CPAP Medical Supplies and Services Data Breach Lawsuit Investigation

Were you notified that CPAP Medical Supplies exposed your Social Security number? A cyber-attack has compromised the personal and medical details of more than 90,000 patients. Find out how to protect yourself—and whether you can claim compensation—below.

What Happened?

According to regulatory filings, CPAP Medical Supplies and Services Inc.—a Jacksonville-based provider of sleep-apnea equipment primarily serving U.S. military and Tricare members—suffered an eight-day network intrusion between December 13-21, 2024. The breach went undetected for more than six months, until it was discovered on June 27, 2025.

Scope of the Breach

• Impacted individuals: 90,133 nationwide (including 133 Maine residents)
• Discovery date: June 27, 2025
• Notification date: August 15, 2025
• Regulatory filings: Maine & California Attorney General offices

What Information Was Exposed?

The company’s notice confirms that threat actors accessed a broad array of sensitive data:

• Full names
• Social Security numbers
• Dates of birth
• Home addresses
• Government-issued IDs
• Protected health information (PHI)
• Financial information

CPAP Medical’s Response

CPAP Medical is providing 24 months of complimentary credit monitoring and identity-theft protection through IDX. A dedicated call center is open Monday–Friday, 9 a.m.–9 p.m. ET to answer questions and help with enrollment.

Your Immediate Action Plan

1. Activate Credit Monitoring – Use the code in your letter to enroll with IDX right away.
2. Pull Your Credit Reports – You are entitled to one free report from each bureau every 12 months.
3. Place a Fraud Alert – A free, one-year alert makes it harder for fraudsters to open new credit.
4. Freeze Your Credit – Lock your reports to block new accounts entirely until you lift the freeze.
5. Monitor Medical Claims – Review EOB statements and call your insurer about unfamiliar charges.
6. Report Identity Theft – File a police report and notify the FTC if you detect misuse of your data.

Can You File a Lawsuit?

Victims of data breaches can pursue compensation for:

• Out-of-pocket expenses (credit-monitoring fees, notarization costs)
• Time spent resolving identity-theft issues
• Emotional distress
• Future risk of fraud or medical-identity theft

Courts have increasingly recognized these harms. If CPAP Medical failed to implement reasonable cybersecurity measures—or delayed its disclosure—you may have a valid legal claim.

How to Join the CPAP Medical Data Breach Investigation

Complete a short, confidential case evaluation to determine your eligibility. There is no cost or obligation to participate, and you pay nothing unless compensation is recovered for you.

Frequently Asked Questions

How do I know if CPAP Medical Supplies exposed my data?

CPAP Medical mailed letters dated August 15, 2025 to everyone whose information was in the compromised files. If you received that notice—or if you were a patient between 2002 and December 2024—you may be affected.

What should I do if my SSN was part of the CPAP Medical breach?

Enroll in the free credit monitoring, place a fraud alert, consider a security freeze, and monitor financial and medical records for unauthorized activity.

Is the credit monitoring from CPAP Medical Supplies enough?

Credit monitoring is a helpful start, but it cannot prevent identity theft. Ongoing vigilance and possible legal action are recommended.

How long do I have to file a CPAP Medical data breach lawsuit?

Statutes of limitation vary by state (often 1–3 years from discovery). Contact an attorney promptly to preserve your rights.

What damages could I recover in a CPAP Medical Supplies lawsuit?

You may seek reimbursement for monetary losses, credit-monitoring costs, time spent addressing fraud, and compensation for emotional distress or increased future risk.

Key Takeaways

• Over 90,000 individuals had highly sensitive data exposed.
• Complimentary IDX credit monitoring is available—enroll immediately.
• You may be entitled to financial compensation; legal investigations are underway.
• Act now to secure your identity and investigate your legal options.