
Santa Ana, CA 92799-9958
Email: info@RegalMedicalSettlement.com
