Health Insurance Portability and Accountability Act

February 5, 2026 A $14M MHCC settlement offers cash and credit monitoring to individuals who may have been affected by data breaches in 2023 and 2024.

February 4, 2026 A Carespring Health Care settlement offers cash and credit monitoring to individuals who may have been impacted by an Oct. 2023 data breach.

February 2, 2026 A Legacy Health settlement offers cash and credit monitoring to patients whose private health info. may have been tracked by third parties.

February 2, 2026 A Staten Island University Hospital settlement offers cash and data monitoring to those who may have been impacted by a Jan. 2024 data breach.

January 26, 2026 A $2.5M Bayhealth Medical Center settlement offers cash and data monitoring to those impacted by a data breach reported by the company in July 2024.

January 21, 2026 A $1.5M Northeast Rehabilitation settlement offers cash to those who may have been affected by a data breach discovered in May 2024.

January 20, 2026 A Des Moines Orthopaedic Surgeons settlement offers cash and credit monitoring to those who may have been affected by a Feb. 2023 data breach.

January 19, 2026 A $3.147M Inova Health Care settlement offers cash to Inova MyChart accountholders whose data may have been shared with third parties.

January 19, 2026 Covenant Health faces a class action lawsuit alleging the healthcare provider negligently failed to prevent a 2025 data breach.

January 19, 2026 A $600K Carolina Arthritis Associates settlement offers cash and data monitoring to those who may have been affected by a Sept. 2024 data breach.

January 19, 2026 PharMerica is set to pay $5.275M to resolve a class action lawsuit over a massive 2023 data breach.

January 16, 2026 A U.S. Dermatology Partners settlement offers cash and credit monitoring to those who may have been impacted by a June 2024 data breach.

January 16, 2026 Affiliated Dermatologists & Dermatologic Surgeons will offer cash and credit monitoring to those affected by a data breach that started in Dec. 2023.

January 15, 2026 American Addiction Centers will pay $2.75M to settle a class action lawsuit over a data breach that allegedly exposed patients’ private information.

January 9, 2026 A $500K New York Blood Center settlement offers cash and credit monitoring to those who may have been impacted by a January 2025 data breach.

January 9, 2026 A $2.25M Alabama Cardiology Group settlement offers cash and credit monitoring to those who may have been affected by a July 2024 data breach.

January 8, 2026 A $5M Geisinger Health settlement offers cash and credit monitoring to resolve a class action lawsuit over a November 2023 data breach.

January 5, 2026 Continuum Health will offer cash and credit monitoring to resolve a class action lawsuit over a 2023 data breach.

December 22, 2025 A Regional Obstetrical Consultants settlement offers cash to individuals who may have been affected by a May 2024 data breach.

December 8, 2025 The Redeemer Health settlement offers privacy monitoring and cash payments to patients whose health data was potentially obtained by third parties.

September 18, 2025 A $2.55M settlement ends a class action against Octapharma Plasma over an April 2024 data breach that exposed patients’ personal and medical information.

September 15, 2025 WebTPA and several health insurers have agreed to pay $13.75M to settle class action litigation over an April 2023 data breach.

June 1, 2023 A class action alleges Monument has illegally disclosed users’ information to third-party advertisers, including Meta, Google, Bing and Pinterest.

March 23, 2023 Independent Living Systems faces another class action lawsuit that claims the health services company failed to protect current and former patients’ personal information from a “foreseeable” data breach in July 2022.

March 23, 2023 A class action lawsuit alleges Independent Living Systems recklessly and/or negligently failed to protect itself from a data breach that compromised the personal information of over four million people.

February 14, 2023 A class action lawsuit claims Mindpath Health failed to protect patient information from hackers who reportedly gained unauthorized access to two employee email accounts in 2022.

February 10, 2023 A class action lawsuit claims Howard Memorial Hospital’s “negligent” and “careless” cybersecurity standards are to blame for a data breach reportedly discovered in December 2022.

January 31, 2023 Bay Bridge Administrators, LLC (BBA) faces a class action lawsuit that claims a data breach reportedly discovered in September 2022 was a direct result of the company’s allegedly deficient cybersecurity system.

January 26, 2023 A class action lawsuit accuses Coastal Cardiology P.C. of failing to properly protect the personal information of 71,227 patients from a “foreseeable” cyberattack reportedly discovered in mid-August 2022.

January 18, 2023 A class action lawsuit accuses CommonSpirit Health of failing to protect patients’ personal information from a data breach that occurred between September and October 2022.

January 9, 2023 Gateway Rehab faces a class action that claims the medical center failed to protect patients’ personal health information from a data breach in June 2022.

September 21, 2021 A class action has been filed over an alleged UC San Diego Health data breach in which hackers reportedly gained unauthorized access to employees’ email accounts.

September 1, 2021 Northeast Radiology and Alliance HealthCare face claims that they failed to protect patients’ sensitive personal and medical information from unauthorized access.

June 7, 2021 The failure of CaptureRx and Midtown Health Center to safeguard patients’ private information is to blame for a February 2021 data breach, a class action says.

October 6, 2020 A lawsuit claims Healthalliance Hospital and Ciox Health “failed and refused” to provide requested electronic medical records while charging excessive fees.

September 16, 2020 Assured Imaging faces a class action over a May 2020 ransomware attack in which patients' private medical and personal information was reportedly compromised.

May 29, 2020 NCH Healthcare System, Inc. has been hit with a class action over a data breach that reportedly exposed the personal and medical information of over 63,000 patients.

May 22, 2020 Gilead Sciences unlawfully disclosed confidential medical information by sending envelopes labeled "HIV Prevention Team," a class action claims.

March 11, 2020 Sunshine Behavioral Health faces a proposed class action over a data breach that allegedly allowed patients' information to be accessed via internet search engines.

February 24, 2020 A class action suit claims Prisma Health-Midlands failed to adequately safeguard patients’ private health information and provide prompt notice following a data breach.

February 12, 2020 The operators of Pavia Hospital Santurce and Pavia Hospital Hato Rey are facing a lawsuit over a data breach that the plaintiffs claim was caused by the companies’ negligence in securing patient information.