NJ Residents Can Claim Up to $5,000 After Capital Health Data Breach

Got story updates? Submit your updates here. ›

In a major cyberattack, Capital Health Systems fell victim to hackers in 2023, exposing sensitive personal data of patients and employees. As a result, a $4.5 million settlement has been reached, allowing eligible New Jersey residents to claim between $100 and up to $5,000 in compensation. Claimants have until April 6 to submit their forms and supporting documentation.

Why it matters

This data breach highlights the growing threat of cyberattacks on healthcare providers and the importance of robust cybersecurity measures to protect sensitive patient information. The settlement provides affected individuals a chance to recoup losses and access free credit monitoring, though some may choose to opt-out and pursue individual legal action.

The details

The cyberattack on Capital Health Systems was claimed by the LockBit hacking group, which threatened to publicly release the stolen data, including names, addresses, Social Security numbers, dates of birth, email addresses, and phone numbers. The breach impacted not only patients, but also former patients and Capital Health employees. While the settlement does not disclose whether a ransom was paid, it provides a path for affected individuals to seek compensation for documented losses related to the incident.

• The cyberattack on Capital Health Systems occurred from November 11 to 26, 2023.
• On January 7, 2024, the LockBit hacking group claimed responsibility for the attack.
• The $4.5 million settlement agreement was first filed in August 2025.
• Claim forms must be postmarked by April 6, 2026 to qualify for payment and free credit monitoring.

What’s next

The judge will decide on March 9, 2026 whether to approve the $4.5 million settlement agreement.