ConnectOnCall $4.95M Data Breach Settlement Reached After Cyberattack Exposes 900K+ Individuals A $4.95 million class action settlement has been finalized between ConnectOnCall.com LLC and Phreesia Inc. following a cyberattack that compromised the sensitive data of over 900,000 individuals in the U.S. The breach, detected between February 16 and May 12, 2024, exposed provider-patient communications and other private information. The lawsuit alleged negligence, breach of contract, invasion of privacy, and unjust enrichment, though the defendants deny any wrongdoing, opting to settle to avoid prolonged litigation. ### Who Qualifies for Compensation? Eligible class members include U.S. residents whose data was potentially exposed in the breach. Affected individuals can file claims for: - Up to $5,000 for documented out-of-pocket losses (e.g., fraud, identity theft). - Up to $75 for those without documented losses, with final payouts adjusted based on claim volume. - Two years of free dark web and medical identity monitoring via CyEx Medical Shield Complete, including real-time alerts and $1 million in identity theft insurance. ### How to File a Claim Claims must be submitted online or by mail by November 2, 2026, using a unique ID and PIN from settlement notices. Proof of losses (receipts, bank statements, etc.) is required for higher payouts. Payments will be distributed via PayPal, Venmo, Zelle, ACH, digital Mastercard, or check approximately 80 days after final court approval (scheduled for November 17, 2026). ### Settlement Fund Allocation The $4.95 million fund covers: - $490,000 for administration costs. - Up to $1.65 million in attorneys’ fees plus expenses. - $2,500 service awards for class representatives. - Remaining funds for approved claimants and monitoring services. The deadline to opt out of the settlement is October 19, 2026. The breach was discovered after an unauthorized party accessed ConnectOnCall’s platform and exfiltrated data, prompting the lawsuit.