ConnectOnCall and Phreesia Reach $4.95 Million Data Breach Settlement
U.S. users can now file claims after a cybersecurity incident exposed sensitive provider-patient communications.
ConnectOnCall and Phreesia Inc. have reached a $4.95 million settlement to resolve a class-action lawsuit stemming from a significant data breach. The agreement provides a path for affected individuals in the United States to seek compensation for the exposure of their personal information.
The settlement addresses allegations of negligence, breach of contract, invasion of privacy, and unjust enrichment. According to the legal proceedings, the cybersecurity incident exposed sensitive data, including private communications between healthcare providers and patients. The $4.95 million fund is designated to compensate victims for privacy violations and the associated risks of identity theft.
The Path to Resolution
The breach occurred when ConnectOnCall failed to implement adequate security measures to protect the sensitive data it managed. This failure led to a class-action lawsuit, as users argued the company neglected its duty to safeguard private health-related information. The resulting settlement is a direct outcome of these legal challenges, aimed at providing financial redress to those whose data was compromised during the incident.
Industry Implications
This case underscores a growing trend of legal accountability for companies that fail to maintain rigorous cybersecurity standards. As sensitive data—particularly in the healthcare and communication sectors—becomes a primary target for attackers, courts are increasingly holding firms liable for negligence. For the broader industry, the ConnectOnCall settlement serves as a warning that the cost of inadequate data protection extends beyond immediate technical remediation to include multi-million dollar legal liabilities.
Next Steps for Claimants
Eligible individuals in the U.S. are now permitted to file claims for a portion of the settlement fund. According to the case details, the deadline for submitting these claims is November 2, 2026. The settlement involves both ConnectOnCall.com LLC and Phreesia Inc., marking a coordinated resolution to the litigation. Affected parties should monitor official guidance to ensure their submissions are processed before the 2026 cutoff.