People who were sent notice that their private information may have been affected in the September 2025 Brevard Skin & Cancer Center data incident may qualify for benefits from a proposed class action settlement. The court-authorized website says valid claims must be submitted online or postmarked by November 16, 2026.
The settlement offers one year of medical-data monitoring and a choice between up to $2,500 for documented losses or a $45 alternate cash payment. The defendant denies wrongdoing, the court has not decided who is right, and the settlement still requires final approval. Filing a claim does not guarantee that it will be accepted.
Key facts
- Case: In re Brevard Skin & Cancer Center Data Breach Litigation, Case No. 05-2025-CA-054649-XXCA-BC
- Court: Circuit Court for Brevard County, Florida
- Defendant: DRS Roberts & Bryan PA doing business as Brevard Skin & Cancer Center
- Who may qualify: Living U.S. residents sent notice that their private information may have been affected
- Monitoring benefit: One year of CyEx Medical Shield Complete
- Cash options: Up to $2,500 for documented losses or a one-time $45 alternate cash payment
- Claim deadline: November 16, 2026
- Exclusion and objection deadline: November 2, 2026
- Final approval hearing: November 30, 2026 at 9:00 a.m. Eastern
Action available now Class members must submit a valid claim by November 16 to seek a cash benefit. The official administrator site also provides information about medical-data monitoring.
What is Brevard Skin & Cancer Center?
Brevard Skin & Cancer Center is the business name used by DRS Roberts & Bryan PA, the healthcare organization named as the defendant. The Maine Attorney General’s breach-notice database identifies the organization as a healthcare entity based in Rockledge, Florida.
Patients encounter a dermatology practice by seeking evaluation or treatment for skin conditions and related care. In that setting, the practice may maintain identity, contact, insurance, billing, claims, diagnosis, and clinical information. That is why a cyberattack involving healthcare systems can implicate both ordinary identity data and medical information.
The court-authorized notice identifies DRS Roberts & Bryan PA doing business as Brevard Skin & Cancer Center as “BSCC.” It refers to Patti Myers, Lona Rogers, Linda Cox, and Judy Shapow as the class representatives. Class representatives are the named people who pursue claims on behalf of a larger group with similar alleged injuries.
What happened in the September 2025 incident?
The settlement notice says the case concerns a targeted cyberattack on Brevard Skin & Cancer Center’s computer systems in September 2025. According to the notice, certain files containing private information were accessed.
The notice says the files may have contained names, dates of birth, home addresses, billing and claims information, Social Security numbers, diagnosis and clinical information, phone numbers, email addresses, and health conditions included in Family and Medical Leave Act forms. The Family and Medical Leave Act, often abbreviated FMLA, is a federal law that can involve medical certification when an eligible worker requests protected leave.
The Maine Attorney General’s breach database separately records an external system breach, or hacking, involving Brevard Skin & Cancer Center. It reports written consumer notification on December 26, 2025 and says identity-protection services were offered after the incident.
The lawsuit alleged that the healthcare organization was legally responsible for the incident and resulting risks. Those assertions remain allegations. Brevard Skin & Cancer Center denies doing anything wrong, and the court has not ruled for either side.
A settlement resolves disputed claims without a trial. It does not establish that the defendant violated the law or admit liability.
The case has not been decided on the merits The court authorized notice of the proposed settlement, but it has not found that Brevard Skin & Cancer Center committed wrongdoing.
Who may qualify for the Brevard Skin settlement?
The court defined the settlement class as all living individuals residing in the United States who were sent a notice by the defendant that their private information may have been impacted in the data incident.
This definition has several limits. A person must be living, reside in the United States, and have been sent the defendant’s incident notice. Merely having received care from Brevard Skin & Cancer Center does not by itself establish settlement eligibility.
The notice excludes the defendant’s directors, officers, and agents; governmental entities; the judge assigned to the action; the judge’s immediate family; and court staff. Anyone who validly opts out is also excluded from the settlement class.
The administrator’s records, claim credentials, and court-approved rules control whether a claim is valid. A notice may indicate that the defendant identified a person as potentially affected, but it does not promise a benefit.
People who are unsure whether they are included can contact the settlement administrator through the official site, by email at the address listed there, or by calling the official toll-free number. Class Action Pulse cannot make an individual eligibility determination.
What benefits are available?
The settlement provides medical-data monitoring and a choice between two cash benefits.
One year of medical-data monitoring
All class members are eligible to enroll in one year of CyEx Medical Shield Complete, according to the notice. The service includes monitoring for healthcare insurance identification exposure, medical-record-number exposure, and unauthorized health-savings-account spending.
A medical record number, or MRN, is an identifier a healthcare provider uses to associate records with a patient. A health savings account, or HSA, is a tax-advantaged account some people use for qualified medical expenses.
The notice says the monitoring comes with $1 million in medical identity-theft insurance and access to a fraud-resolution agent if suspicious activity occurs. Enrollment codes were sent to class members by postcard. Anyone who no longer has a code should contact the administrator rather than using an unofficial service.
The settlement monitoring is distinct from the earlier protection services described in the Maine Attorney General filing. Claimants should follow the settlement administrator’s current instructions for the benefit offered under this agreement.
Cash Payment A: documented losses
A class member who incurred actual, documented out-of-pocket losses because of the incident may claim reimbursement of up to $2,500. The notice says eligible losses must have occurred between September 28, 2025 and November 16, 2026.
Examples listed in the notice include losses from identity theft or fraud; fees for credit reports, credit monitoring, or freezing and unfreezing credit; the cost to replace identification; and postage used to contact banks by mail.
The claim requires proof such as bank statements or receipts. A claimant may also submit notes or papers prepared personally to explain other evidence, but the notice says those materials alone are not enough to establish a valid claim. The records should show both the amount and the claimed connection to the incident.
Cash Payment B: alternate cash
Instead of other cash payments, a class member may claim a one-time $45 cash payment. The notice says no proof or explanation is required for this option.
The $45 alternative is a different choice from documented-loss reimbursement. A claimant should not assume that selecting one permits recovery under the other. The official claim form controls how the election must be made.
Two cash paths, not two cash checks The notice offers either documented-loss reimbursement up to $2,500 or a $45 alternate cash payment. Claimants should follow the official form when selecting an option.
How to file a claim
The fastest way to file is through BrevardSkinDataSettlement.com. The official website also links to a printable claim form that may be mailed to the settlement administrator.
Online claims must be submitted by November 16, 2026. Mailed forms, including required supporting documents, must be postmarked no later than the same date.
A documented-loss claimant should retain records showing the expense and its relationship to the incident. An alternate-cash claimant does not need to prove a loss but must still submit a valid, timely form. Medical-monitoring enrollment may require the code sent by postcard or assistance from the administrator.
The administrator’s mailing address is listed on the official site and claim form. There is no fee to submit a settlement claim. Consumers should avoid third-party pages that charge money to file or request unnecessary account passwords.
Submitting a claim does not guarantee approval. The administrator will review whether the claimant is a class member, whether the form was timely and complete, and whether any documented-loss request meets the settlement rules.
What are the exclusion and objection options?
The deadline to exclude yourself from the settlement is November 2, 2026. Exclusion is also called opting out. A person who validly excludes themselves receives no settlement benefit but generally retains the right to pursue their own claim concerning the released issues, subject to applicable law and deadlines.
An exclusion request must follow the instructions in the notice. Those instructions include identifying the litigation, providing contact information and a personal signature, and clearly stating the request not to participate.
A class member who remains in the settlement may object by telling the court why the settlement should not be approved. Objections are also due November 2, 2026 and must satisfy detailed filing and service requirements in the notice.
Objecting is not the same as opting out. An objector remains in the class and may still file a claim. A person who opts out is no longer part of the settlement and cannot object to it.
Doing nothing means receiving no settlement benefit. Unless a person opts out, the notice says they will still give up the right to pursue the released claims if the settlement becomes final.
Earlier rights deadline The November 2 exclusion and objection deadline arrives two weeks before the November 16 claim deadline. Each option has different consequences.
What happens next?
The court scheduled the final approval hearing for November 30, 2026 at 9:00 a.m. Eastern. The official homepage currently says the hearing will be conducted by Zoom, while the long-form notice says it may occur at the Brevard County courthouse or by Zoom at the court’s discretion. Class members should rely on the current administrator site for any update.
At the hearing, the court will decide whether to approve the settlement. It will also consider requests for attorneys’ fees, litigation costs, and service awards, as well as properly submitted objections.
Settlement payments will not be distributed unless the court grants final approval. Appeals may delay benefits, and the current materials do not provide a guaranteed distribution date.
The settlement website, current claim form, long-form notice, settlement agreement, and court orders contain the controlling terms. This article is general information, not legal advice, and does not guarantee eligibility, approval, or payment.