Asheville Arthritis Data Breach
Were you notified about the Asheville Arthritis & Osteoporosis Center (AAOC) data breach? If so, you could receive up to $5,000 for documented losses or an estimated $100 cash payment from a proposed $500,000 class action settlement. Submit your claim online or by mail no later than January 26, 2026.
Am I eligible?
You are part of the settlement class if AAOC sent you a letter stating your personal information was involved in the May 2024 data incident. Approximately 58,000 patients were impacted.
What happened?
In May 2024, AAOC discovered unauthorized access to certain company systems. Exposed data included:
- Names, addresses, dates of birth & phone numbers
- Social Security numbers
- Medical notes, lab results, diagnoses & health-insurance details
A lawsuit—Stiwinter et al. v. Asheville Arthritis and Osteoporosis Center, P.A., Case No. 24 CVS 208570-100—was filed in North Carolina Business Court. While AAOC denies wrongdoing, both sides agreed to settle to avoid further litigation.
Settlement benefits
- Cash Payment A – Documented Losses: Up to $5,000 per person for unreimbursed fraud, identity-theft costs, professional fees, credit monitoring, or related expenses.
- Cash Payment B – Pro-Rata Cash: Instead of claiming losses, you may opt for a one-time cash payment projected at about $100. The exact amount depends on the total number of approved claims.
How to file a claim
- Download and review the official Claim Form (PDF) below or file online through the settlement site.
- Provide requested information and any proof of out-of-pocket losses (if selecting Cash Payment A).
- Submit the form online or mail it postmarked by January 26, 2026.
Mailing address:
Asheville Arthritis Data Breach Settlement Administrator
c/o Epiq, PO Box 6075, Portland, OR 97228-6075
Key dates
- Class period: May 22 2024 – January 26 2026
- Claim deadline: January 26 2026
- Opt-out / Objection deadline: January 26 2026
- Final approval hearing: February 9 2026 at 10 a.m. ET
Your options
- Submit a claim – receive cash benefits and release your claims.
- Do nothing – stay in the class, get no money, and waive the right to sue later.
- Exclude yourself – keep the right to sue AAOC individually; no settlement money.
- Object – remain in the class but tell the Court why you dislike the settlement.
Important documents
Download Claim Form (PDF) Long Form Notice (PDF) Settlement Agreement (PDF) Preliminary Approval Order (PDF)Frequently asked questions
What is the Asheville Arthritis Data Breach settlement worth?
The total settlement fund is $500,000, covering cash payments to class members, administrative costs, lawyers’ fees (capped at one-third of the fund), and service awards to class representatives.
How much money will I actually receive?
If you claim documented losses, you may recover up to $5,000. If you choose the pro-rata alternative, you’ll receive an equal share of the remaining fund—currently estimated at about $100 per approved claimant.
Do I need proof to claim?
Yes, for Cash Payment A (documented losses). No proof is required for the pro-rata alternative Cash Payment B.
When will payments be sent?
If the Court grants final approval on February 9 2026 and no appeals delay the process, payments typically issue within a few months afterward. Monitor the settlement website for updates.
Who can I contact for help?
Call the Settlement Administrator at 877-934-6987 or email info@ArthritisDataBreach.com.