$3.6M Retina Group Settlement Ends Data Breach Lawsuit Over March 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

The Retina Group of Washington, PLLC has agreed to pay a $3.6 million settlement to resolve a proposed class action lawsuit over a March 2023 data breach that exposed the personal and medical information of approximately 450,000 people.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The court-approved website for the Retina Group data breach settlement can be found at RetinaGroupDataSettlement.com.

The deal, which received preliminary court approval on February 18, 2025, covers all United States residents who received a notice letter informing them that their personal information stored on the healthcare provider’s computer system was potentially accessed during the Retina Group of Washington data breach.

To receive benefits from the Retina Group of Washington settlement, eligible class members must submit a valid claim form online or by mail by June 23, 2025.

You can file a Retina Group claim form online on this page. Alternatively, you may download a PDF claim form or contact the settlement administrator to request a paper copy to complete and return by mail.

To submit a claim, you will need your unique claim ID and PIN, which are typically found on the personalized settlement notice issued about the deal.

Related Reading: The Retina Group of Washington Hit with Class Action Over March 2023 Cyberattack

According to the Retina Group of Washington settlement website, class members who file a timely, valid claim form will be eligible to receive up to $300 in compensation for documented “ordinary” out-of-pocket losses that have not already been reimbursed and were “more likely than not” incurred as a result of the incident.

Per the site, these expenses may include bank fees, phone or data charges, postage, gas, costs related to credit monitoring services or identity theft insurance purchased between December 22, 2023 and June 23, 2025, and other miscellaneous expenses.

Consumers may also submit a claim form to receive up to $5,000 in compensation for documented, unreimbursed “extraordinary” losses from identity theft or other fraud directly linked to the data breach, the website relays.

In addition, class members are eligible to receive reimbursement for up to four hours, at a rate of $25 per hour, for lost time spent handling issues related to the incident.

Alternatively, class members can choose to forego the aforementioned benefits in favor of an estimated $100 cash payout. What remains of the $3.6 million settlement fund after it is used to cover other costs will be distributed on a pro rata basis among class members who elect to receive this payment, the website notes.

Consumers affected by the Retina Group data breach and who do not opt for the alternative cash payment may enroll in 24 months of credit monitoring and identity theft protection services at no cost.

Finally, as part of the settlement agreement, the Retina Group of Washington will implement further data security measures to enhance its cybersecurity in response to the incident.

The court will determine whether to grant final approval to the settlement, which resolves the Retina Group of Washington class action lawsuit, at a hearing on June 9, 2025.

Retina Group of Washington settlement payouts and credit monitoring codes will be issued to eligible class members only if the deal receives ultimate approval, and after any appeals are resolved.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.