$7.6M Hospital Sisters Settlement Ends Class Action Lawsuit Over 2023 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

A $7.6 million class action settlement will wrap up litigation against Hospital Sisters Health System (HSHS) over an August 2023 data breach that exposed patients’ personal and health information to unauthorized third parties.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The Hospital Sisters Health System class action settlement received preliminary approval from the court on August 15, 2025 and covers anyone whose personally identifiable information was compromised in the HSHS data breach, including anyone who was sent notice of the data breach.

The court-approved website for the Hospital Sisters settlement can be found at HSHSDataSettlement.com.

Hospital Sisters Health System settlement class members who submit a timely, valid claim form will be able to receive financial data monitoring and either up to $5,000 in reimbursement for documented losses related to the data breach or a no-proof, pro rata (equal share) cash payment from the remainder of the settlement fund.

The financial data monitoring includes two years of CyEx Financial Shield, which comes with $1 million financial fraud insurance and monitoring for fraud or identity theft, unauthorized financial transactions and compromised bank and financial account numbers, the settlement website states.

Losses related to the data breach, the settlement website says, must have occurred between August 16, 2023 and November 14, 2025, and may include expenses such as:

• Fees for credit reports, credit monitoring or freezing/unfreezing credit;
• The cost of replacing IDs;
• Losses due to identity theft or fraud; and
• Postage to contact banks by mail.

Class members seeking to claim reimbursement for data breach-related losses must submit reasonable documentation of those losses, such as bank statements or receipts, the website specifies.

No proof is required to submit a claim for a pro rata cash payment. However, the cash payment is mutually exclusive from the loss reimbursement option, meaning a class member may only submit a claim for one of those options. This choice will not affect a class member’s eligibility to claim the available financial data monitoring, the settlement website says.

To submit an HSHS data breach claim form online, class members can visit this page of the Hospital Sisters settlement website and log in with the unique ID and PIN found in their copy of the settlement notice.

Alternatively, a PDF of the claim form is available to print, fill out and mail back to the address listed on the form.

All claim forms must be submitted online or postmarked by November 14, 2025.

Additionally, Hospital Sisters Health System, as part of the class action settlement, has agreed to implement additional privacy and cybersecurity measures to strengthen its data protection and privacy protocols.

A hearing is scheduled for December 4, 2025 to determine whether the settlement will receive final court approval. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Hospital Sisters Health System class action lawsuit claimed that the company negligently allowed unauthorized third parties to access patients’ sensitive personal and health information during a data breach that occurred between August 16 and August 27, 2023.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.