Up to $6.5M Navvis Settlement Resolves Data Breach Lawsuits Over July 2023 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Navvis & Company, LLC has agreed to pay up to $6.5 million to settle a class action lawsuit and several consolidated cases filed over a July 2023 data breach that compromised the private information of approximately 2.8 million people.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The court-authorized website for the Navvis data breach settlement can be found at SettlementNavvis.com.

The settlement agreement, which also resolves claims brought against Navvis client SSM Health Care Corporation, received preliminary approval from the court on March 6, 2025. The deal covers all United States residents whose private information was compromised during the Navvis data breach, which occurred between July 12 and July 25, 2023.

To receive Navvis settlement benefits—that is, reimbursement for certain expenses, credit monitoring services and a cash payout—eligible class members must submit a valid Navvis claim form online or by mail by July 7, 2025.

To file a Navvis settlement claim form online, head to this page. Alternatively, you can download a PDF claim form to print, fill out and return by mail, or contact the settlement administrator to request a paper copy.

To submit a Navvis claim, you will need your unique settlement claim ID, which can be found on the personalized settlement notice you should have received by mail.

According to the Navvis settlement website, class members who file a timely, valid claim form are eligible to receive up to $2,000 per person in reimbursement for documented out-of-pocket, or “ordinary,” expenses incurred as a result of the incident. Per the site, examples of “ordinary” expenses may include unreimbursed bank or credit card fees, phone or data charges, postage, gas or certain credit or identity theft monitoring services.

In addition, class members can submit a claim to receive reimbursement of up to $5,000 per person for documented “extraordinary” losses that were incurred between July 12, 2023 and seven days after settlement notices were issued. This benefit covers unreimbursed monetary losses caused by fraud or misuse of private information that was “more likely than not” linked to the data breach and is not covered by the aforementioned benefit for “ordinary” expenses, the site explains.

The website goes on to say that consumers are also entitled to receive two additional years of three-bureau credit monitoring services at no cost if they file a valid claim form with necessary documentation.

Moreover, class members may submit a claim for a Navvis settlement cash payout. Individual payment amounts will be capped at $150 per person unless an increase is needed to exhaust the class action settlement fund, the agreement notes. The website adds that the final figure will be adjusted on a pro rata basis depending on the total number of valid claims that are filed.

Finally, as part of the class action settlement, Navvis has agreed to spend an additional $500,000 per year on cybersecurity between 2024 and 2028 to better secure its network, the agreement states.

A final approval hearing is set for July 10, 2025, at which the court will decide whether to ultimately okay the terms of the Navvis class action settlement. Cash payouts will be issued to eligible class members only if the deal receives final approval and after any appeals are resolved.

The Navvis class action lawsuit contended that the company, which provides health management services to healthcare organizations such as SSM Health, failed to properly safeguard the highly sensitive personal and medical data stored in its systems. The other data breach lawsuits, consolidated in February 2024, similarly alleged that the cyberattack occurred as a result of negligent data security on the part of Navvis.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.