NJ Residents Can Claim Up to $5,000 After Capital Health Data Breach

Got story updates? Submit your updates here. ›

In a major cyberattack, Capital Health Systems fell victim to hackers in 2023, exposing sensitive personal data of patients and employees. As a result, a $4.5 million settlement has been reached, allowing affected New Jersey residents to claim between $100 and up to $5,000 in compensation. Eligible individuals have until April 6 to file claim forms to receive cash payments or sign up for free credit monitoring services.

Why it matters

This data breach highlights the growing threat of cyberattacks on healthcare providers and the importance of robust cybersecurity measures to protect sensitive patient information. The settlement provides affected individuals with some recourse and financial compensation for the exposure of their personal data.

The details

In November 2023, Capital Health Systems, which operates hospitals and medical facilities in New Jersey and Pennsylvania, suffered a two-week computer systems outage due to a cyberattack. The hacking group LockBit later claimed responsibility, stating they had stolen over 10 million files, including names, addresses, Social Security numbers, dates of birth, email addresses, and phone numbers of patients and employees. LockBit threatened to publicly release the data within two days unless Capital Health paid a ransom, though it's unclear if a ransom was paid.

• The cyberattack on Capital Health Systems occurred from November 11 to 26, 2023.
• On January 7, 2024, the LockBit hacking group claimed responsibility for the attack.
• The $4.5 million settlement agreement was first filed in August 2025.
• Eligible individuals have until April 6, 2026, to file claim forms for the settlement.

What’s next

Eligible individuals must file claim forms postmarked by April 6, 2026, to receive cash payments or sign up for free credit monitoring services.