People in the United States whose private information may have been affected by the ConnectOnCall data incident may be able to file a settlement claim by November 2, 2026. The proposed $4.95 million settlement offers several benefit paths: two years of medical-data monitoring, reimbursement of documented losses up to $5,000, or an alternative cash payment of up to $75. Eligibility is not established by the general description alone; readers should use the unique information in the settlement notice they received.
The evidence supplied for this article describes a proposed settlement, not a final court judgment. ConnectOnCall.com, LLC and Phreesia, Inc. deny wrongdoing or liability, and the court has not determined that either company violated the law.
What the lawsuit concerns
The case, In re ConnectOnCall.com Data Breach Litigation, Case No. 2:24-cv-08790, is pending in the U.S. District Court for the Eastern District of New York, according to the settlement report from Federman & Sherwood. The complaint concerns an alleged cybersecurity incident involving the ConnectOnCall Platform between February 16, 2024, and May 12, 2024.
ConnectOnCall is described as an after-hours on-call answering service used by healthcare providers. The lawsuit alleges that an unknown threat actor accessed the platform and exfiltrated data, including certain provider-patient communications. Those allegations remain allegations. The supplied evidence does not provide a complete list of the information involved or independently verify that every person connected with a provider using the platform was affected.
Who may be included
The proposed class generally consists of living individuals residing in the United States whose private information may have been impacted by the incident. ClaimDepot describes the potentially affected group using the same incident dates and says a person may qualify if the breach may have compromised that person’s information.
That wording creates an important boundary: being a U.S. resident, being a patient, or having dealt with a healthcare provider that used ConnectOnCall does not, by itself, prove eligibility. The available evidence does not supply a public list of affected individuals or an exact personal identifier that can confirm a reader’s status. The settlement notice is therefore the key verification document.
Benefit choices and the payment trade-off
One option is two years of Dark Web and Medical Data Monitoring through CyEx Medical Shield Complete. The described services include medical identity monitoring, real-time alerts and up to $1 million in medical identity theft insurance. The supplied sources present these as settlement benefits; they do not independently test the service or establish how useful its alerts will be for a particular person.
A second option covers documented losses attributable to the incident, with a stated maximum of $5,000. ClaimDepot says supporting evidence may include receipts and bank or credit-card statements. The available material does not provide the full list of acceptable documents, so a claimant should follow the requirements in the official notice and claim form rather than assume that any expense will qualify.
A third option is an alternative cash payment of up to $75 for people who do not submit a documented-loss claim. “Up to” is significant: the final amount may be reduced based on the number of valid claims filed, according to ClaimDepot. The sources do not state the eventual pro-rata formula or predict what a successful claimant will receive. The settlement fund is $4.95 million, but that figure is not the same as a guaranteed individual payment.
How to file before the deadline
- Find the settlement notice. The online process requires the settlement unique ID and PIN printed in the notice, according to ClaimDepot. The mail process requires the unique ID.
- Choose one benefit path. Review whether monitoring, a documented-loss claim or the alternative cash option matches the settlement terms and your records. Do not claim losses that cannot be tied to the incident or supported by documentation.
- Use the official claim channel. The supplied reports refer to an online claim form and a printable PDF form. Because the evidence pack does not provide the settlement website’s exact URL, use the address printed in your notice or verify it through the official court or settlement materials before entering personal information.
- Keep a copy. Retain the notice, submitted form, supporting records and any confirmation. The Federman & Sherwood report specifically advises carefully reviewing and retaining the breach notice.
For a paper claim, ClaimDepot lists this mailing address: ConnectOnCall Data Incident Settlement Administrator, P.O. Box 4274, Portland, OR 97208-4274. The evidence supplied does not state a postmark rule, so claimants should follow the form’s mailing instructions and allow enough time for delivery.
Deadlines and what happens next
The claim deadline is November 2, 2026. The deadline to object to the settlement or request exclusion is October 19, 2026. The court has scheduled a final-approval hearing for November 17, 2026, at 10:00 a.m. Eastern time.
Those dates matter because the settlement is still proposed. Filing a claim does not establish that the court will grant final approval or that a particular claimant will receive a payment. The final result can change if the court modifies or rejects the agreement, if a person is found ineligible, or if the number of valid claims affects the alternative cash amount.
The most reliable next step is to locate the notice, verify the unique ID and PIN, and read the official claim instructions before submitting information. If no notice can be found, the supplied evidence does not establish a safe way to confirm eligibility. A reader should seek the official settlement materials or court-filed documents rather than infer eligibility from the ConnectOnCall name, a healthcare relationship or the incident dates alone.
The ConnectOnCall case is a proposed settlement tied to an alleged 2024 cybersecurity incident, not a confirmed individual payment program. The practical decision is between monitoring, documented-loss reimbursement and an alternative cash benefit that may be reduced depending on claim volume. The evidence supports the November 2, 2026 claim deadline and the notice-based filing requirements, but it does not include the official administrator URL, a complete affected-person list or a final payment calculation. Readers should verify those details in their own settlement notice and the official settlement materials before filing.
Sources and methodology
- Here's how to file a claim for the ConnectOnCall $4.95 million data breach settlement - https://www.federmanlaw.com/blog/connectoncall-data-incident-class-action-settlement
- ConnectOnCall $4.95M Data Breach Class Action Settlement - https://www.claimdepot.com/settlements/connect-on-call-settlement
- Equifax Data Breach Settlement - https://www.ftc.gov/enforcement/refunds/equifax-data-breach-settlement
- How to File an Equifax Claim for Data Breach Settlement - https://www.idtheftcenter.org/post/how-to-file-an-equifax-claim-for-data-breach-settlement
