The Duly data settlement is a $1.88 million class action resolving allegations that Duly Health and Care embedded Meta tracking tools on its patient website and portal, sending health-related browsing data to Facebook without consent. A federal judge granted final approval on April 7, 2026, and the deadline to file a claim, opt out, or object was March 2, 2026. If you did not submit a claim by that date, you cannot receive a payment from this settlement.
Who Was Covered by the Class
The class included roughly 272,373 people who logged into the authenticated (password-protected) portion of DulyHealthandCare.com between July 24, 2020, and April 10, 2023. That covers patients who used the portal to schedule appointments, review test results, or manage their care during that window.
The case, Mayer v. Midwest Physician Administrative Services, LLC (Case No. 1:23-cv-03132), was brought by three patients — Patricia Mayer, Catherine Massarelli, and Mary Murphy — against the corporate entity that operates Duly Health and Care. The complaint alleged that Duly ran a Meta tracking pixel in visitors’ browsers and used a server-side tool called the Conversions API to record clicks, keystrokes, pages viewed, and time spent, then transmitted that activity to Meta. According to the complaint, the pixel linked the browsing to Facebook identities through stored cookies, and the Conversions API was used to bypass ad blockers and browser privacy settings. Data allegedly transmitted included IP addresses, device IDs, and details about medical conditions, appointment types, and treatments sought, and in some cases names, email addresses, and phone numbers.
Duly denied all allegations of wrongdoing. The court allowed two claims to proceed past a motion to dismiss: a violation of the federal Electronic Communications Privacy Act and negligence. Six other claims were dismissed in March 2025.
What the Settlement Pays
The $1.88 million fund is non-reversionary, meaning no unclaimed money returns to Duly. Everyone who filed a valid claim receives an equal pro rata share of what remains after deductions. There are no tiers.
Deductions from the fund include:
- Attorneys’ fees of up to $620,400, roughly one-third of the fund.
- Attorneys’ costs and expenses of up to $25,000.
- Service awards of up to $2,500 for each of the three named plaintiffs, for a total of $7,500.
- Administrative costs paid to Kroll Settlement Administration, LLC.
After those deductions, the net fund available for claimants could sit around $1.2 million. The actual per-person payment depends on how many of the roughly 272,000 eligible people filed. A high claim rate pushes individual payments toward single dollars; a low claim rate produces meaningfully larger checks. The settlement notice did not promise a specific amount.
Key Dates and Payment Timing
The court granted preliminary approval on November 17, 2025. The deadline to submit a claim, opt out, or object was March 2, 2026. Judge April M. Perry held the final approval hearing on April 7, 2026, approved the settlement as “fair, reasonable and adequate,” certified the class for settlement purposes, and dismissed the case with prejudice.
Under the settlement terms, payments to class members are scheduled to go out approximately 61 days after the court resolves any appeals and final approval becomes effective. As of mid-2026, the case is listed as closed. No public confirmation of actual payment distribution has appeared in available records.
If you filed a claim, payment is issued through Kroll, the settlement administrator. Claims were submitted online at DulyDataSettlement.com using a class member ID from the mailed notice, or by printing a PDF form and mailing it to Kroll’s New York address.
How to Check on a Claim You Already Filed
Kroll Settlement Administration handles inquiries about this case. If you submitted a claim before the March 2, 2026 deadline and have questions about its status, contact information for the administrator was provided on the settlement notice and at DulyDataSettlement.com. The article does not have a phone number to publish here, and you should rely on the contact details on your own notice rather than third-party sources.
This Is Not the 2021 DuPage Medical Group Breach
The Duly data settlement addresses the Meta pixel allegations only. It is a separate case from the 2021 data security incident that occurred when Duly was still operating as DuPage Medical Group, in which outside actors accessed the network over two days and potentially compromised names, addresses, dates of birth, diagnosis codes, and treatment dates for approximately 600,000 patients, with a small number of Social Security numbers exposed.
That earlier incident led to a different lawsuit, Hestrup et al. v. DuPage Medical Group, Ltd. (Case No. 2021L937), which settled for $3 million and received final approval in November 2022. The two cases involved different time periods, different types of data exposure, and different legal theories. Being included in one class does not automatically mean you were included in the other, and payment from one has no bearing on eligibility for the other.
Background on Duly Health and Care
Duly Health and Care, formerly DuPage Medical Group, is a multispecialty physician practice based in the Chicago area. It rebranded from DuPage Medical Group to Duly Health and Care in September 2021. The organization employs more than 950 physicians across over 150 locations and serves roughly 1.5 million patients, primarily in Chicago’s western and southwestern suburbs. The patient portal at the center of this litigation is part of that operation.