Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Last Update: 08/01/2026 at 1:00 PM EST
Healthcare Data Breach Settlements
Coverage from Bloomberg Law, The HIPAA Journal, and others
Articles
83
Active Days
287
The Topic
Healthcare providers, diagnostic laboratories, technology vendors, and credit-reporting services are resolving lawsuits tied to unauthorized access to sensitive personal, financial, and medical information. The settlements commonly provide cash payments, reimbursement for documented losses, credit monitoring, identity-theft protection, or medical monitoring, while defendants generally deny wrongdoing. The pattern highlights the continuing legal and financial consequences of breaches affecting patients and customers through both direct systems and third-party service providers.
First Article: 10/15/25
Latest Article: 07/28/26
Summary
- Several 2026 settlements address breaches that occurred in 2024 or 2025, extending the consequences of cyber incidents well beyond initial notification.
- Sensitive data at issue includes Social Security numbers, medical diagnoses and treatment details, insurance information, dates of birth, addresses, and account credentials.
- Third-party vendors can expose information belonging to the customers or patients of larger healthcare organizations, as seen in the Serviceaide-Catholic Health matter.
- Settlement structures vary from documented-loss reimbursement to capped or pro rata cash payments, credit monitoring, identity-theft insurance, and medical monitoring.
- The reported settlements range from approximately $350,000 to $17.5 million and involve affected populations from thousands to millions of people.
- Most matters remain allegations resolved through settlement, with defendants not admitting liability or wrongdoing.
History
The story now includes additional 2026 settlement cases and named defendants, broadening the litigation pattern beyond the earlier healthcare-vendor focus. It also sharpens the scale and remediation details, including a much larger 700Credit settlement and a wider mix of consumer data and monitoring remedies.
The story broadened from recurring healthcare breach settlements to a wider set of U.S. class actions involving technology and laboratory vendors, with clearer settlement-size details and ongoing approval conditions. A new high-dollar 700Credit settlement and additional named defendants make the litigation landscape more concrete and expansive.
Featured
07-20-2026
Laboratory Services Cooperative agreed July 17 to a proposed consent decree settlement in the Western District of Washington over an April 2025 cyberattack affecting patient medical information.
06-04-2026
700Credit LLC agreed to a $17.5 million class action settlement over a breach using compromised 700Dealer.com credentials filed in Michigan on Wednesday.
07-07-2026
Calibrated Healthcare Systems settled a consolidated class action in the Central District of California over a February 2024 patient data breach with OCR-listed protected health information.
Timeline: 287 Days
Hover over any logo to see coverage summary, click for full article.
Additional Articles
⭐⭐⭐⭐⭐
Serviceaide, Inc. agreed in 2025 to a $1.8 million settlement for a 2024 breach exposing Catholic Health patient protected health information in New York.
Oglethorpe, Inc. obtained March 10, 2026 preliminary approval for a class action settlement covering a June 2025 cyberattack involving patient and employee data in Florida.
FMC Services, LLC reached a preliminary-approved $2.15 million class action settlement for a July 26, 2022 data breach affecting Amarillo, Texas patients.
Marlboro-Chesterfield Pathology, P.C. received preliminary approval for a 2025 breach class settlement in North Carolina, offering cash claims and one year of credit monitoring.
After a January 2024 Omni Healthcare cyberattack, a class action settlement in the U.S. provides up to $5,000 compensation and three years of medical identity monitoring.
System Pavers LLC agreed in 2024 to resolve a data-breach class action involving Social Security numbers between September 20 and October 4, 2024.
Serviceaide Inc. reached a 1.8 million dollar settlement in 2025 over a 2024 breach affecting Catholic Health patients, reported at more than 400,000 impacted.
Physicians Primary Care of Southwest Florida agreed to a proposed class-action settlement after a September 2024 cyberattack exposed patient data and Social Security numbers, pending final approval in 2026.
Rebound Orthopedics & Neurosurgery, after a February 2024 cyberattack, settled a Clark County Superior Court class action over alleged exposure of patients personal and medical data.
Labcorp agreed to pay $35 million to settle class action claims tied to the 2018 AMCA vendor hack, with a final fairness hearing set for Aug. 20 in New Jersey federal court.
MCNA Dental and Healthplex reached a proposed class action settlement in Florida federal court after a 2023 LockBit ransomware data theft affected nearly 9 million people.
New York state court scheduled a November 12, 2026 approval hearing for a proposed settlement after an April 2024 Equinox data breach.
ApolloMD Business Services agreed to a $4.02 million settlement after a May 2025 Qilin-linked ransomware breach exposed records of more than 626,000 patients.
Labcorp agreed to a $35 million settlement for a 2018-2019 AMCA third-party breach affecting more than 21 million people, including millions of Labcorp patients.
Heritage Provider Network, Regal Medical Group, and affiliates agreed in California state court to a preliminarily approved $49.995 million settlement resolving class actions over a December 2022 healthcare data breach.
Centrelake Medical Group and Des Moines Orthopaedic Surgeons settled class actions in 2019 and 2023 US health data breaches, offering monitoring and capped reimbursements.
Labcorp reached a $35 million settlement in a vendor-breach class action in New Jersey after AMCA systems were hacked from August 2018 to March 2019.
Calibrated Healthcare agreed to a $1.75 million settlement for a February 2024 patient data breach affecting about 34,562 people, with monitoring and cash compensation.
McKenzie Health System agreed to a Michigan class-action settlement after alleged April 2025 exposure of patient data from a targeted cyberattack, with final approval set for October 6, 2026.
Compex Legal Services, Inc. agreed to an $872,500 settlement over an April 2024 cyber incident involving unauthorized access to PII and PHI, with a fairness hearing set for August 31, 2026 in Los Angeles County, California.
Labcorp agreed to a $35 million class action settlement over an AMCA data breach affecting Labcorp patients, with a fairness hearing set for September 3, 2026.
⭐⭐⭐
Onsite Mammography reached a class action settlement in 2026 over a 2024 patient data breach, with final approval set for Sept. 9, 2026.
Deanco Healthcare, doing business as Mission Community Hospital, agreed to a $1,546,409.42 class action settlement over a May 1, 2023 patient data breach affecting California residents.
Esse Health agreed to a $2.5 million class action settlement after a late-April 2025 cyberattack potentially exposed PII and protected health information in St. Louis City, Missouri.
Mt. Baker Imaging and Northwest Radiologists agreed to a $3.3 million class action settlement over alleged January 20 to 25, 2025 data breach claims in Whatcom County, Washington.
Labcorp agreed in 2026 to settle a class action over an AMCA breach potentially exposing 7.7 million people, with credit monitoring and claims deadlines set.
Serviceaide agreed to a $1.8 million class action settlement in New York over alleged patient data breach exposure between Sept. 19 and Nov. 5, 2024.
South Texas Oncology and Hematology reached a $1,075,000 settlement in 2026 over alleged patient data exposure from a February 2024 breach.
Missouri-based Esse Health agreed to a $2,525,000 class action settlement for an April 2025 breach, pending final court approval scheduled in August 2026.
Ciox Health, doing business as Datavant Group, received preliminary approval on April 17, 2026, for a $900,000 class action settlement tied to a May 2024 phishing-related data breach.
Mission Community Hospital agreed to a $1,546,409 class action settlement after a May 2023 privacy breach allegation, with preliminary approval on March 9, 2026 in California.
Mt. Baker Imaging and Northwest Radiologists reached a $3.3 million class settlement after a January 2025 ransomware breach affected roughly 340,184 U.S. residents, pending final court approval.
ABC Legal Services, LLC reached a $2.5 million class action settlement after an August 2024 data breach, with preliminary approval on May 28, 2026.
Lucent Health Solutions received preliminary approval on May 5, 2026 for a class action settlement over a 2023 cybersecurity incident affecting about 37,000 people.
Grace Oliveri v. The Ambulatory Surgery Center of Westchester provides up to $5,000 for documented losses after a November 2023 cyberattack at a New York surgery center.
Datavant Group agreed to a $900,000 class action settlement after a May 8-9, 2024 phishing incident potentially exposed sensitive personal data for about 58,309 people.
Clarkson et al. settlement after an October 2024 Onsite Mammography breach provides up to $5,000 and three years of credit and identity monitoring for 357,265 notified individuals in the United States.
Deanco Healthcare LLC, d/b/a Mission Community Hospital, reached a class action settlement in response to a May 1, 2023 data breach affecting 269,847 people.
Mt. Baker Imaging LLC and Northwest Radiologists Inc. agreed to a $3.3 million class action settlement for a January 2025 ransomware breach affecting about 340,184 US patients.
Labcorp reached a $35 million class action settlement for potential exposure of patient personal and health data tied to an AMCA cybersecurity incident during 2018-2019.
Lucent Health Solutions agreed to a $1.95 million class action settlement after an October 2023 breach exposed protected health information for about 37,000 individuals.
United States Catholic Health patients may file claims for up to $5,000 after Serviceaide Inc. settled a 2024 data breach class action.
Lighthouse Electric Co. Inc. class action settlement for the October 2024 employee data breach lets eligible U.S. residents claim up to $2,750 after court final approval.
Aspire Health Alliance breach notice recipients can claim up to $2,500 and optionally enroll in CyEx Medical Shield under a 2023 data breach class action settlement.
Patients potentially affected by ApolloMD's 2025 breach can claim settlement payments or CyEx medical data monitoring under a $4.02 million class action settlement.
Healthcare Services Group Inc. class action settlement announced for a September 2024 data breach offers monitoring, identity recovery, and reimbursement for documented losses.
Drug and Alcohol Treatment Services Inc agreed to a $549,000 settlement in a class-action after a May 2, 2025 notice for a October 2024 protected health information breach.
Pierce County Library System data breach class action settlement lets affected employees and contractors submit claims after July 2025 breach notice.
Zoll Medical Corp. agreed to a $3.5 million class action settlement after a January 2023 cybersecurity incident exposed personal information, with U.S. notice recipients eligible for claims.
Serviceaide Inc. proposed an $1.8 million class action settlement in fall 2024 for a data breach affecting more than 480,000 Catholic Health patients in Buffalo, New York.
Chattanooga Heart Institute reached a $3.75 million class-action settlement in 2023 over a March 8 to March 16 incident impacting about 460,000 individuals in Tennessee.
Healthcare Services Group agreed to a $3 million class-action settlement after a data breach identified around October 7, 2024, affected 624,496 people.
Equinox, Inc. agreed to a $685,000 class action settlement after an April 29, 2024 breach potentially exposed members medical and financial data, pending New York Supreme Court approval.
Cardiovascular Consultants agreed to a $3.85 million settlement in an Arizona class action over a ransomware breach detected September 29, 2023, involving exfiltrated patient records.
Labcorp agreed to a $35 million settlement after an American Medical Collection Agency cybersecurity incident provided unauthorized access to patient PHI between 2018 and 2019.
Deanco Healthcare agreed to a $1.5 million-plus class action settlement in Los Angeles County over a May 1, 2023 cyberattack allegedly exposing Mission Community Hospital patient data.
Mt. Baker Imaging and Northwest Radiologists plan to pay $3.3 million to settle claims tied to a January 2025 ransomware incident affecting about 340,184 people in the US.
Serviceaide agreed to a $1.8 million class-action settlement in a 2024 data-breach case affecting about 480,000 patients, with claim deadlines in 2026.
Labcorp agreed to a proposed $35,000,000 class action settlement in connection with an AMCA cybersecurity incident, covering exposed patient information from 2018-2019.
A radiology practice agreed to a $3 million class-action settlement in 2026 after a cyberattack exposed 350,000 patients Social Security numbers and medical diagnoses.
A proposed settlement in Leo Woytach v. Drug & Alcohol Treatment Services resolves allegations of PHI exposure from unauthorized access in 2024, with final approval set for November 24, 2026.
Anne Arundel Dermatology agreed to a 2.4 million class action settlement after an alleged cybersecurity failure exposed sensitive medical data in Maryland and other states, with claims due July 8.
Veradigm settles 2024 data breach case in Illinois federal court, funding 10.5 million for affected patients.
Continuum Health Alliance settles data breach case in New Jersey over October 2023 incident.
Emergency Medical Services Authority (Oklahoma) and Compassion Health Care (North Carolina) reached class-action settlements in 2024-2025 data breach cases affecting hundreds of thousands of patients.
Endue Software reached an $870,000 U.S. class action settlement on July 15, 2026 approval timing after a February 2025 data breach, offering monitoring, identity protection, and cash claims.
Whitman Hospital & Medical Clinics agreed on a $500,000 settlement for a December 2024 to February 2025 data breach affecting about 64,401 people.
Blackstone Valley Community Health Care agreed to settle a class action over a November 2023 data breach, offering up to $2,830 and three years of credit monitoring to about 34,000 affected patients.
Endue Software agreed in 2025 to settle a U.S. class action for a February 2025 targeted cyberattack involving unauthorized access to private information.
Esse Health class action settlement for an April 2025 cyberattack offers eligible claimants an estimated $50 cash payment and two years of medical identity monitoring.
Cardiovascular Consultants agreed to a 3.85 million settlement after a September 2023 breach potentially exposed patient Social Security numbers and other identifiers.
Numotion agreed to a $4 million class action settlement for two 2024 incidents in the Middle District of Tennessee before Judge Aleta A. Trauger.
Concord (N.H.) Orthopedics settled a class-action over a November 2024 cybersecurity incident, notifying affected individuals in March 2025 after access to patient data.
Datavant (Ciox Health) class-action settlement sets August 18, 2026 claim deadlines after May 2024 exposure of sensitive personal and health data for about 58,309 notified individuals.
Mount Kisco Surgery Center LLC reached a $527,500 class action settlement in New York after a November 2023 cyberattack exposed patients' medical and financial information.
BMS Holdings, LP d/b/a BMS CAT reached a settlement in response to a February 2025 data breach class action filed over alleged protection failures.
Memorial Heart Institute, LLC reached a $3.75 million settlement in 2023 breach-related class claims involving Social Security numbers and medical data.
Thompson Coburn LLP agreed in 2025 to a $7.5 million settlement for a May 2024 breach impacting sensitive personal and protected health information in the USA.
⭐️⭐️
Community First Medical Center in Chicago reached a 1 million dollar class action settlement for a July 12 2023 data breach.
Murfreesboro Medical Clinic in Tennessee faced a 2023 ransomware breach; a class action settlement received preliminary approval in September 2025 to provide cash payments and two years of credit monitoring to affected patients and employees.