Health Insurance Portability and Accountability Act

March 13, 2026 A $4M Essen Health Care settlement offers cash to those whose information may have been impacted by a March 2023 data breach.

March 10, 2026 A $4.02M ApolloMD settlement offers cash and credit monitoring to those who may have been affected by a May 2025 data breach.

March 5, 2026 A $4.45M Proliance Surgeons settlement offers cash and medical data monitoring to those who may have been affected by a Feb. 2023 data breach.

February 27, 2026 A $2.35M Cornerstone Specialty Hospitals settlement offers cash and credit monitoring to those who may have been affected by a Dec. 2023 data breach.

February 19, 2026 A settlement of up to $4.66M offering cash and credit monitoring would end a class action lawsuit over a 2024 Globe Life data breach.

February 17, 2026 An $11M Norton Healthcare settlement offers cash and medical data monitoring to individuals who may have been affected by a May 2023 data breach.

February 5, 2026 A $14M MHCC settlement offers cash and credit monitoring to individuals who may have been affected by data breaches in 2023 and 2024.

February 4, 2026 A Carespring Health Care settlement offers cash and credit monitoring to individuals who may have been impacted by an Oct. 2023 data breach.

February 2, 2026 A Legacy Health settlement offers cash and credit monitoring to patients whose private health info. may have been tracked by third parties.

February 2, 2026 A Staten Island University Hospital settlement offers cash and data monitoring to those who may have been impacted by a Jan. 2024 data breach.

January 26, 2026 A $2.5M Bayhealth Medical Center settlement offers cash and data monitoring to those impacted by a data breach reported by the company in July 2024.

January 21, 2026 A $1.5M Northeast Rehabilitation settlement offers cash to those who may have been affected by a data breach discovered in May 2024.

January 20, 2026 A Des Moines Orthopaedic Surgeons settlement offers cash and credit monitoring to those who may have been affected by a Feb. 2023 data breach.

January 19, 2026 A $3.147M Inova Health Care settlement offers cash to Inova MyChart accountholders whose data may have been shared with third parties.

January 19, 2026 Covenant Health faces a class action lawsuit alleging the healthcare provider negligently failed to prevent a 2025 data breach.

January 19, 2026 A $600K Carolina Arthritis Associates settlement offers cash and data monitoring to those who may have been affected by a Sept. 2024 data breach.

January 19, 2026 PharMerica is set to pay $5.275M to resolve a class action lawsuit over a massive 2023 data breach. [UPDATE]

January 16, 2026 A U.S. Dermatology Partners settlement offers cash and credit monitoring to those who may have been impacted by a June 2024 data breach.

January 16, 2026 Affiliated Dermatologists & Dermatologic Surgeons will offer cash and credit monitoring to those affected by a data breach that started in Dec. 2023.

January 15, 2026 American Addiction Centers will pay $2.75M to settle a class action lawsuit over a data breach that allegedly exposed patients’ private information.

January 9, 2026 A $500K New York Blood Center settlement offers cash and credit monitoring to those who may have been impacted by a January 2025 data breach.

January 9, 2026 A $2.25M Alabama Cardiology Group settlement offers cash and credit monitoring to those who may have been affected by a July 2024 data breach.

January 8, 2026 A $5M Geisinger Health settlement offers cash and credit monitoring to resolve a class action lawsuit over a November 2023 data breach.

January 5, 2026 Continuum Health will offer cash and credit monitoring to resolve a class action lawsuit over a 2023 data breach.

December 22, 2025 A Regional Obstetrical Consultants settlement offers cash to individuals who may have been affected by a May 2024 data breach.

December 8, 2025 The Redeemer Health settlement offers privacy monitoring and cash payments to patients whose health data was potentially obtained by third parties.

September 18, 2025 A $2.55M settlement ends a class action against Octapharma Plasma over an April 2024 data breach that exposed patients’ personal and medical information.

September 15, 2025 WebTPA and several health insurers have agreed to pay $13.75M to settle class action litigation over an April 2023 data breach.

June 1, 2023 A class action alleges Monument has illegally disclosed users’ information to third-party advertisers, including Meta, Google, Bing and Pinterest.

March 23, 2023 Independent Living Systems faces another class action lawsuit that claims the health services company failed to protect current and former patients’ personal information from a “foreseeable” data breach in July 2022.

March 23, 2023 A class action lawsuit alleges Independent Living Systems recklessly and/or negligently failed to protect itself from a data breach that compromised the personal information of over four million people.

February 14, 2023 A class action lawsuit claims Mindpath Health failed to protect patient information from hackers who reportedly gained unauthorized access to two employee email accounts in 2022.

February 10, 2023 A class action lawsuit claims Howard Memorial Hospital’s “negligent” and “careless” cybersecurity standards are to blame for a data breach reportedly discovered in December 2022.

January 31, 2023 Bay Bridge Administrators, LLC (BBA) faces a class action lawsuit that claims a data breach reportedly discovered in September 2022 was a direct result of the company’s allegedly deficient cybersecurity system.

January 26, 2023 A class action lawsuit accuses Coastal Cardiology P.C. of failing to properly protect the personal information of 71,227 patients from a “foreseeable” cyberattack reportedly discovered in mid-August 2022.

January 18, 2023 A class action lawsuit accuses CommonSpirit Health of failing to protect patients’ personal information from a data breach that occurred between September and October 2022.

January 11, 2023 A class action has been filed against Connexin Software (doing business as Office Practicum) over a data breach that reportedly affected over 2 million patients.

January 9, 2023 Gateway Rehab faces a class action that claims the medical center failed to protect patients’ personal health information from a data breach in June 2022.

November 3, 2022 Empress Emergency Medical Services faces a lawsuit after a July 2022 data breach reportedly compromised the personal information of more than 300,000 consumers.

October 27, 2022 A class action alleges Keystone Health failed to prevent a 2022 data breach that compromised the personal and health information of 235,237 individuals.

September 19, 2022 Truly Nolen of America faces a lawsuit after employees’ personal information was reportedly compromised in an April/May 2022 data breach.

September 12, 2022 Behavioral Health Group faces a lawsuit over a December 2021 data breach during which thousands of individuals' personal information was reportedly compromised.

August 29, 2022 Meta and UPMC face claims that a tracking code embedded on UPMC’s appointment scheduling webpage secretly shares users’ health information with Meta.

July 28, 2022 PracticeMax faces a class action over a 2021 data breach that reportedly compromised the sensitive information of more than 150,000 current and former patients.

July 13, 2022 A proposed class action lawsuit alleges Comstar, LLC’s failure to properly secure consumers’ private information led to a data breach in March 2022.

July 5, 2022 Yuma Regional Medical Center faces a class action over an April 2022 data breach that allegedly compromised current and former patients’ information.

April 26, 2022 Adaptive Health Integrations faces a proposed class action over an October 2021 data breach that reportedly exposed consumers’ personal information.

April 21, 2022 Advent Health faces a class action over a September 2021 data breach during which consumers’ information was reportedly exposed to unauthorized access.

April 20, 2022 A lawsuit claims ECL Group failing to provide contracted-for services amid several data breaches while continuing to bill clients “as if nothing had happened.”

March 11, 2022 Comprehensive Health Services, faces a proposed class action over a September 2020 data breach that reportedly affected at least 106,752 individuals.