The CDCR data breach class action settlement claim form was a one-page document used to claim a share of a $1.8 million fund in Thomas v. California Department of Corrections and Rehabilitation. The filing window closed on February 14, 2025, and as of mid-2025 payments to approved claimants have been completed, so no new claims can be filed.1Thomas v. California Department of Corrections and Rehabilitation. Thomas v. California Department of Corrections and Rehabilitation If you filed on time or received a postcard notice, you can still follow up on your payment with the settlement administrator.
The Deadline Has Passed
February 14, 2025 was the last day to submit a claim, ask to be excluded from the settlement, or file an objection. Paper forms had to be postmarked by that date. Claims received or postmarked after it are not eligible, and the settlement website confirms that distributions have already gone out.1Thomas v. California Department of Corrections and Rehabilitation. Thomas v. California Department of Corrections and Rehabilitation
Who Needed to File the Form, and Who Didn’t
Not every class member had to send in the form. Most people received a postcard notice by mail based on contact information CDCR already had. If you got that postcard, you were eligible for a cash payment after final approval without doing anything — no claim form required.2CDCR Data Class Action Settlement. Frequently Asked Questions
The claim form was for class members who did not receive a postcard but believed their information was compromised. You were a class member if your personally identifiable information or protected health information was stored on a CDCR server on or before January 2022 and was involved in the breach.1Thomas v. California Department of Corrections and Rehabilitation. Thomas v. California Department of Corrections and Rehabilitation That covered incarcerated and formerly incarcerated people, current and former CDCR staff, facility visitors tested for COVID-19 by CDCR, and parolees in substance use disorder treatment programs.3California Department of Corrections and Rehabilitation. Potential Data Breach Information
What the Form Asked For
The form itself was a single page in two parts. The first part collected your full name, mailing address, phone number, email address, and your CDCR identification number if you had been assigned one.4CDCR Data Class Action Settlement. California Department of Corrections and Rehabilitation Data Claim Form
The second part was a signature. By signing, the claimant affirmed under penalty of perjury that the information was true and that they reasonably believed they were a member of the affected class. Paper submissions needed a handwritten signature, printed name, and date; online filings used a digital signature.4CDCR Data Class Action Settlement. California Department of Corrections and Rehabilitation Data Claim Form
No receipts, bank statements, or proof of identity theft were required. The form did not ask claimants to itemize out-of-pocket losses, which kept the process workable for incarcerated class members who could not easily gather financial paperwork.
How Claims Were Submitted
Claimants had two choices. They could file online through the settlement website at cdcrdataclassactionsettlement.com, or mail a completed paper form to the administrator at:
Thomas v. California Department of Corrections and Rehabilitation
c/o CPT Group, Inc.
PO Box 19504
Irvine, CA 926235CDCR Data Class Action Settlement. Contact Us
Payments and How to Follow Up Now
Individual payments were prorated based on the number of valid claims filed, so each person’s share depended on total participation. Payments were issued by check or by the method the claimant selected, and the settlement website confirms that distribution to eligible class members is complete.1Thomas v. California Department of Corrections and Rehabilitation. Thomas v. California Department of Corrections and Rehabilitation
If you filed a timely claim or received a postcard notice and have not received your payment, contact the settlement administrator at 1-888-735-6130 or CDCRDataClassActionSettlement@cptgroup.com.6PR Newswire. If Your Protected Health Information or Personally Identifiable Information Was Stored on a California Department of Corrections and Rehabilitation Server on or Before January 2022, You May Be Entitled to a Cash Payment From a Class Action Settlement Have your name, mailing address, and CDCR ID number ready if you have one.