THOUSANDS of Americans could be in line for payments of up to $10,000 after a $1.45 million settlement was reached over a massive data breach.
The District of Columbia Health Benefit Exchange Authority, which runs DC Health Link, agreed to the payout following claims it failed to protect personal information from hackers in a 2023 breach.

A cyber attack has exposed sensitive data, including Social Security numbers and contact details, of 170,000 people[/caption]

Those affected by the major data breach can now claim up to $10,000[/caption]
The cyber attack exposed sensitive data, including Social Security numbers and contact details, of 170,000 people.
While the agency hasn’t admitted any wrongdoing, it settled the class action lawsuit, opening the door for affected individuals to claim compensation.
Those eligible are split into two groups, each with a great chance to receive cash.
How to claim your cash
Group 1 members – those whose information was confirmed to have been compromised – can claim up to $10,000 for extraordinary losses such as fraud, false tax returns, and identity theft.
They can also get reimbursed for ordinary losses like credit monitoring costs, bank fees, and travel expenses.
Group 2 members – whose data may have been accessed but isn’t confirmed to be compromised – can claim up to $2,500 for similar losses.
Instead of submitting documented losses, both groups can opt for an alternative cash payout.
Those in Group 1 will receive three times more than Group 2, according to Top Class Actions.
On top of the cash, all class members are eligible for one year of free credit monitoring and identity restoration services, including three-bureau credit monitoring and $1 million in identity theft insurance.
Key deadlines to know
The clock is ticking for those who want to stake their claim.
The final approval hearing is set for February 21, 2025, and the cutoff to submit a claim is March 28, 2025.
If you wish to exclude yourself or object to the settlement, you must do so by February 22, 2025.
Those who received a notification letter from the District of Columbia Health Benefit Exchange Authority about the data breach are eligible to file a claim.
To prove your losses, you may need to present documents such as account statements, receipts, tax documents or legal letters.
For more details and to file a claim, you can visit the settlement website at DCHBXSettlement.com.
What’s a class-action settlement?
Class action lawsuits offer groups of people, or ‘classes,’ a way to band together in court.
These suits are often brought by one or a few people who allege a company or other entity has wronged a large group of people.
When a suit becomes a class action, it extends to all “class members,” or people who may have similar complaints to those who filed the suit.
Companies often settle class actions – offering payment to class members who typically waive their right to pursue further legal action by accepting money.
These payout agreements frequently include statements by the defendant denying wrongdoing. Companies tend to settle class actions to avoid the costs of further litigation.
Pollution, discrimination, or false advertising are a few examples of what can land a class action on a company’s doorstep.
It comes as Americans affected by another major data breach could score up to $5,000 from a class action settlement – and all it takes is a single document to claim the cash.
Mulkay Cardiology Consultants has agreed to settle a lawsuit after hackers exposed sensitive patient information in a September 2023 cyberattack.
Stolen data included Social Security numbers and health insurance details from the New Jersey-based cardiology practice.
While Mulkay denies any wrongdoing, the settlement provides cash payments and free credit protection for those affected.
Meanwhile, senior citizens impacted by a huge data breach could cash in on a hefty settlement of up to $6,500 – and all they need is a bank statement.
Vi, a luxury senior living chain, has agreed to settle a class action lawsuit after hackers breached its systems on March 13, 2023.
Sensitive information like names, Social Security numbers, financial data, and even medical records were exposed in the breach.