Change Healthcare Data Breach: Is There a Settlement Yet?

Who qualifies

• Because there is no settlement, there is no class definition yet and nobody can be 'eligible' to file. Any eligibility test you see online today is speculation.
• You were likely affected if you have received medical care, filled a prescription, or been billed for healthcare in the United States in recent years — Change Healthcare handles claims and payment processing for a very large share of American providers and pharmacies, so most affected people were never Change Healthcare customers directly.
• Notification letters started going out in late July 2024, roughly five months after the attack. Many people received one addressed from Change Healthcare rather than from their own doctor or insurer, which is why the letters were widely mistaken for junk mail.
• Not everyone had the same data exposed. Depending on the record, the stolen information could include name, address, date of birth, Social Security number, government ID number, health insurance information, diagnoses, medications, test results, and billing or payment details.
• Healthcare providers and practices are covered by a separate track of the same litigation — theirs concerns lost and delayed reimbursements during the outage, not exposed personal data.

What to do while the litigation continues

1. 1

   Do not file anything — and be suspicious of sites that ask you to

   No settlement has been approved, so there is no official claim form, no claim number and no deadline. Websites, ads, texts or calls offering to file your Change Healthcare claim, or promising a specific payout amount, are not connected to the court. A real settlement is announced by a court-appointed administrator and reported on the court's own docket first.

2. 2

   Ignore the payout figures circulating online

   No per-person amount exists, because no settlement terms exist. Figures being quoted for this breach are guesses extrapolated from other cases. For scale, the comparable Anthem breach of 78.8 million people settled for $115 million in 2017 — but there is no basis today for predicting what, if anything, this case will pay.

3. 3

   The free credit monitoring window has closed

   Change Healthcare offered two years of free credit monitoring and identity-theft protection through IDX to anyone affected. The deadline to enroll was August 26, 2025 and it has passed. If you enrolled before then, your coverage should still be running; IDX support is reachable at 1-888-846-4705.

4. 4

   Protect yourself with the free tools you already have

   Freeze your credit file at Experian, Equifax and TransUnion — it is free, reversible, and does not affect your credit score. Check your reports at annualcreditreport.com. Read every explanation of benefits from your insurer for care you did not receive, which is how medical identity theft usually shows up. Report any identity theft at identitytheft.gov.

5. 5

   Keep the letter you received

   If a Change Healthcare notification letter arrived in 2024, keep it. Breach notices are often the cleanest proof that you were included, and if a settlement is eventually approved, the notice and any documentation of costs you incurred — credit monitoring you paid for, fraudulent charges, time spent — are exactly what a claim form asks about.

6. 6

   Get told the day it opens

   The gap between a settlement being approved and a claim deadline is often only 60 to 180 days, and nobody mails a reminder. ClaimBee watches settlements as they are approved, scans your email for breach notices you have already received, and files claims on your behalf — so if this one opens, you will not find out after the window has shut.

Frequently asked questions