Esse Health settles for $2.5M

American Multispecialty Group, which does business as Esse Health, has agreed to a $2.525 million class action settlement tied to an April 2025 cyberattack that exposed patient information, according to the court-approved settlement site. The proposed deal covers people whose private information was potentially compromised in the incident and offers a cash payment plus medical identity protection. A Missouri court granted preliminary approval on April 9, 2026, according to the settlement notice. Cash payments and protection benefits will begin only if the settlement receives final approval and any appeals are resolved. ### How did the breach happen? Esse Health said it identified suspicious activity in its network on April 21, 2025, and brought in outside cybersecurity and forensic specialists to investigate. The company said a cybercriminal gained access to its network that day and was able to view and copy certain files. Esse Health also said it notified law enforcement and took steps to secure its systems. (classaction.org) The company said the files involved could include names, addresses, dates of birth, health insurance information, medical record numbers, patient account numbers and certain health information. Social Security numbers were involved for a limited number of individuals, Esse Health said. The company said its electronic medical record system was not accessed or copied. (essehealth.com) ### Who is included in the settlement? Court-approved settlement materials say the class includes people whose private information was potentially compromised during the April 2025 incident, including individuals who received notice from Esse Health. ClassAction.org, citing court documents, said about 521,167 people are covered by the settlement. The named case is *Clausner et al. v. American Multispecialty Group Inc. d/b/a Esse Health*. (essehealth.com) Esse Health said on June 20, 2025 that it had begun sending notification letters to identified individuals whose information may have been involved. The company also said it was offering identity protection services at no charge as a precaution. ### What do class members get? The settlement fund totals $2,525,000, according to the claim site. That fund will first pay court-approved attorneys’ fees and costs, service awards for plaintiffs, and administration expenses. (classaction.org) The remaining net amount will be used for cash benefits. All class members may claim a one-time pro rata cash payment that is expected to be about $50, with no proof required, though the final amount can rise or fall depending on how many valid claims are filed. (essehealth.com) Separately, the defendant will pay for two years of CyEx Medical Shield Complete for class members, according to the settlement materials. The protection is described as including medical identity theft insurance and fraud-resolution support. (essehealthsettlement.com) ### What does this case show about healthcare data exposure? Esse Health said there was no indication, at the time of its notice, that the involved information had been misused. But the settlement terms show the kinds of remedies that now commonly follow healthcare data incidents: cash payments, identity-related monitoring, and formal notice to affected patients. (essehealthsettlement.com) The case also underscores a narrower point for consumer-facing health companies: when names, insurance details, medical record numbers or other health information are exposed, the operational response extends beyond technical cleanup to patient notification, outside administration and court oversight. That sequence is reflected in Esse Health’s June 2025 incident notice and the 2026 settlement process. (essehealth.com) ### What happens next? August 3, 2026 is the scheduled final approval hearing date listed in the settlement notice. August 4, 2026 is the deadline for class members to submit a claim form online, by email or by mail, according to the settlement administrator. The court-approved settlement website says medical identity protection will become active only after final approval is granted. (classaction.org) (essehealth.com)