Susan B. Allen Memorial Hospital Data Breach Settlement

Susan B. Allen Memorial Hospital Data Breach Settlement

By the Class Action Buddy Editorial Team · Last reviewed August 25, 2026

Up to $100 total (hard cap) + 2 years medical ID monitoring
Max Payout
Nov 12, 2026
Filing Deadline
See Details
Proof Required?
This one is small and it is local. Susan B. Allen Memorial Hospital is a single regional hospital in El Dorado, Kansas, and the case sits in the district court of Butler County. If the hospital did not write to you, this settlement is not yours. The court defined the class as everyone who was sent written notification of the incident, and that is the whole test. So do not go hunting for a reason to qualify. Either a letter arrived or it did not. A targeted cyberattack hit the hospital's systems in July 2025. What the attacker reached was medical rather than financial. Names and dates of birth. Health insurance details. Billing records. Notes about treatment. Despite what this page used to say, Social Security numbers are not on the hospital's list. The money is modest and capped hard. There is no settlement fund waiting to be divided here. You can claim documented out-of-pocket losses up to $100, or four hours of your own time at $25 an hour, which also comes to $100. The notice is blunt about the thing that decides how you should file: $100 is an aggregate cap across both options. Claiming them together does not get you $200. That has a practical consequence worth acting on. Four hours of attested time reaches the cap on its own and needs no receipts at all, just a short description of what you did. The benefit that may matter more than the cash is two years of CyEx Medical Shield Complete, carrying $1 million of medical identity theft insurance. It watches for things an ordinary credit monitor ignores: your health insurance ID being used, your medical record number surfacing, spending on a health savings account you never authorized. You have to tick the box to get it. Claims close 12 November 2026.
🎯

Not sure if this settlement applies to you?

Take our 60-second eligibility quiz to find every settlement you qualify for — including this one.

Check Eligibility →

Who Is Eligible?

You may be eligible to file a claim if you:

  • The class is "all persons who were sent written notification of the Data Incident". That is the court's full definition, word for word. There is no second route in.
  • No letter means no claim, whatever this page said before. It previously told readers they might qualify without one. They do not. Having been a patient at the hospital is not the test, and neither is living in Butler County.
  • You may have had two mailings, not one. The administrator says SBAMH's own records identified class members and that you may have received an earlier notice directly from the hospital after the attack. The settlement notice is the later one, and it carries a Notice ID.
  • What was in the files was medical, not financial. Names, dates of birth, health insurance information, billing information, and notes about treatment. Social Security numbers are not on the list, and neither are bank or card details.
  • That changes what you should watch for. Medical identity theft shows up as treatment you never had appearing on an insurance statement, or a claim eating into your benefit limits. It rarely shows up on a credit report, which is where most people look.
  • Excluded: the judge on the case along with their family and staff, and anyone who carried out the attack.
  • Genuinely unsure? The administrator will check for you on (833) 421-7273 or at info@SBAMHDataSettlement.com. That is a better use of ten minutes than filing a claim you are not entitled to make.

How Much Can You Get?

There is no settlement fund here. No pot of millions is being divided, and you will not see a headline figure for this one because there is not one to quote. The hospital pays valid claims as they are approved. Separately, class counsel is asking the court for $150,000 in fees and costs, and $1,500 for each of the four class representatives.

Cash option one: documented out-of-pocket losses, up to $100. The loss has to have fallen between 14 July 2025 and 12 November 2026. It covers money lost to identity theft or fraud, fees for credit reports or for freezing and unfreezing your credit, the cost of replacing IDs, and even postage if you had to write to your bank.

You need real paperwork for that one. Bank statements or receipts. A note you wrote yourself can explain what you are attaching, but the notice is explicit that your own notes alone are not enough to make a valid claim. Anything a third party has already reimbursed cannot be claimed again.

Cash option two: attested time, up to four hours at $25 an hour. That is $25, $50, $75 or $100 depending on how many hours you pick, and you describe briefly what you did. Changing passwords counts. So does checking accounts for odd activity, or reading up on what happened.

Now the part that decides how you file: the $100 is an aggregate cap. The notice states there is a $100 aggregate cap across both cash benefits, and the claim form repeats it. Claiming documented losses and attested time together does not produce $200.

So for most people the efficient claim is four hours of attested time. It reaches the cap by itself, needs no receipts, and takes a sentence to describe. Documented losses are only worth the paperwork if you have nothing to attest to, or if you simply prefer to claim what actually happened.

The benefit worth more than the money: two years of CyEx Medical Shield Complete. It carries $1,000,000 of medical identity theft insurance and monitors for healthcare insurance ID exposure, Medical Record Number exposure, and spending on a health savings account you did not authorize. A fraud resolution agent helps you unpick anything that surfaces. You have to tick the box on the form to enroll, so it is easy to leave behind.

Cash is paid by PayPal, Venmo, Zelle or a mailed check, whichever you choose on the form.

How to File Your Claim

File with the administrator:

  • File at sbamhdatasettlement.com, which is run by Simpluris and is the official site for this case. Submit online, download the form and post it, or ring the administrator on (833) 421-7273 for a paper copy.
  • You do not need the ID from your letter. The form asks for a "Notice ID (if known)", which makes it optional. If the envelope went in the bin months ago, that does not stop you filing.
  • Tick the credit monitoring box first. It is section two of the form, it costs you nothing, and two years of medical-specific monitoring with $1 million of insurance is the largest thing on offer here. Skip the box and you simply do not get it.
  • For attested time, pick your hours and say what you did. The form offers one, two, three or four hours as a single choice, at $25 each, and asks for a brief description. Four hours reaches the cap.
  • For documented losses, fill the table and attach proof. Each row takes a description and an amount, and you attach bank statements or receipts to back it. Run out of rows and you can add sheets, signing and printing your name on each one.
  • Do not bother claiming both to the maximum. The combined payment is capped at $100 either way, and the form says so on its face.
  • Choose how you want paying and sign. PayPal, Venmo, Zelle or a check in the post. The form is signed under penalty of perjury.
  • The dates, in order. Opt out or object by 13 October 2026. File your claim by 12 November 2026. The judge decides whether to approve the settlement at a hearing on 7 December 2026 at 9:00 a.m. Central, held at the Butler County courthouse in El Dorado, and nothing is paid until that is done and any appeals are finished.

File this one with the administrator

Class Action Buddy does not file this settlement for you — use the official claim process above. What the app does do is watch the open settlements list and tell you when a new one matches your profile.

Frequently Asked Questions

What is the deadline to file a claim for the Susan B. Allen Memorial Hospital Data Breach Settlement?

The current deadline to file a claim is Nov 12, 2026. Claims sent by mail must be postmarked by this date, so allow about a week for delivery if you are not filing online.

How do I file a claim for the Susan B. Allen Memorial Hospital Data Breach Settlement?

File directly with the settlement administrator, using the official claim form linked on this page. Class Action Buddy does not support this settlement in the app, so the administrator’s own claim process is the route. You do not need a Claimant ID or PIN to file.

I was a patient there but never got a letter. Can I still claim?

No. The court defined the class as "all persons who were sent written notification of the Data Incident", so the letter is the test and having been a patient is not. An earlier version of this page said you might qualify without one, which was wrong. If you think a letter should have reached you, the administrator can check your name on (833) 421-7273.

Were Social Security numbers exposed?

No. The notice lists names, dates of birth, health insurance information, billing information, and medical treatment information. Bank and card details are not on the list either. This page previously claimed Social Security numbers were involved, and that was not correct.

How much can I actually get?

One hundred dollars, and that is a hard ceiling. You can claim documented out-of-pocket losses up to $100, or up to four hours of your time at $25 an hour, but the notice applies a $100 aggregate cap across both. Claiming both does not reach $200. There is no settlement fund and no per-person share of one.

What is the easiest way to claim the full $100?

Attested time. Four hours at $25 reaches the cap on its own, needs no receipts, and asks only that you briefly describe what you did. Changing passwords, checking accounts for unusual activity and reading about the incident all count. Documented losses need bank statements or receipts, and your own notes alone will not support a claim.

What is the credit monitoring, and is it worth taking?

Two years of CyEx Medical Shield Complete, with $1,000,000 of medical identity theft insurance. It is built for this kind of breach rather than a financial one, watching for your health insurance ID being used, your medical record number appearing where it should not, and unauthorized health savings account spending. It costs nothing and it is probably worth more than the cash, but you only get it if you tick the box.

Do I need the ID number from the notice?

No. The claim form asks for a "Notice ID (if known)", so it is optional. You can file without it. That is unusual for a data breach settlement, where the ID is often mandatory, and it means losing the letter does not cost you the claim.

What are the dates and where does the case stand?

Opt out or object by 13 October 2026. Claims close 12 November 2026. The final approval hearing is 7 December 2026 at 9:00 a.m. Central at the Butler County courthouse in El Dorado. The judge has not approved the settlement yet, and nothing is paid until approval is final and any appeals are resolved. The case is In Re: Susan B. Allen Data Security Litigation, No. BU-2025-CV-000185, in the District Court of Butler County, Kansas.

Primary source: official settlement administrator — sbamhdatasettlement.com. The settlement details on this page were checked against the administrator’s official website.

Class Action Buddy is an independent directory and is not affiliated with, endorsed by, or sponsored by the settlement administrator or the court. This page is general information, not legal advice. See how we verify settlements.

Ready to File Your Claim?

We're adding new settlements regularly. Download the app to get notified when this one is available.

Download Class Action Buddy →

Or file directly at the settlement website →