DCHBX Data Breach Settlement 2025: In March 2023, the District of Columbia Health Benefit Exchange Authority (DCHBX), also known as DC Health Link, suffered a major data breach that exposed the sensitive personal information of thousands of users—including names, Social Security numbers, and other private details. The breach sparked a class-action lawsuit, which resulted in a $1.45 million settlement finalized in 2025. If you were among those impacted, it’s important to know whether you’re eligible for compensation and understand the process for filing a claim before the deadline.
The District of Columbia Health Benefit Exchange Authority (DCHBX), also known as DC Health Link, suffered a large data breach in March 2023 that exposed thousands of consumers’ identities, Social Security numbers, and other confidential information. The breach prompted a class-action lawsuit that settled for $1.45 million in 2025. If you were affected, you should know if you’re qualified for compensation and how to file a claim before the deadline.
DCHBX Data Breach Settlement 2025
If your personal information was affected by the 2023 DC Health Link data breach, the 2025 DCHBX Settlement offers a valuable opportunity to seek financial compensation and credit monitoring services. The settlement addresses both confirmed data leaks and potential exposures, providing tools to protect your identity and recover losses. Key deadlines—such as May 13, 2025, for submitting a claim, opting out, or objecting—are fast approaching. Staying informed and taking action now could prevent future complications and ensure you receive the support you’re entitled to.
People whose personal information was stolen in the 2023 DC Health Link data breach have a great chance to get money and credit tracking services through the 2025 DCHBX Settlement. The deal covers both known and possible data leaks. It gives you tools to protect your identity and get back money you lost. Important dates are coming up quickly, like May 13, 2025, for filing a claim, opting out, or objecting. By staying aware and taking action now, you can avoid problems in the future and make sure you get the help you need.
How to Understand the Data Breach
In March 2023, the District of Columbia Health Benefit Exchange Authority (DCHBX) uncovered a major cybersecurity breach in which unauthorized actors accessed and publicly posted sensitive user information on an online forum. The compromised data varied by individual but included critical personal and demographic details such as names, Social Security numbers, birth dates, gender, health plan specifics (including carrier, premiums, and coverage dates), employer data, and contact information. Additionally, some users had their race, ethnicity, and citizenship status exposed. Although not every data field was affected for each person, the breadth and sensitivity of the exposed information made the incident especially serious.
DCHBX found out in early March 2023 that someone had gotten into its users’ personal information without permission and shared it on a public forum. Among the stolen data were:
- Names
- Social Security numbers
- Dates of birth
- Genders
- Health plan details (e.g., plan name, carrier, premium amounts, employer contribution, coverage dates)
- Employer information
- Contact details (addresses, emails, phone numbers)
- Demographic information (race, ethnicity, citizenship status)
Not all data fields were exposed for every individual, but the breach’s scope was significant, affecting a broad spectrum of personal information.
Eligibility Criteria
Received Notification Letter : You must have received a letter or email from DCHBX (DC Health Link) stating your data was impacted by the March 2023 breach.
- Group 1: Individuals whose personal information was confirmed to have been accessed and publicly posted online.
- Group 2: Individuals whose data was potentially accessed but not confirmed to be publicly exposed.
- Both groups are included in the settlement class and may be eligible for compensation and credit monitoring benefits.
You must have received an official letter or email from DC Health Link (DCHBX) notifying you that your personal data was breached in March 2023 to be part of the DCHBX Data Breach Settlement Class. The settlement covers two groups: Group 1 comprises people whose sensitive data was proven to have been obtained and publicly put online, while Group 2 includes people whose data may have been accessed but not publicly disclosed. Both groups may get cash compensation, credit monitoring, and identity protection as part of the class action.
DCHBX Data Breach Settlement – Compensation Details
- Documented Monetary Losses
- Group 1 Members (data confirmed as exposed):
- Extraordinary Losses:
- Up to $10,000 for documented identity theft, fraud, or tax return misuse.
- Up to $10,000 for documented identity theft, fraud, or tax return misuse.
- Ordinary Losses:
- Up to $2,500 for:
- Unreimbursed bank or credit card fees
- Credit monitoring costs
- Long-distance phone charges
- Postage or gas for breach-related errands
- Unreimbursed bank or credit card fees
- Up to $2,500 for:
- Extraordinary Losses:
- Group 2 Members (data potentially accessed):
- Ordinary Losses:
- Up to $2,500 for the same types of out-of-pocket expenses as Group 1.
- Up to $2,500 for the same types of out-of-pocket expenses as Group 1.
- Ordinary Losses:
- Group 1 Members (data confirmed as exposed):
- Alternative Cash Payment
- Option available if you choose not to submit proof of losses.
- Calculated from remaining settlement funds.
- Group 1 members receive 3x the amount paid to Group 2 members.
- Option available if you choose not to submit proof of losses.
- Credit Monitoring Services
- One year of free credit and identity protection for all eligible claimants.
- Includes:
- Three-bureau credit monitoring
- $1 million in identity theft insurance
- Three-bureau credit monitoring
- Available even if you didn’t enroll in the original DCHBX offer.
- One year of free credit and identity protection for all eligible claimants.
Under the DCHBX Data Breach Settlement 2025, compensation varies depending on whether you’re classified in Group 1 or Group 2. Group 1 members—whose personal data was confirmed to have been publicly posted—may claim up to $10,000 for extraordinary losses such as identity theft or fraud, and up to $2,500 for ordinary out-of-pocket expenses like credit monitoring, banking fees, or postage. Group 2 members—whose data may have been accessed—can receive up to $2,500 for similar ordinary expenses. Alternatively, both groups can choose a cash payment from the remaining settlement fund, distributed on a pro-rata basis, with Group 1 receiving three times more than Group 2. Additionally, all eligible individuals can access one year of free credit monitoring and identity restoration services, even if they did not previously enroll through DCHBX.
How to File a DCHBX Data Breach Settlement 2025 Claim
To receive compensation or credit monitoring under the DCHBX Data Breach Settlement, you must file a claim by May 13, 2025. Start by obtaining the official claim form, either online at the settlement website or by calling the Settlement Administrator at 1-888-897-4085 to request one by mail. Complete the form with your personal details and indicate whether you are claiming for documented losses, an alternative cash payment, and/or credit monitoring services. Be sure to include any required documentation, such as receipts or bank statements, if you’re claiming reimbursement. You can submit your completed form and documents online or by mailing them to:
DCHBX Data Incident Settlement Administrator c/o Epiq, P.O. Box 4710, Portland, OR 97208-4710.
- Obtain the Claim Form
- Online: Visit the official settlement website and go to the “Submit a Claim” section.
- By Mail: Call the Settlement Administrator at 1-888-897-4085 to request a form.
- Complete the Claim Form
- Personal Info: Enter your name, mailing address, and contact details.
- Claim Type: Choose compensation for documented losses, alternative cash payment, and/or credit monitoring services.
- Attach Documentation: Provide proof (e.g., receipts, statements) if claiming expenses.
- Submit the Claim
- Online: Upload the completed form and documents via the settlement website.
- By Mail: Send your completed form to:
DCHBX Data Incident Settlement Administrator
c/o Epiq, P.O. Box 4710, Portland, OR 97208-4710
- Important Deadline
- All claims must be submitted or postmarked by May 13, 2025
FAQ’s
What compensation is available?
Eligible claimants can receive reimbursement for out-of-pocket expenses, credit monitoring, compensation for time spent, and identity restoration services.
Do I need proof to receive compensation?
Yes, you may need to submit documentation for expenses or time spent related to the breach, depending on your claim type.
Can I still benefit if I don’t sign up for DCHBX credit monitoring in 2023?
Yes, all eligible class members can receive one year of free credit monitoring, even if they declined or missed the original 2023 offer.
What documents do I need to provide?
If you’re claiming losses, include proof like receipts, bank statements, or other financial records related to fraud, identity theft, or breach-related expenses.
