OneTouchPoint Data Breach Settlement Offers Up to $5,600 in Compensation A class action settlement has been reached in the 2022 ransomware attack on OneTouchPoint, a printing and mailing services vendor, with affected individuals eligible for compensation of up to $5,600. The settlement, announced on September 7, 2026, resolves allegations that the company failed to adequately protect sensitive data exposed in the breach. The incident was discovered on April 28, 2022, after encrypted files were found on OneTouchPoint’s systems. A forensic investigation revealed unauthorized access had occurred as early as April 27, 2022, compromising the personal information of over 2.6 million individuals far exceeding the initial estimate of 1.1 million. The breach impacted data stored for healthcare providers, insurers, and other clients. Under the settlement, two classes of claimants are defined: - Monetary class members (those with confirmed compromised data) can seek reimbursement for documented expenses, including up to $500 for out-of-pocket costs (e.g., bank fees, credit monitoring), up to $5,000 for extraordinary losses (e.g., credit repair fees), or $100 for time spent responding to the breach. A flat $75 payment is available for those who do not submit a claim. All members are also eligible for two years of credit monitoring with $1 million in fraud protection. - Injunctive relief class members (those notified of the breach but without confirmed exposure) will benefit from five years of enhanced cybersecurity measures implemented by OneTouchPoint. The settlement fund will cover administrative costs, up to $1.5 million in attorneys’ fees, $1,000 service awards for class representatives, and $2 million in security improvements by the company. OneTouchPoint denies wrongdoing but agreed to the settlement to avoid prolonged litigation. Claims must be submitted by November 16, 2026, with a final court approval hearing scheduled for November 18, 2026. Payments will be distributed via Zelle, PayPal, Venmo, virtual prepaid cards, or paper checks after processing or within 60 days of final approval.

The California Office of the Attorney General reported a data breach involving OneTouchPoint (OTP), occurring on April 28, 2022, with prior indications of a cybersecurity incident dating back to April 27, 2022. The breach potentially exposed personal information, including names, addresses, member IDs, age, gender, vital signs, diagnoses, medications, allergies, health screenings, immunizations, and plan names, although Social Security numbers and financial information were not impacted. The total number of individuals affected is currently unknown.