A settlement has been reached in a class action lawsuit against District of Columbia Health Benefit Exchange Authority d/b/a DC Health Link, (“DCHBX” or “Defendant”) concerning an alleged data security incident affecting Defendant which was discovered in or around March 2023 (the “Data Incident”).

The lawsuit is called Lawless v. District of Columbia Health Benefit Exchange Authority, d/b/a DC Health Link, Case No. 2023-CAB-001569 (the “Action”). The lawsuit alleges that the Data Incident potentially exposed certain Private Information of Plaintiff and the members of the putative class.

The Settlement Class includes all individuals identified on the Defendant’s Settlement Class List whose Private Information may have been involved in the Data Incident. It excludes: (1) the Judge presiding over this Action, and members of their direct families; (2) Defendant, and its current or former officers and directors; and (3) Settlement Class Members who submit a valid a Request for Exclusion prior to the Opt-Out Deadline.

Your legal rights are affected whether you act or do not act. Please read this website and the Notice carefully.


Your Legal Rights and Options in this Action
Submit a Claim Form The deadline to submit a Claim Form was May 13, 2025. Claim forms are no longer accepted.
Exclude Yourself from the Settlement The deadline to exclude yourself from the Settlement was May 13, 2025. Requests for Exclusions are no longer accepted.
Object to the Settlement The deadline to object was May 13, 2025. Objections are no longer accepted.
Attend the Final Approval Hearing The Final Approval Hearing was held on June 26, 2025.
Do Nothing You will not get any benefits from the Settlement, and you will give up certain legal rights. You will remain in the Settlement Class and be subject to the Release.