$6.375M Apria Healthcare Settlement Aims to Resolve Data Breach Lawsuit Over 2019, 2021 Cyberattacks

New to ClassAction.org? Read our Newswire Disclaimer

Apria Healthcare has agreed to pay a more than $6.3 million settlement that, if approved by the court, will resolve a consolidated data breach class action lawsuit over two cyberattacks that occurred in 2019 and 2021.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

If approved, the proposed Apria data breach settlement will cover a class of approximately 1,869,598 people who received actual or constructive notice from Apria Healthcare that their personal information may have been compromised as a result of the cyberattacks, which occurred between April 5, 2019 and May 7, 2019 and August 27, 2021 and October 10, 2021.

If the $6,375,000 deal is approved, class members who submit a timely, valid claim form by mail or online through the court-approved Apria settlement website will be eligible to receive cash benefits, the Apria Healthcare settlement agreement shares.

ClassAction.org will update this page if and when the official Apria settlement website is established.

According to court documents, class members may file a claim to receive up to $2,000 per person for out-of-pocket losses that are “fairly traceable” to the Apria data breaches and supported by documentation. Per the settlement agreement, qualifying expenses may include unreimbursed losses linked to fraud or identity theft; fees for attorneys, accountants or credit repair services; credit monitoring costs; notary, fax, postage, mileage or long-distance phone charges; and other miscellaneous expenses.

In addition, class members may submit a claim form for a pro-rated cash payment, the agreement says. Individual payout amounts will depend on what remains of the settlement fund after the payment of out-of-pocket expense claims, attorneys’ fees, service awards and administration fees, the document adds.

Related Reading: Apria Healthcare Hit with Class Action Over Data Breach Affecting 1.8M People

Furthermore, as part of the deal, Apria has agreed to enhance its data security protocols to better safeguard the information stored in its network, court documents relay.

The plaintiffs filed an unopposed motion and memo outlining the terms of the Apria Healthcare settlement on March 5, 2025. The court must now determine whether to grant preliminary approval to the terms of the deal.

According to the plaintiffs’ memo, notice of the settlement will be issued by mail and email to class members within 49 days of preliminary court approval.

The lawsuit against Apria alleged that the 2019 and 2021 cyberattacks compromised consumers’ full names, addresses, financial information, contact details, medical and treatment data and other highly sensitive information housed in the company’s system. The data breach suit alleged that the home medical equipment provider failed to properly protect the confidential information from hackers and then delayed notifying victims about the incidents.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.