ARcare data breach settlement

Who may be eligible

ARcare, an Arkansas health care provider, has agreed to a $3,900,000 fund over a data incident it discovered on February 24, 2022, after an unauthorized actor had access to its systems from January 18 that year. If ARcare sent you a notice saying your private information may have been affected, you may be eligible for an alternate cash payment the settlement agreement estimates at $100, or reimbursement of up to $5,000 in documented losses, and either can be combined with a year of CyEx Medical Shield Complete monitoring. Claims are due January 7, 2027, and the $100 figure moves up or down pro rata with the number of valid claims. Filing on the official settlement site is free.

The eligibility period on the official materials is January 18, 2022 – February 24, 2022. The notice states no state limit, so it is usually nationwide. Covered: ARcare clinics.

Only the official administrator or agency decides who is eligible. Read the official notice before filing, and file only if you believe you meet its criteria.

How much it may pay

About $100. Every figure here is an estimate from public materials, not a guarantee: many settlements pay pro rata or only after a claims review, so final amounts commonly land well below the advertised maximum.

You pick one cash option. Cash Payment B is an alternate cash payment the settlement agreement estimates at $100; it rises or falls pro rata depending on how many valid claims arrive, so $100 is an estimate rather than a promise. Cash Payment A instead reimburses up to $5,000 of documented, unreimbursed losses, and self-written notes are not accepted as documentation. Either way you can also claim a year of CyEx Medical Shield Complete, which adds one-bureau credit monitoring, medical and dark web monitoring and $1,000,000 of identity theft insurance.

ARcare funds $3,900,000 within 30 days of preliminary approval. The fund pays class member benefits, administration costs and any court-approved attorneys' fees, costs and service awards, and the administrator pays medical data monitoring first, then documented losses, then the alternate cash payments. The settlement agreement does not state the fee or service award figures, because class counsel files that application later, so the net amount left for claims is not yet public.

The administrator pays approved claims by Check, Electronic payment.

What the deadline is

The claim deadline is January 7, 2027.

The deadline to opt out or object is December 8, 2026.

The settlement agreement says benefits are distributed after final approval, and the fund is returned to ARcare if final approval never happens. No distribution date has been published.

What proof is needed

Notice ID / PIN from the official letter or email may be required.

The official claim form states exactly what it accepts; gather it before you start.

How to file for free

Open the official claim page on this page, run by Verita Global, Inc., read the criteria, and file there if you believe you meet them. Filing is free: official claims never carry a fee, and this site never files on anyone's behalf.

Never give a Social Security number, bank login or card number to a site that is not the official administrator or agency page.

Why this case happened

ARcare, a health care provider based in Augusta, Arkansas, discovered a data security incident on February 24, 2022 that disrupted its services. Its investigation found that an unauthorized actor may have reached Social Security numbers, driver's license or state ID numbers, dates of birth, financial account information, medical treatment and prescription information, diagnoses and health insurance information during a period of access running from January 18 to February 24, 2022. Five class actions were filed in federal court in Arkansas and consolidated. ARcare argued it was immune as a federally supported health centre, lost that argument in the district court and again in the Eighth Circuit in February 2026, and then settled after mediation. It denies any wrongdoing.