Auxilio Mutuo Hospital data breach settlement
Jose A. Morales Rosario, et al. v. Hospital Español Auxilio Muto De Puerto Rico, Inc.
Also known as Hospital Auxilio Mutuo; Hospital Español Auxilio Mutuo; Hospital Espanol Auxilio Mutuo; Auxilio Mutuo data breach; Morales Rosario v. Hospital Español
The lawsuit said a 2023 cyberattack on Auxilio Mutuo Hospital exposed patients’ personal and health data.
- You could get
- $25 cash payment Up to $2,500 for losses you can show with paperwork.
Source
“Alternative Cash Payment: An alternative $25 cash payment.”
From the administrator site: Official settlement website, FAQ.
- You need
- No receipt needed Needs the code from your notice Class Member ID from your notice (the online form asks for it first) Some paperwork: describes the claim form only
Source
“You must submit a valid Claim Form with documentation to support your claim for Out-of-Pocket Losses to receive compensation. This can include receipts or other third-party documentation that document the costs incurred but does not include documentation that is “self-prepared.””
From the administrator site: Official settlement website, FAQ.
- Who can file
- U.S. residents whose data was in Auxilio Mutuo’s 2023 incident
Source
“The Settlement Class consists of all individuals residing in the United States whose Personal Information may have been accessed and/or acquired by an unauthorized party as a result of the cybersecurity incident against Defendant giving rise to the Action. ... Excluded from the Settlement Class are (i) Defendant; (ii) all Settlement Class Members who timely and validly request exclusion from the Settlement Class; (iii) any judges assigned to this case and their staff and family; ... On or around April 21, 2025, the Defendant began notifying potentially impacted individuals about the Data Incident.”
From the administrator site: Official settlement website, FAQ.
- Where
- Anywhere in the U.S.
Source
“The Settlement Class consists of all individuals residing in the United States whose Personal Information may have been accessed and/or acquired by an unauthorized party as a result of the cybersecurity incident against Defendant giving rise to the Action.”
From the administrator site: Official settlement website, FAQ.
- Time to file
- About 4 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: hospitalespanolauxiliosettlement.com.
Free. The official site never charges.
Quick answers
How much is the Auxilio Mutuo Hospital data breach settlement payout?
$25 cash payment. Up to $2,500 for losses you can show with paperwork.
Where is the Auxilio Mutuo Hospital data breach settlement claim form?
On the official site, www.hospitalespanolauxiliosettlement.com. Filing is free. The last day to file is Dec 21, 2026.
Open the claim form on www.hospitalespanolauxiliosettlement.com
When will the Auxilio Mutuo Hospital data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Jan 20, 2027.
Is the Auxilio Mutuo Hospital data breach settlement legit?
The settlement administrator (the company that handles claims) is Kroll, and the official site is www.hospitalespanolauxiliosettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if you live in the U.S. and your personal information may have been accessed in the Auxilio Mutuo Hospital incident.
It covers the cyberattack of around September 2023; the hospital began notifying people on or around April 21, 2025.
You are not included if you are a judge assigned to this case or on a judge's staff or family.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
The Settlement Class consists of all individuals residing in the United States whose Personal Information may have been accessed and/or acquired by an unauthorized party as a result of the cybersecurity incident against Defendant giving rise to the Action.
From the administrator site: Official settlement website, FAQ
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
Official payout table
The amounts the settlement itself sets. We do not work out a personal amount.
| Option and condition | Amount |
|---|---|
| Alternative cash paymentSet amount | $25 |
| Out-of-pocket losses you can show with paperwork (instead of the $25)The most one claim can get | Up to $2,500 |
Choose one. Either may be reduced depending on how many people file to stay within the $500,000 cap. Losses need third-party documents.
You may submit a claim for one of the following Settlement Payments, which may be reduced pro rata to stay within the $500,000 cap on monetary payments: Compensation for Out-of-Pocket Losses: A cash payment for Out-of-Pocket Losses of up to $2,500 per Settlement Class Member for documented losses more likely than not caused by the Data Incident; OR Alternative Cash Payment: An alternative $25 cash payment.
From the administrator site: Official settlement website, FAQ
Estimates can change with the number of valid claims and court deductions. Guidance only.
How to file
-
Find the code from your notice
- Class Member ID from your notice (the online form asks for it first)
-
Gather what you need
No proof of purchase is required.
- For out-of-pocket losses: receipts or other third-party documents (self-prepared ones alone are not enough)
-
File online, or by mail
At www.hospitalespanolauxiliosettlement.com, by Dec 21, 2026. Filing is free.
Or mail a paper claim form to:Hospital Español Auxilio Mutuo De Puerto Rico, Inc. Data Incident, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391
The deadline note says: “Online by 11:59 p.m. on December 21, 2026 (no time zone is given; the online form asks for the Class Member ID from your notice), or by mail postmarked by December 21, 2026.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Jan 20, 2027.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- Jose A. Morales Rosario, et al. v. Hospital Español Auxilio Muto De Puerto Rico, Inc.
- Court
- United States District Court for the District of Puerto Rico
- Case number
- 3:25-cv-01244-RAM
- Administrator
- Kroll
- Official site
- www.hospitalespanolauxiliosettlement.com
- Settlement fund
- Up to $500,000 for cash benefits (payments may be reduced pro rata to stay within it); fees, service awards and administration are paid separately
- Full payout terms
- $25 cash, or up to $2,500 for documented lossesEither a $25 alternative cash payment (no documents needed) or up to $2,500 for documented out-of-pocket losses from September 2023 through December 21, 2026, not both. Payments may be reduced pro rata to stay within the $500,000 cap. All class members who do not opt out can also enroll in two years of CyEx credit and medical monitoring without filing a claim.
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (ahead) source document
- Objection deadline
- (ahead) source document
- Final approval hearing
- (ahead) source document
The court’s exact words
The Settlement Class consists of all individuals residing in the United States whose Personal Information may have been accessed and/or acquired by an unauthorized party as a result of the cybersecurity incident against Defendant giving rise to the Action.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The settlement concerns a cyberattack on Hospital Español Auxilio Mutuo de Puerto Rico, Inc. (Auxilio Mutuo Hospital) discovered on or around September 2023, in which current and former patients' personal and health information (including names, dates of birth, Social Security numbers, ID and passport numbers, financial and medical information) may have been compromised. The hospital began notifying people on or around April 21, 2025. Per the settlement website, the class is everyone living in the United States whose personal information may have been accessed or acquired in the incident. Excluded: the hospital, people who opt out, judges assigned to the case and their staff and family, and anyone convicted of or pleading no contest to causing the incident. Read the notice for the full definition.
Sources and checks (3)
- Official settlement website, FAQ administrator site
- Official settlement website home page administrator site
- Official online claim form (first screen) administrator site
What changedLast change Nov 8, 2026
- Restored the claim deadline details (online or by mail by December 21, 2026): the November 7 change had copied a temporary site notice about online filing being unavailable, which changes neither the deadline nor the filing methods. source document
- Updated the claim deadline details: the official site says online claim forms cannot be processed for now, and claims can be filed by mail or by calling the hotline. source document
- Page created. Claims open until December 21, 2026. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.
Opting out
To leave the settlement and keep your right to sue on your own, follow the official notice by Dec 21, 2026. If you opt out, you get no payment. Opting out and objecting have separate rules; we cannot tell you which is right for you.