$7.5 Million Truepill Settlement Resolves PostMeds Data Breach Lawsuit

New to ClassAction.org? Read our Newswire Disclaimer

A $7.5 million settlement has been reached to resolve a proposed class action lawsuit filed on behalf of more than two million Truepill customers whose private information was reportedly exposed in a 2023 data breach.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

The official Truepill settlement website is live and can be found at TruepillSettlement.com.

The court granted preliminary approval to the Truepill data breach settlement on November 26, 2024. The deal covers all U.S. residents who were sent notice around October 30, 2023 that their private information was potentially compromised as a result of the data incident experienced by PostMeds, which does business as Truepill.

To get a share of a settlement fund, class members must file a claim form by mail or online through the settlement website.

Class members who submit a timely, valid claim form and supporting documentation can get up to $4,000 in reimbursement for money spent or losses incurred as a result of the Truepill data breach.

Relate Reading: Company Behind Truepill Failed to Protect Patient Data from Cyberattack, Class Action Says

Class members can also submit a claim for either a pro-rated cash payment or one year of data protection services. According to the preliminary approval order, claimants can expect their Truepill settlement payout to range between $45 and $240 per person.

Benefits from the deal will be distributed only after the settlement is granted final approval from the court and any appeals are resolved. A date for the final approval hearing for the settlement is not yet listed in public court records.

Litigation against PostMeds arose after the online pharmacy began notifying Truepill customers in October 2023 that an unauthorized third party had accessed their protected health information between August 30 and September 1, 2023. According to one initial complaint, the Truepill data breach was a result of PostMeds’ failure to implement reasonable cybersecurity measures.

Head to ClassAction.org's settlements page for a complete list of data breach settlements.