Individuals who received notice of the Orthopedics Rhode Island data breach may be eligible to claim up to $5,000 through a class action settlement.
Overview
Individuals notified that the September 2024 Orthopedics Rhode Island Inc. data incident may have exposed their personal information could qualify for settlement benefits.
Orthopedics Rhode Island Inc. agreed to pay $2.9 million to resolve claims that it failed to properly safeguard patient information, leading to a ransomware attack that exposed names, addresses, dates of birth, billing and claims information, health insurance data, and medical records.
Who Is Eligible to File a Claim?
Class members must meet both of the following requirements:
- They are a living individual residing in the United States.
- They received a notice from Orthopedics Rhode Island Inc. stating that their private information may have been affected by the September 2024 data breach.
How Much Can Class Members Receive?
Eligible individuals who submit valid claims may receive one or more of the following:
Cash Payment A – Documented losses:
Up to $5,000 per person for documented losses related to the data incident.
Cash Payment B – Alternate cash payment:
An estimated $100 for class members who choose this option instead of submitting documented loss claims.
Medical record monitoring:
Two years of CyEx Medical Shield Ultra Medical Record Monitoring at no cost. This benefit can be selected in addition to either cash option.
If the total value of approved claims exceeds the settlement fund, cash payments may be reduced on a pro rata basis.
How to Submit a Claim
Class members may file a claim online or download, print, and mail a PDF claim form.
Claim deadline: January 13, 2026.
Mailing address:
ORI Data Incident Settlement Administrator
P.O. Box 3654
Baton Rouge, LA 70821
Required Documentation
- All claimants must provide the settlement claim ID included in their notification letter.
- For Cash Payment A (up to $5,000), claimants must submit documentation such as receipts, billing statements, or correspondence showing data breach–related losses.
- For Cash Payment B (estimated $100), no documentation is required but claimants must attest to their eligibility.
- For medical record monitoring, claimants simply select the option on the form.
Payout Options
- Venmo
- Zelle
- Physical check
- Medical record monitoring activation code
$2.9 Million Settlement Fund Breakdown
- Settlement administration costs: To be determined
- Attorneys’ fees: Up to $966,570
- Attorneys’ costs: To be determined
- Service awards: Up to $4,000 for each class representative
- Payments to eligible class members: Remainder of the fund
Important Dates
- Opt-out deadline: December 29, 2025
- Claim filing deadline: January 13, 2026
- Final approval hearing: January 28, 2026
When Will Payments Be Distributed?
Payments will be issued no later than 75 days after the court grants final approval, or 30 days after all appeals are resolved, whichever is later.
Why Is There a Settlement?
The lawsuit alleged that Orthopedics Rhode Island Inc. failed to adequately secure patient information, resulting in a ransomware attack between September 4 and September 8, 2024. Sensitive data, including medical records and personal identifiers, was allegedly exposed.
Orthopedics Rhode Island denied wrongdoing but agreed to settle to avoid the risks and expenses of continued litigation.
Sources
Class notice
Claim form
Settlement agreement
Settlement FAQ
Award: Up to $5,000
Deadline: January 13, 2026
