Twin Cities Pain Clinic Data Breach Settlement

Twin Cities Pain Clinic patients may claim. This settlement resolves claims over a business email compromise that targeted a single TCPC employee email account, an incident the Settlement Agreement dates to on or about July 9, 2025. Two things about the money are worth getting straight before you file. First, the $4,500 headline covers only one narrow tier. Cash Payment A pays up to $4,500 for extraordinary losses — losses from actual identity theft or fraud — and up to $450 for ordinary out-of-pocket expenses like credit reports, credit freezes, replacing IDs and postage. For most people the real ceiling is $450, and TCPC's notice says its investigation has not uncovered any instances of fraud or misuse, which puts the $4,500 tier out of reach for nearly everyone. Second, the credit monitoring stacks but the cash options do not. Every class member can claim two years of CyEx Financial Shield Complete monitoring in addition to cash, and it does not come out of the cash money. The two cash options are alternatives: Cash Payment A (documented) or Cash Payment B (a flat $55, no receipts needed) — not both. The $55 is an estimate rather than a promise because all cash payments share a $385,000 aggregate cap and are cut pro rata if valid claims exceed it. The cap covers cash only — monitoring is capped separately at $21,000 of TCPC's cost, and TCPC's total liability for everything is capped at $655,500. Unusually, attorneys' fees of up to $220,000, the service awards and the administration costs are all paid by TCPC separately and do not reduce the $385,000. Two filing traps. Online filing requires the Login ID and PIN from your notice, though the printable Claim Form asks for the Login ID only “if known,” so paper and email are the way in without it. And the official documents contradict each other on the paper deadline: the Notice, the FAQ and the Settlement Agreement say a mailed form must be postmarked by November 9, 2026, while the printable Claim Form says claims must be received by that date. Do not mail this one at the last minute. All three deadlines — claim, opt out and object — fall on November 9, 2026.

Do I Qualify?

You may be eligible if:

• Your Private Information was accessed or acquired in the July 2025 Twin Cities Pain Clinic Data Incident. That is the entire class definition the Court approved: “all individuals in the United States who had Private Information accessed and/or acquired as a result of the Data Incident”
• In practice, TCPC's records say so. TCPC gives the administrator a Class List, and the notice tells recipients that “TCPC's records indicate that you are a Class Member.” Notice mailing began September 10, 2026, by email first and by double postcard with a tear-off Claim Form to anyone without a valid email address on file. If you are unsure, the administrator will check for free at info@TCPCDataSettlement.com or (866) 605-2067
• It has to be THIS clinic. Twin Cities Pain Clinic is one pain management center, with its principal place of business at 7235 Ohms Lane in Edina, Minnesota. Having been a patient at a different pain clinic that had its own breach does not qualify you here
• Any US state. The class is national on its face and the benefits do not vary by state, though the case is in Minnesota state court and most class members will be Minnesota-area patients
• You do NOT need to have lost any money. The flat $55 Cash Payment B asks for no receipts and no explanation, and the two years of credit monitoring ask for none either. Documentation is needed only for Cash Payment A
• You do NOT have to give up the credit monitoring to take cash. Two years of CyEx Financial Shield Complete may be claimed in addition to either cash option, and it does not reduce the cash
• But you DO have to choose between the two cash options. Cash Payment A for documented losses and Cash Payment B for the flat $55 are alternatives — the Claim Form says do not claim one if you are claiming the other
• You are not in an excluded group. Out are TCPC and its officers, directors and related companies, governmental entities, the Judge in the case along with the Judge's family and staff, and anyone who validly opts out
• You file a valid Claim Form by November 9, 2026 — online by 11:59 p.m. Eastern Time, or on paper. The Notice and Settlement Agreement say a mailed form must be postmarked by that date, but the printable Claim Form says claims must be RECEIVED by it, so do not cut it close. November 9 is also the last day to opt out or object

There are two different gates here and they are easy to confuse. Getting into the online form. The claim form at TCPCDataSettlement.com opens on a login screen that asks for the Login ID and PIN printed on the notice, and it will not open without them — which makes this an ID-gated settlement even for the flat $55, which itself asks for no receipts at all. The gate is not absolute. The printable Claim Form asks for the Login ID only “if known”, so someone who was notified but has lost the code can download the form and submit it by mail, or email a scanned image of the signed form to info@TCPCDataSettlement.com. The administrator will also re-issue a Login ID and PIN if you email your full name and mailing address, or call (866) 605-2067. Class members without a valid email address on file were sent a double postcard notice carrying a tear-off Claim Form. Proving each benefit. This splits cleanly. The two years of CyEx Financial Shield Complete credit monitoring require no documentation — every class member may elect it. Cash Payment B, the flat $55, asks for no receipts and no explanation whatsoever. Only Cash Payment A needs records. What counts for Cash Payment A. Reasonable documentation means records contemporaneously generated or prepared by a third party or by you supporting expenses actually paid — the Settlement Agreement's non-exhaustive examples are telephone records, correspondence including emails, and receipts, and the website adds bank statements. Personal certifications, declarations and affidavits do not count as reasonable documentation on their own, though they may be attached to add clarification or context to other proof. You must elect Cash Payment A on the Claim Form and attest to the losses under penalty of perjury, the loss must be supported by clear evidence that it was caused by the Data Incident, and it must have occurred between July 9, 2025 and November 9, 2026. The mitigation requirement most write-ups skip. The Settlement Agreement also requires that you made reasonable efforts to avoid or seek reimbursement for the loss, including exhausting all available credit monitoring insurance and identity theft insurance. Expenses already reimbursed by another source cannot be claimed, nothing is paid for emotional distress, personal or bodily injury or punitive damages, and self-purchased monitoring cannot be claimed where substantially identical complimentary monitoring was offered — although monitoring that provided protections the free product did not can be claimed as an ordinary loss. Which tier your proof puts you in. Documentation of actual identity theft or fraud reaches the extraordinary tier, up to $4,500. Documentation of ordinary out-of-pocket expenses reaches only the ordinary tier, up to $450. If a documented claim falls short. Under the Settlement Agreement, a Cash Payment A claim that lacks reasonable documentation, or is rejected for any reason, and is not cured, is treated as if the class member had elected Cash Payment B — the flat $55 — rather than being thrown out. Filing for documented losses and failing therefore costs you the paperwork, not the payment.

What Happened?

Twin Cities Pain Clinic is a pain management center that treats patients for bodily injuries and chronic pain, with its principal place of business at 7235 Ohms Lane in the City of Edina, County of Hennepin, Minnesota. As part of its business it maintains the private information of its patients.

On or about July 9, 2025, TCPC discovered the Data Incident: a business email compromise that targeted one TCPC employee email account. The Settlement Agreement defines the Data Incident as the cybersecurity incident resulting in the potential unauthorized access to or acquisition of Private Information that took place on or about July 9, 2025.

Files that may have been accessed could have contained names, dates of birth, mailing addresses, email addresses, phone numbers, financial account information, health insurance information, Social Security numbers, medical records numbers, treatment notes and provider information. Not every class member's files contained every category. TCPC's investigation has not uncovered any instances of fraud or misuse of that information.

The consolidated case is In re Twin Cities Pain Clinic Data Breach Litigation, Case No. 27-CV-25-16549, in the District Court of Hennepin County, Minnesota, Fourth Judicial District. The complaint asserted negligence, negligence per se, breach of contract, breach of implied contract, unjust enrichment, breach of fiduciary duty, breach of confidence, and violations of the Minnesota Uniform Deceptive Trade Practice Act and the Minnesota Health Records Act. The Class Representatives are Diane Rezack, Lawrence Burns, Edward Severson, Elizabeth Timmerman and Mark Gore. The Court appointed Christopher P. Renz of Chestnut Cambronne PA and Raina C. Borrelli of Strauss Borrelli PLLC as Class Counsel. TCPC is represented by Jessica L. Copeland of Bond, Schoeneck & King, PLLC.

No court has found TCPC liable or at fault, and TCPC does not acknowledge, admit to or concede any liability or wrongdoing. The parties agreed to settle to avoid the costs, risks, disruptions and uncertainties of continuing the litigation. As part of the settlement TCPC also agreed to provide a confidential declaration confirming that cybersecurity enhancements or changes have been made.

This is a claims-made settlement paid by TCPC rather than a common fund held for the class. Cash payments to class members are capped at $385,000 in the aggregate and are reduced pro rata if valid claims exceed that. TCPC's cost for the credit monitoring is capped separately at $21,000, Settlement Administration Costs at $17,000, attorneys' fees and costs at $220,000, and service awards at $12,500 in the aggregate, with TCPC's total liability for all of it capped at $655,500. Simpluris is the Settlement Administrator.

The Final Approval Hearing is set for January 20, 2027 at 1:30 p.m. Central Time by Zoom, where the Court will decide whether to approve the settlement, how Class Counsel is paid, whether to grant the service awards, and will consider any objections. The notice warns the date and time may change without further notice. Benefits are distributed only if the Court grants final approval and after any appeals are resolved — no payment date has been announced.

How to File Your Claim

1. FILE ONLINE AT TCPCDATASETTLEMENT.COM — click Submit a Claim. The online form opens on a login screen that asks for the Login ID and PIN printed on the notice sent to you, and it will not open without them. If you cannot find your Login ID and PIN, email info@TCPCDataSettlement.com with your full name and mailing address and ask for them, or call (866) 605-2067 toll free, 24/7
2. NO LOGIN ID? YOU CAN STILL FILE ON PAPER. The printable Claim Form asks for the Login ID only “if known,” so a class member who was notified but has lost the code can download the form from the settlement website, fill it in, sign it and send it in
3. WATCH THE PAPER DEADLINE — THE OFFICIAL DOCUMENTS DISAGREE WITH EACH OTHER. The court-authorized Notice, the website FAQ and the Settlement Agreement all say a mailed Claim Form must be POSTMARKED by November 9, 2026. The printable Claim Form itself says twice that “Claims must be received by November 9, 2026” and that paper forms must be mailed “so that they are received by the Settlement Administrator no later than November 9, 2026.” Three official sources against one favor postmarked, but nobody should bet a claim on it — file online, or email the form, or mail it far enough ahead that it arrives by November 9
4. EMAIL IS THE THIRD ROUTE. The claim-form login page and the Claim Form both say an electronic image of the completed, signed Claim Form can be emailed to info@TCPCDataSettlement.com by November 9, 2026 — that sidesteps both the Login ID gate and the postmark-versus-received ambiguity
5. CLAIM THE CREDIT MONITORING — IT IS SEPARATE FROM THE CASH AND IT DOES NOT REDUCE IT. Every class member may elect two years of CyEx Financial Shield Complete in addition to whichever cash option they pick. It sits outside the $385,000 cash cap. Activation codes are sent by EMAIL after final approval, so give the administrator an email address you actually read
6. THEN PICK ONE CASH OPTION — YOU CANNOT HAVE BOTH. Cash Payment A (documented losses) and Cash Payment B (flat $55) are alternatives. The Claim Form says in capitals “DO NOT CLAIM THIS BENEFIT IF YOU ARE CLAIMING A PAYMENT FROM SECTION IV”
7. IF YOU CLAIM CASH PAYMENT A, KNOW WHICH TIER YOU ARE IN. Up to $4,500 is available only for extraordinary losses, meaning losses from actual identity theft or fraud. Ordinary out-of-pocket expenses — credit reports, credit freezes and unfreezes, replacing IDs, postage to contact banks — are capped at $450, one tenth of the headline figure
8. DOCUMENT IT WITH THIRD-PARTY RECORDS. Attach bank statements, receipts, telephone records or correspondence including emails, contemporaneously generated, showing the amount and tying it to the Data Incident. The Settlement Agreement is explicit that personal certifications, declarations or affidavits are not reasonable documentation on their own, though they may be included to add context to other proof. Losses must have occurred between July 9, 2025 and November 9, 2026, and you must have made reasonable efforts to avoid or seek reimbursement for the loss, including exhausting any credit monitoring or identity theft insurance available to you
9. A REJECTED DOCUMENTED CLAIM IS NOT THROWN OUT. Under the Settlement Agreement, if a Cash Payment A claim lacks reasonable documentation or is rejected for any reason and is not cured, the claim is treated as if the class member had elected Cash Payment B, the flat $55
10. ALL THREE DEADLINES ARE THE SAME DAY, NOVEMBER 9, 2026 — claims, opting out and objecting. Online claims are due by 11:59 p.m. Eastern Time. Opting out is the only way to keep the right to sue TCPC separately, and you cannot object if you opt out. A class member who objects may still file a claim
11. MAIL PAPER CLAIMS TO TCPC Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958. Requests for Exclusion go to the same box marked ATTN: Exclusion Request. Objections are filed with the Clerk of the Court, 300 S 6th Street, Minneapolis, MN 55487, with copies to the administrator, Class Counsel and defense counsel
12. MAKE SURE YOUR ADDRESS AND BANK DETAILS ARE RIGHT. Payments go out by electronic payment or paper check, and the Settlement Agreement says that where the administrator cannot deliver a payment because of incorrect or incomplete information the class member forfeits it and the money is returned to TCPC — there is no cy pres backstop here
13. QUESTIONS: the Settlement Administrator, Simpluris, at info@TCPCDataSettlement.com or (866) 605-2067 toll free, 24/7
14. Visit the official claim form: https://tcpcdatasettlement.com/

How Much Will I Actually Get?

THE HEADLINE $4,500 IS NOT THE CAP MOST PEOPLE ARE UNDER. Read the two documented-loss tiers before anything else. Cash Payment A pays up to $4,500 only for extraordinary losses, which the settlement defines as losses due to identity theft or fraud, and up to $450 for ordinary losses, meaning ordinary out-of-pocket expenses such as credit reports, credit monitoring beyond what was offered free, freezing and unfreezing credit, replacing IDs and postage to contact banks by mail. Those are separate ceilings, not one. Anyone whose only costs were the usual post-breach housekeeping is working toward $450, not $4,500. And TCPC's notice states that its investigation has not uncovered any instances of fraud or misuse of the information, so the $4,500 tier is out of reach for nearly everyone. HOW THE BENEFITS COMBINE: the credit monitoring stacks, the two cash options do not. Every class member may claim two years of CyEx Financial Shield Complete credit monitoring in addition to a cash payment — real-time monitoring of the credit file with one credit bureau, at least $1 million of identity theft and fraud protection insurance, and access to fraud resolution agents. But the cash side is strictly either-or: Cash Payment A (documented losses) OR Cash Payment B (flat $55) — not both. The printable Claim Form says it in capitals: DO NOT CLAIM THIS BENEFIT IF YOU ARE CLAIMING A PAYMENT FROM SECTION IV. Cash Payment B asks for no receipts and no explanation of any kind. WHY $55 IS AN ESTIMATE THAT CAN FALL. The Settlement Agreement fixes Cash Payment B at $55.00, and the website calls it “expected to be $55.00.” Both are true because of one provision: all cash payments share a $385,000 aggregate cap, and if the total of valid cash claims exceeds it, every cash payment — flat payments and documented-loss payments alike — is reduced pro rata so the total stays at $385,000. There is no stated floor. A heavy claim rate shrinks the $55. WHICH CAPS COVER WHAT, BECAUSE NOT ONE OF THEM COVERS THE WHOLE SETTLEMENT. The $385,000 applies to cash payments only and expressly excludes credit monitoring. TCPC's total cost for the credit monitoring is separately capped at $21,000 in the aggregate. TCPC's total liability for everything — cash, monitoring, service awards, attorneys' fees and administration — is capped at $655,500. ONE PIECE OF GOOD NEWS THAT IS THE OPPOSITE OF THE USUAL. This is not a common fund that lawyers are paid out of. TCPC pays the fees and costs separately, so they do not reduce the $385,000 available for cash. Class Counsel will ask the Court to approve up to $220,000 in attorneys' fees and litigation costs and service awards of $2,500 for each of the five Class Representatives, not to exceed $12,500 in the aggregate, and the Settlement Agreement makes TCPC solely responsible for Settlement Administration Costs, capped at $17,000. All of it is paid by TCPC on top of the class benefits. WHAT CASH PAYMENT A WILL NOT COVER. No payment is made for emotional distress, personal or bodily injury, or punitive damages. You cannot claim an expense already reimbursed by another source, and you cannot claim self-purchased credit monitoring where substantially identical complimentary monitoring was offered to you — though monitoring that provided protections the free product did not can be claimed as an ordinary loss. NOTHING IS PAID UNTIL THE COURT APPROVES. The Final Approval Hearing is set for January 20, 2027 at 1:30 p.m. Central Time by Zoom, and benefits are distributed only if the Court grants final approval and after any appeals are resolved. No payment date has been announced.

Last reviewed: September 25, 2026 | Information verified from court records and official settlement documents.

Frequently Asked Questions