Data Breach Class Action Settlement

Do I Need to Do Anything to Get Paid?

No. You are not required to take any affirmative steps to participate in the Settlement. If you are an eligible Class Member and you do not opt out, you will automatically receive your share of the Net Settlement Fund after the Court grants Final Approval.

You may, however, choose how you would like to receive your payment. The Election Form included with your Notice lets you select a physical check, Venmo, PayPal, or another reasonably available option. You may submit the Election Form by mail, fax, email, or online through this website by October 26, 2026.

If you do not return an Election Form, the Settlement Administrator will mail a physical check to your address on file. Your choice of payment method will not affect the amount of your payment or your rights under the Settlement.

What is this Case about?

On June 18, 2024, Plaintiff Maria Delgado filed a putative class action against Cardinal Point Administrators, Inc. in the United States District Court for the Northern District of Illinois. Cardinal Point provides third-party administration services for employer-sponsored health and benefits plans. The lawsuit arises from a data security incident in which an unauthorized third party gained access to Cardinal Point's network on or about January 12, 2024 and obtained files containing the personal information of plan participants and their dependents.

According to the Notice, the information involved may have included names, addresses, dates of birth, Social Security numbers, health plan identification numbers, and certain claims or treatment information. Cardinal Point discovered the incident on or about February 2, 2024 and began mailing notices to affected individuals on or about May 15, 2024. The lawsuit alleges negligence, negligence per se, breach of implied contract, and unjust enrichment, and claims that Cardinal Point failed to adequately safeguard the information and delayed in providing notice of the incident.

Cardinal Point denies all material allegations, denies any wrongdoing or liability, and would continue to assert numerous defenses if the case proceeded. To avoid the expense, inconvenience, and risk of continued litigation, the Parties engaged in arm's-length negotiations, including a mediation, and reached an agreement in principle on March 30, 2026. The Settlement is a compromise of disputed claims and is not an admission of liability by Cardinal Point.

Am I a Class Member?

The Court has provisionally certified a Settlement Class for settlement purposes only. You are a Settlement Class Member if you fit the following description:

All individuals residing in the United States who were sent notice by Cardinal Point Administrators, Inc. that their personal information may have been compromised in the data security incident that Cardinal Point announced on or about May 15, 2024.

Cardinal Point's records indicate that approximately 128,000 individuals were sent notice. Excluded from the Settlement Class are Cardinal Point's officers and directors, the judges presiding over the Action and their immediate families, and any individual who timely and validly opts out.

If you received a Notice of this proposed Settlement by mail or email, Cardinal Point's records indicate that you are a member of the Settlement Class.

What Can I Get From The Settlement?

Cardinal Point Administrators, Inc. has agreed to pay $4,250,000.00 as the Cash Settlement Fund. This amount will fund all payments to be made under the Settlement, including payments to Class Members, Court-approved attorneys' fees and costs, the Service Award to the Named Plaintiff, and the costs of settlement administration.

Class Counsel will ask the Court to approve attorneys' fees of no more than $1,416,666.66, reimbursement of litigation costs not expected to exceed $75,000.00, and a Service Award of no more than $5,000.00 to the Named Plaintiff. After these Court-approved deductions, the remaining balance – the Net Settlement Fund – will be divided on a pro rata basis among all eligible Class Members who do not opt out.

In addition to a cash payment, every Class Member is eligible to enroll in three (3) years of complimentary credit monitoring and identity-theft protection services at no cost, regardless of the payment method they choose. Enrollment instructions are included with the Notice.

Payments will be issued within 30 days after the Final Effective Date, which occurs after the Court grants Final Approval and any appeals are resolved. Settlement checks will be void 180 days after the date on the check. Any funds remaining after that time will be redistributed on a pro rata basis to participating Class Members if economically feasible, or otherwise paid to a Court-approved cy pres recipient dedicated to consumer data privacy and identity-theft protection. No settlement funds will revert to Cardinal Point.

All payments, whether made electronically or by paper check, will be issued only after the Court grants Final Approval of the Settlement and any appeals (if filed) are resolved.