← All Open Settlements
Data Breach Employment No Proof Required

Inotiv Data Breach Settlement

Settlement Amount
$45 or up to $4,580
Claim Deadline
December 2, 2026
Total Fund
$45 or up to $4,580
File on the official site → inotivdatabreachsettlement.com

Opens the court-appointed administrator's site in a new tab.

  • ✓ Official court-appointed administrator: inotivdatabreachsettlement.com
  • ✓ Free to file. SuitAlert never collects your claim information and never asks for an SSN.
  • ✓ Verified against the court docket September 18, 2026
  • We don't collect claim information or sell leads to law firms. This site is paid for by ads.

The Inotiv Data Breach Settlement is a closed-list settlement, and that is the first thing to check before anything else. The Court defined the class as people Inotiv itself mailed a data breach notice to — nothing more. Being an Inotiv customer, a research client, a patient or a site visitor does not put you in it. Reporting on Inotiv's regulatory filings put the notified group at roughly 9,500 people, described as current and former employees, their family members, and others who had dealings with Inotiv or companies it acquired. Practically, the online claim form is gated on the LoginID and PIN printed on that mailed notice, so if no notice ever arrived, this settlement is almost certainly not yours. For those who are on the list, the benefits are part stacked and part either-or. Every class member may claim two years of CyEx Medical Shield Complete identity theft protection AND a cash payment — the monitoring stacks on top and is not forfeited by any cash choice. The choice is only between the cash routes: $45 with no documentation at all, or documented losses and lost time that can reach $4,580. And $4,580 is not one cap — it is $500 for out-of-pocket expenses plus $4,000 for identity-theft losses plus $80 for lost time, three separate ceilings that do not lend to each other. $600 of receipts still pays only $500. One timing trap worth knowing before you gather paperwork: claimable losses had to occur between August 5, 2025 and September 10, 2026, and that window has already closed. Claims are due December 2, 2026, but opting out or objecting closes a month earlier, on November 2, 2026.

Do I Qualify?

You may be eligible if:

There are two separate gates here: getting into the form, and proving your claim. Getting in. This is a proof-required settlement even for the no-documentation $45 tier, because the online Claim Form opens only with the LoginID and PIN printed on the notice Inotiv mailed you, and the login screen will not proceed without both. That is a genuine barrier rather than a formality — but it is not absolute. The settlement website states that a class member who cannot locate the credentials can email info@InotivDataBreachSettlement.com with their full name and mailing address to have them re-issued, and a printable Claim Form can be downloaded and mailed instead, with its Login ID field marked "if known" — so paper filing is the route for someone who no longer has the notice. The administrator can also be reached at (877) 723-7093. Proving the claim. This depends entirely on which cash route you take. For the $45 Alternative Cash Payment, nothing at all — the Notice states you do not have to provide any proof or explanation, and the form needs only the login and a signature. For Ordinary Losses up to $500 and Extraordinary Losses up to $4,000, you need third-party documentation such as receipts or statements, itemised on the Claim Form with a description and an amount for each item. Self-prepared notes may explain or support other proof, but the Notice is explicit that notes alone are not enough to make a valid claim. For Lost Time up to $80, no receipts are needed — a short written description of how you spent the time plus a signed attestation that it was reasonably related to responding to the breach. Two conditions bind both documented loss tiers: the loss must have occurred between August 5, 2025 and September 10, 2026, and it cannot already have been reimbursed by a third party. The claim-form gate for the monitoring is the same one. The two years of CyEx Medical Shield Complete requires no documentation whatsoever, but it still requires a filed Claim Form — nothing arrives automatically.

File your claim through the official settlement website at inotivdatabreachsettlement.com before December 2, 2026.

File on the official site → inotivdatabreachsettlement.com

Opens the court-appointed administrator's site in a new tab.

What Happened?

A cyberattack hit Inotiv's computer systems in August 2025. Certain files containing private information may have been compromised, and the Notice states those files may have held personal information such as Social Security numbers, dates of birth and financial information.

Inotiv Inc. is a West Lafayette, Indiana contract research organisation serving the pharmaceutical and biotechnology industries. Reporting on the company's regulatory breach notifications put the number of people notified at roughly 9,500, and described them as current and former employees, family members of those employees, and other individuals who had dealings with Inotiv or with companies it acquired — which is why this settlement reads much more like an employee-side breach than a consumer one.

The case took an unusual route. It began in federal court in August 2025 and was consolidated there, and the defence moved to dismiss in part on the ground that the plaintiffs lacked standing to bring certain claims in federal court. That motion was never ruled on. After a March 2026 mediation and further negotiation, the parties agreed to dismiss the federal case and refile in Indiana state court specifically to take the federal standing question off the table. The settlement was filed there in May 2026.

The case is Doyal v. Inotiv Inc., Cause No. 49D01-2604-CE-020713, in the Superior Court for Marion County, Indiana. The Class Representatives are Laramie Doyal, Emily Merrell and Stefanie Wagner, and the Court appointed Lynn A. Toops and Amina A. Thomas of CohenMalad, LLP as Class Counsel. Simpluris is administering the settlement.

The Marion Superior Court authorised notice to the class, notification mailing went out on September 3, 2026, and a final approval hearing is set for December 3, 2026 at 11:45 a.m. Eastern Time by videoconference — the day after claims close. Inotiv denies that it did anything wrong and the Court has not decided who is right. No final approval order has been entered and no payment date has been announced.

How to File Your Claim

  1. File online at inotivdatabreachsettlement.com/form/claim using the LoginID and PIN printed on the notice Inotiv mailed you — the online form will not open without both
  2. NO LOGINID AND PIN? The settlement website states that a class member who cannot locate them can email info@InotivDataBreachSettlement.com with their full name and mailing address to have them re-issued, or call the administrator toll-free at (877) 723-7093
  3. PREFER PAPER? Download the printable Claim Form from the settlement website, complete and sign it, attach supporting documentation for any documented tier, and mail it to Inotiv Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799 — postmarked no later than December 2, 2026
  4. TICK THE MONITORING BOX FIRST: the two years of CyEx Medical Shield Complete does not arrive automatically and is not included with your cash — you have to claim it on the same form, and every class member is eligible for it no matter which cash option you pick
  5. THEN DECIDE YOUR CASH ROUTE: either check the box for the $45 Alternative Cash Payment, or complete the Ordinary Loss, Extraordinary Loss and Lost Time sections with documentation attached. You cannot do both — the $45 is taken instead of the other three
  6. Pick a payment method on the form as well: PayPal, Venmo, Zelle, a virtual prepaid card, or a physical cheque mailed to the address on your claim
  7. Only one Claim Form per person is accepted, online or paper
  8. WATCH THE EARLIER DATE: the claim deadline is December 2, 2026, but the deadline to exclude yourself or object is a full month earlier, November 2, 2026
  9. Visit the official claim form: https://inotivdatabreachsettlement.com/

How Much Will I Actually Get?

The structure is a hybrid and the headline "$4,580" is not a single cap on anything — reading either point wrongly costs you money. There are two layers. LAYER ONE, ADDITIVE FOR EVERYONE: two years of CyEx Medical Shield Complete identity theft protection, carrying $1 million of medical identity theft insurance and monitoring for healthcare insurance ID exposure, Medical Record Number (MRN) exposure and unauthorized Health Savings Account (HSA) spending, with access to a fraud resolution agent. The Notice states that ALL Class Members are eligible to enroll, and the Claim Form login page states that all class members may claim the monitoring AND one or more of the cash options. It stacks on top of whatever cash you take and it does not reduce your cash. LAYER TWO, A CHOICE BETWEEN TWO CASH ROUTES. ROUTE A — DOCUMENTED, three separate tiers that stack with each other, each with its OWN ceiling: (1) Ordinary Losses, actual documented out-of-pocket expenses caused by the breach, up to $500 — credit report, credit monitoring and credit freeze/unfreeze fees, the cost of replacing IDs, postage to contact banks by mail; (2) Extraordinary Losses, money lost to identity theft or fraud, up to $4,000, where the loss was more likely than not caused by the breach, is not already covered by the ordinary loss tier, and where you tried to prevent or recover it including by using insurance you already have; (3) Lost Time, up to four hours at $20 an hour for a maximum of $80, needing a short written description and a signed attestation rather than receipts. $500 + $4,000 + $80 is where $4,580 comes from — it is arithmetic, not a cap. THE CAPS BIND TIER BY TIER: $600 of documented out-of-pocket expenses still recovers only $500, even though $600 is nowhere near $4,580, because the $4,000 ceiling belongs to the identity-theft tier alone and cannot absorb an ordinary-loss overflow. ROUTE B — ALTERNATIVE CASH PAYMENT, $45: a one-time payment with no proof or explanation required. The Notice says it is claimed "instead of any other payments," meaning instead of the three cash tiers above. It does NOT cost you the monitoring. TWO LIMITS BIND BOTH DOCUMENTED TIERS: the losses must have occurred between August 5, 2025 and September 10, 2026 — a window that has already closed, so a loss you suffer from today onward is not claimable — and you cannot claim anything already reimbursed by a third party. Self-prepared notes may explain or support other proof, but the Notice states plainly that notes alone are not enough to make a valid claim. A USEFUL FALLBACK: under the Settlement Agreement, a documented claim denied for any reason other than not being a class member, or approved for less than $45, is treated instead as a valid claim for the $45 Alternative Cash Payment. NO COMMON FUND: there is no aggregate settlement amount, no per-claim cap beyond the tier limits and no pro rata reduction described in the Notice. Inotiv pays valid claims as they are approved. Class Counsel will ask the Court to approve $275,000 in fees and costs plus $2,000 service awards for each class representative, and the Notice states Inotiv pays those separately — because there is no common fund, neither reduces what class members receive.

Last reviewed: September 18, 2026 | Information verified from court records and official settlement documents.

Related Settlements

Physicians' Primary Care of Southwest Florida Data Breach Settlement — Not disclosed — 11 days left Regional Urology & Ochsner LSU Health Data Breach Settlement — Amount varies — 59 days left Fujifilm Diosynth Data Breach Settlement — Undisclosed fund — 68 days left

Frequently Asked Questions

I have heard of Inotiv but never got a notice. Can I still file?
Almost certainly not. The Court defined the class as "All persons in the United States who were sent a notice by Defendant informing them that their Private Information was compromised in the Data Breach." Receiving that mailed notice is the whole test. Being an Inotiv customer, a pharmaceutical or biotech client, a research subject or a website visitor does not make you a class member, and the notified group — reported at roughly 9,500 people — was mainly current and former employees, their family members, and others who had dealings with Inotiv or companies it acquired. The practical gate matches the legal one: the online claim form opens only with the LoginID and PIN printed on that notice. If you think you should be on the list but cannot find your notice, email info@InotivDataBreachSettlement.com with your full name and mailing address, or call (877) 723-7093 — the administrator checks against the Settlement Class List Inotiv supplied.
If I take the $45, do I lose the two years of identity theft protection?
No, and this is the single most misread line in this settlement. The Notice describes the $45 Alternative Cash Payment as claimed "instead of any other payments," which reads at first glance as though it cancels everything else. It does not. The Notice lists "Identity Theft Protection Services" under its own heading, separate from "Cash Payments," and states that ALL Class Members are eligible to enroll in two years of CyEx Medical Shield Complete. The settlement's own Claim Form login page puts it beyond doubt: all Settlement Class Members may claim the monitoring AND one or more of the cash payment options. So "any other payments" means the three cash tiers — ordinary losses, extraordinary losses and lost time — not the monitoring. Tick the monitoring box whatever cash route you choose; it costs nothing and does not reduce your payment.
Does the $4,580 cap mean I can claim $4,580 of out-of-pocket expenses?
No. $4,580 is not a cap on anything — it is the sum of three separate ceilings that do not lend to one another: $500 for Ordinary Losses (documented out-of-pocket expenses), $4,000 for Extraordinary Losses (money lost to identity theft or fraud), and $80 for Lost Time (four hours at $20). The $4,000 belongs to the identity-theft tier alone. If you have $600 of documented out-of-pocket expenses and no identity theft, you recover $500, not $600 — the ordinary-loss ceiling binds even though your total is far below $4,580. Only a class member who maxes out all three tiers sees $4,580, and that requires actual fraud losses of $4,000 backed by third-party documentation.
My losses happened after September 10, 2026. Can I claim them?
No. Both documented cash tiers require that the loss occurred between August 5, 2025 and September 10, 2026, and that window has already closed — it shut before the claim deadline, not with it. This catches people out because claims remain open until December 2, 2026, so it is easy to assume expenses incurred while filing still count. They do not. A loss falling outside the window cannot be claimed under Ordinary or Extraordinary Losses no matter how well documented it is. You can still claim the $45 Alternative Cash Payment and the two years of monitoring, neither of which depends on the loss window at all.
Should I take the $45 or file for documented losses?
The $45 Alternative Cash Payment requires no proof or explanation — just the login and a signature. The documented route can reach $4,580 but is three separate showings, two of which need third-party documentation such as receipts or statements, with losses confined to the August 5, 2025 to September 10, 2026 window and not already reimbursed by anyone else. If your documented expenses come to less than $45, or you have no receipts, the flat payment is the practical choice. There is also a safety net worth knowing about: under the Settlement Agreement, a documented claim that is denied for any reason other than not being a class member, or approved for less than $45, is treated instead as a valid claim for the $45 Alternative Cash Payment. Note that Lost Time, capped at $80, needs only a written description and a signed attestation rather than receipts — but it sits inside the documented route, so claiming it means giving up the $45.
What are the deadlines, and why is there more than one?
Three dates matter and they are a month apart. November 2, 2026 is the deadline both to exclude yourself (opt out) and to object — a Request for Exclusion must be submitted or postmarked by then, and an objection must be filed with the Clerk of Court by then with a copy to the Settlement Administrator. December 2, 2026 is the claim deadline: online submissions must be completed by that date and mailed Claim Forms, including supporting documentation, must be postmarked no later than it. December 3, 2026 is the final approval hearing, at 11:45 a.m. Eastern Time by videoconference — the day after claims close. Objecting and excluding are mutually exclusive, since a class member who opts out is no longer affected by the settlement, but you can object and still file a claim.
Do attorneys' fees come out of class members' payments?
No. Class Counsel will ask the Court to approve $275,000 in attorneys' fees and litigation costs, plus service awards of $2,000 for each class representative, and the Notice states that Inotiv pays both. There is no common settlement fund for those amounts to be carved out of — Inotiv pays valid claims as they are approved and pays administration costs separately — so neither reduces what class members receive. There is correspondingly no pro rata reduction described in the Notice.
How are payments sent, and when?
The Claim Form asks you to select one payment method: PayPal, Venmo, Zelle, a virtual prepaid card, or a physical cheque mailed to the address on your claim. Digital options ask for the email address or phone number tied to that account if it differs from the one you entered, so it is worth deciding before you start. On timing, the Notice states payments are distributed only if the Court grants final approval and after any appeals are resolved, and that it is not known whether appeals will be filed or how long they would take. No payment date has been announced. Under the Settlement Agreement the administrator mails payments within thirty days of the settlement becoming effective or within thirty days of a claim being approved, whichever is later.
What happens if I do nothing?
You get nothing and you still give up your claims. A class member who does not exclude themselves is bound by the release in Section VIII of the Settlement Agreement, which covers claims arising out of or relating to the data breach, known or unknown, and extends to Inotiv's parents, subsidiaries, affiliates, directors, officers, employees and insurers. Doing nothing means you receive no monitoring and no cash but lose the right to sue — which makes it the worst of the available options. Filing a Claim Form is the only route to any benefit, including the free monitoring. Excluding yourself is the only way to keep the right to sue on your own, and that has to be done by November 2, 2026.

New settlements, once a week. Deadlines only — no filler.