The HealthEC data breach settlement is a $5,482,500 class action resolution approved by a New Jersey federal magistrate judge on January 20, 2026, covering roughly 1.67 million patients whose information was exposed in a July 2023 cyberattack on the healthcare analytics company.1Mealey’s. $5.48 Million Settlement of Suit Over Analytics Firm’s Data Breach Approved Payments to approved claimants began on March 24, 2026, and the case is now listed as closed.2Claim Depot. HealthEC Settlement
What the Breach Exposed
Hackers accessed HealthEC’s systems between July 14 and July 23, 2023, and copied files containing names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account and credit card details, and medical records.3Seeger Weiss LLP. HealthEC Data Breach Lawsuit Because HealthEC provides population health software to hospitals and health systems across the country, the incident reached patient records at roughly 20 healthcare organizations, including Corewell Health, HonorHealth, the State of Tennessee’s TennCare program, and multiple community health centers.4HIPAA Journal. HealthEC Data Breach HealthEC notified its healthcare clients in October 2023 and reported the breach to the U.S. Department of Health and Human Services in December 2023.
Who the Settlement Covers
The breach affected about 4.5 million patients overall, but the settlement class is narrower. It covers roughly 1.67 million patients tied to the four healthcare providers named as co-defendants alongside HealthEC: Corewell Health, Beaumont ACO (formally Oakwood Accountable Care Organization, LLC), MD Valuecare, and Community Health Care Systems.5ClassAction.org. $5.48M HealthEC Settlement Resolves Data Breach Lawsuit Over Cyberattack Affecting Millions of Patients Patients of the other affected organizations, including TennCare, HonorHealth, and the community health centers, were not part of this consolidated action, and available records do not show whether separate litigation was pursued on their behalf.4HIPAA Journal. HealthEC Data Breach
The consolidated case, In re: HealthEC LLC Data Breach Litigation, Case No. 2:24-cv-00026, was filed in the U.S. District Court for the District of New Jersey. Plaintiffs alleged negligence, breach of implied contract, invasion of privacy, and violations of HIPAA and the FTC Act, arguing that HealthEC and the provider defendants failed to implement reasonable cybersecurity measures and delayed notifying patients.4HIPAA Journal. HealthEC Data Breach6ClassAction.org. Lempinen v. HealthEC, LLC, Class Action Complaint
What Class Members Could Claim
The claim deadline was November 18, 2025. Class members who filed on time could choose among four types of compensation.7HealthEC Settlement. Settlement Notice
- A flat cash payment of $25, or $50 for California residents.
- Reimbursement of out-of-pocket losses traceable to the breach, such as identity theft costs and credit freeze fees, incurred on or after July 14, 2023.
- Lost-time compensation at $25 per hour, up to 10 hours for claimants with documented out-of-pocket losses and up to 4 hours for self-certified time.
- At least three years of credit and medical monitoring, including dark web scanning, three-bureau credit file monitoring, and a $1 million identity theft insurance policy.
The monitoring benefit was available to every class member, whether or not they filed a claim. If total valid claims exceeded the fund, cash payments would be reduced pro rata; if money remained, individual payments would rise.5ClassAction.org. $5.48M HealthEC Settlement Resolves Data Breach Lawsuit Over Cyberattack Affecting Millions of Patients
Where Things Stand Now
Cash payments went out beginning March 24, 2026, and the claim window has closed. Enrollment in the Medical Shield Complete monitoring service remains open to class members through April 1, 2029, using the code included in the original notice.8HealthEC Settlement. HealthEC Settlement Official Website If you were notified that you were part of the class and did not file a claim, the monitoring benefit is the one remaining option available to you.