City of Hope data breach settlement
Yes. The City of Hope data breach settlement is real: an $8.5 million class action settlement in the Superior Court of California, County of Los Angeles, run by Kroll Settlement Administration. The claim deadline, 13 January 2026, has passed and the judge approved the settlement on 20 February 2026. Payments have not been sent yet.
The claim deadline has passed and the site posts a Final Approval Order dated with the February 20, 2026 hearing, but the administrator has not posted a payment update.
Is it real?
Yes. The case is In re City of Hope Data Security Breach Litigation (lead case Rodriguez v. City of Hope; consolidated with 24STCV14723, 24STCV20862, 24STCV20488), case number 24STCV09935, in the Superior Court of California, County of Los Angeles. The court appointed Kroll Settlement Administration to run it, and its only official site is cityofhopedatabreachsettlement.com.
How the real notice reached people. Postcard with a tear-off claim form mailed to the same list of about 774,038 addresses that got City of Hope's breach letter, plus email where available, and a reminder notice 30 days before the claim deadline. Each notice carried a Class Member ID (on the front of the postcard or the top of the email) needed to file a claim; the FAQ says class membership is verified against the mailed list. The email sender address is not published. No scam warning is published; the site says it is 'the only authorized website for this settlement'.
To tell a real message from a scam:
- The only official site is cityofhopedatabreachsettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your City of Hope password, your online banking login or a code texted to you. Payment details go only into the claim form on cityofhopedatabreachsettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on (833) 630-8405, the number on cityofhopedatabreachsettlement.com, not one in the message.
- Claims have closed.The deadline was 13 January 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on cityofhopedatabreachsettlement.com instead.
Who qualifies
All individuals to whom City of Hope sent notice (on or around April 2024 and after) of the data security incident discovered in October 2023. Excludes the judges and their families and staff, City of Hope and its affiliates, and people who opted out.
Size: 774,038 individuals (final approval order; the settlement agreement says approximately 774,038 addresses).
It covers people in the United States only (with a California payment for California residents). If you live elsewhere, you are not part of it, whatever a message says.
How much
The total settlement is $8,500,000 (maximum total City of Hope may be required to pay). What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Documented losses | up to $5,000 | documented losses fairly traceable to the incident, including up to four (4) hours of lost time at $25 per hour (lost time needs only a sworn check-box attestation) |
| Alternative cash payment | $100 | instead of documented losses; increased or reduced pro rata |
| California Statutory Cash Payment | $250 | extra, for people who lived in California at any point between September 19, 2023 and January 13, 2026; may be adjusted pro rata; can be combined with either option above |
| Medical identity theft protection and credit monitoring | enrollment code for a CyEx medical information protection and credit monitoring service | automatic for everyone who claims a cash payment; length not stated on the site |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
- Final approval granted: .
Payout. The administrator has not published a payment date. Payments go by check unless an electronic method was chosen; checks expire and become void 180 days after they are issued.
The administrator: “This is the only authorized website for this settlement.”
Filing and payment
- Claims closed on January 13, 2026; new claims can no longer be filed.
- If you filed, watch for a check or your chosen electronic payment and check www.cityofhopedatabreachsettlement.com for a payment update.
- Questions: (833) 630-8405 or [email protected]. Keep your Class Member ID handy.
Official site: cityofhopedatabreachsettlement.com. Phone: (833) 630-8405. Mail: City of Hope Medical Center, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324.
The breach, and what to do today
On or around October 13, 2023, City of Hope, a cancer treatment and research center in California, discovered unauthorized access to its computer network between September 19 and October 12, 2023. Files involved may have contained personally identifiable information and protected health information. City of Hope began notifying people on or around April 2024. The attacker has not been named in the official documents.
What was exposed: Personally Identifiable Information (PII); Protected Health Information (PHI).
A settlement pays for what already happened. The data is still out there, so do these now:
- Read your health insurance statements.Check each Explanation of Benefits for care you never had, and tell your insurer if you find any. Medical records can’t be changed like a password.
- Distrust messages about City of Hope and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- When payments will be sent.
- Exactly which details were exposed: the settlement papers describe it only as personal information.
Questions
Is the City of Hope data breach settlement legit?
Yes. It is In re City of Hope Data Security Breach Litigation (lead case Rodriguez v. City of Hope; consolidated with 24STCV14723, 24STCV20862, 24STCV20488), case 24STCV09935, in the Superior Court of California, County of Los Angeles. Kroll Settlement Administration runs it for the court, and the only official site is cityofhopedatabreachsettlement.com.
Who qualifies for the City of Hope settlement?
All individuals to whom City of Hope sent notice (on or around April 2024 and after) of the data security incident discovered in October 2023. Excludes the judges and their families and staff, City of Hope and its affiliates, and people who opted out.
How much will I get from the City of Hope settlement?
Up to up to $5,000 for losses you can prove, or $100 as a cash payment without receipts. The total settlement is $8,500,000 (maximum total City of Hope may be required to pay). Final amounts depend on how many valid claims there are.
What is the deadline for the City of Hope settlement?
The claim deadline was 13 January 2026. It has passed.
When will the City of Hope settlement pay out?
The administrator has not published a payment date. Payments go by check unless an electronic method was chosen; checks expire and become void 180 days after they are issued.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- City of Hope data breach settlement: home and important dates, Kroll Settlement Administration, read 7 Nov 2026: class, benefits, deadlines, contact.
- City of Hope data breach settlement: FAQ, Kroll Settlement Administration, read 7 Nov 2026: $8,500,000 maximum, Class Member ID, check expiry, fees requested.
- Final Approval Order (file '2026.02.20 FAO re MFA'), Superior Court of California, County of Los Angeles (posted by Kroll), read 7 Nov 2026: 774,038 class members, no objections, 97 exclusions, fees $2,833,333, admin costs about $767,820.40, non-appearance review 02/23/2027.
- Amended Settlement Agreement, Kroll Settlement Administration (court filing), read 7 Nov 2026: incident dates, notice by postcard and email, reminder notice.