Cardiovascular Consultants $3.85M Data Breach Settlement

U.S. residents whose personal information may have been compromised in the Cardiovascular Consultants data breach detected September 29, 2023 (about 484,000 people). The administrator sent a notice with a Class Member ID. The ~$75 pro rata cash needs no receipts.

• U.S. resident whose info may have been compromised in the Sep 29, 2023 CVC breach
• Have the Class Member ID from your emailed or mailed notice (required to file online)
• Receipts/third-party records required only for the documented-loss tier

Cardiovascular Consultants Ltd., an Arizona cardiology practice, agreed to a $3.85 million settlement (Stroup v. Cardiovascular Consultants, Maricopa County, AZ) over a breach detected September 29, 2023. A threat actor accessed its systems, exfiltrated files, and deployed ransomware, affecting roughly 484,000 people. Exposed information may include names, Social Security numbers, addresses, dates of birth, driver's license/ID numbers, health insurance information, and medical details (diagnoses, treatment). CVC denies wrongdoing; the settlement is not an admission of liability.

Who's excluded: Excluded are people who opted out by June 1, 2026. Self-prepared receipts alone aren't sufficient for documented losses. Total recovery per claimant is capped at $5,000. Payment order: documented losses first, then monitoring, then pro rata cash — if losses exceed the fund, cash may be $0 and monitoring may drop to one year.

• Pro rata cash — ~$75 (no proof)

  An equal share of the net fund, estimated around $75, with no receipts (Class Member ID still required to file). The amount can rise or fall with claim volume.

• Documented losses — up to $5,000

  Reimbursement for documented, unreimbursed expenses traceable to the breach (identity-theft/fraud losses, credit monitoring, credit-freeze fees). Requires third-party records; combined recovery capped at $5,000.

• 2 years medical monitoring

  Two years of medical monitoring services with no proof of loss; an activation code is sent after final approval.

1. 1Open CVCDataSettlement.com and enter the Class Member ID from your notice (or request it via the contact page).
2. 2Claim the ~$75 pro rata cash and/or medical monitoring, and upload documentation for any out-of-pocket losses.
3. 3Submit online by 11:59 p.m. MT or postmark by July 1, 2026.

1. Opt-out / objection deadlineJune 1, 2026
2. Claim form deadlineJuly 1, 2026
3. Final approval hearingAugust 18, 2026

Payments go out only after the court grants final approval at the August 18, 2026 hearing and any appeals are resolved.

• Official settlement website & claim form
• Administrator: Kroll Settlement Administration
• Case: Stroup, et al. v. Cardiovascular Consultants Ltd. · No. CV2023-020048 · Superior Court of Arizona, Maricopa County