The Kaiser Permanente data breach settlement pays an estimated $20 to $40 to eligible members who logged into Kaiser’s websites or mobile apps between November 2017 and May 2024, drawn from a $46 million fund (up to $47.5 million under a supplemental agreement). To get paid, you must file a claim by March 12, 2026 at KaiserPrivacySettlement.com. The case resolves allegations that Kaiser’s sites and apps used trackers that sent patient data to Google, Microsoft, X, and Adobe without consent.
Who Qualifies
You are in the settlement class if you were a current or former Kaiser Permanente member and, while located in one of the covered jurisdictions, accessed an authenticated (logged-in) page of a Kaiser website or app between November 2017 and May 2024.
Covered jurisdictions: California, Colorado, Georgia, Hawaii, Maryland, Oregon, Virginia, Washington, and the District of Columbia.1Kaiser Privacy Settlement. Kaiser Privacy Breach Settlement
Covered platforms include the websites wa-member.kaiserpermanente.org, healthy.kaiserpermanente.org, and mydoctor.kaiserpermanente.org, and the Kaiser Permanente App, Kaiser Permanente Washington App, My Doctor Online, My KP Meds, and KP Health Ally.2HIPAA Journal. Kaiser Permanente Website Tracker Breach Affects 13.4 Million Individuals “Authenticated” means pages you had to log in to reach, such as the patient portal.
How to File Your Claim
Claims can be submitted online or by mail. Both must be in by March 12, 2026 (mailed forms must be postmarked by that date).
Online filing requires a Settlement Class Member Unique ID. Kaiser’s administrator began mailing and emailing these IDs to eligible members in January 2026. If yours never arrived, you can request one on the settlement website or by contacting the administrator.3CBS News San Francisco. Kaiser Permanente Settlement: How to File a Claim
To file by mail, print the form from KaiserPrivacySettlement.com and send it to:
Kaiser Privacy Breach Settlement
c/o Strategic Claims Services, Inc.
P.O. Box 230
600 N. Jackson Street, Suite 205
Media, PA 190634Kaiser Privacy Settlement. Frequently Asked Questions
If you do nothing, you remain in the class and give up your right to sue Kaiser over these claims, but you will not receive any money.1Kaiser Privacy Settlement. Kaiser Privacy Breach Settlement To keep your right to sue separately, you must file a request for exclusion by the same March 12, 2026 deadline.
How Much You’ll Receive
Individual payments are estimated at roughly $20 to $40 per claimant,5KTVU FOX 2. Kaiser Permanente $46M Privacy Settlement: See if You Qualify with one estimate placing the range at $20.98 to $41.95.6ClassAction.org. Up to $47.5M Kaiser Settlement Ends Class Action Lawsuit Over Alleged Disclosure of Patient Info The final figure depends on how many people submit valid claims, since the fund is split pro rata.
The $46 million is reduced by attorneys’ fees of up to $15.675 million (capped at 33% of the fund), litigation costs up to $900,000, notice and administration costs estimated at $1.7 million to $2.4 million, and service awards of up to $5,000 for each of the eight named plaintiffs.7ClassAction.org. Doe et al. v. Kaiser Foundation Health Plan Inc. Notice What remains is the net settlement fund divided among claimants.
Payments can be issued by direct deposit, electronic services like PayPal or Venmo, or paper check.3CBS News San Francisco. Kaiser Permanente Settlement: How to File a Claim You choose your preferred method on the claim form.
Key Dates
- March 12, 2026 — Deadline to file a claim, opt out, or object.1Kaiser Privacy Settlement. Kaiser Privacy Breach Settlement
- May 7, 2026, 1:30 p.m. — Final fairness hearing before Judge Edward M. Chen at the Phillip Burton Federal Building in San Francisco.
No payments will go out until after the court grants final approval and any appeals are resolved. Preliminary approval was granted on December 5, 2025, and notices went to roughly 13 million members.3CBS News San Francisco. Kaiser Permanente Settlement: How to File a Claim
Is the Notice You Received Real
Yes. The case is John Doe, et al. v. Kaiser Foundation Health Plan, Inc., No. 3:23-cv-02865, in the U.S. District Court for the Northern District of California.8Kessler Topaz Meltzer & Check, LLP. Kaiser Foundation Health Plan Inc. The official notice states: “A federal court authorized this notice. This is not a solicitation from a lawyer.”1Kaiser Privacy Settlement. Kaiser Privacy Breach Settlement
The court-appointed administrator is Strategic Claims Services, Inc., reachable at 1-855-783-3816 or info@KaiserPrivacySettlement.com.9Kaiser Privacy Settlement. Contact Us The only official site is KaiserPrivacySettlement.com. The real claim form does not ask for Social Security numbers or bank passwords, so treat any lookalike site or message that does as suspicious.
What Kaiser Was Accused Of
The lawsuit alleged that tracking cookies and pixels embedded on Kaiser’s patient-facing websites and mobile apps transmitted personal data to Google, Microsoft Bing, X (formerly Twitter), and Adobe when members were logged in.2HIPAA Journal. Kaiser Permanente Website Tracker Breach Affects 13.4 Million Individuals
The data shared reportedly included names, IP addresses, whether the user was signed into a Kaiser account, navigation activity, and search terms entered into Kaiser’s health encyclopedia. Queries about symptoms, medications, injuries, and exercises could have been sent to advertising companies.10Kaiser Permanente. Privacy Matter Kaiser said Social Security numbers, financial information, and login credentials were not exposed.11Healthcare Finance News. Kaiser Reports 13.4 Million People Affected by Data Breach
Kaiser said it identified the issue on October 25, 2023, removed the trackers, reported the incident to the HHS Office for Civil Rights on April 12, 2024, and began notifying affected members the following month.12Fierce Healthcare. Kaiser Permanente Says 13.4M Impacted by Data Breach Roughly 13.4 million current and former members were listed as potentially affected.11Healthcare Finance News. Kaiser Reports 13.4 Million People Affected by Data Breach Kaiser settled without admitting liability, calling the deal a way “to end the burden, expense, and uncertainty of further litigation.”3CBS News San Francisco. Kaiser Permanente Settlement: How to File a Claim
Don’t Confuse This With the Kaiser Text-Message Settlement
Kaiser resolved a separate class action over unsolicited telemarketing texts for up to $10.5 million under the Telephone Consumer Protection Act and Florida’s Telephone Solicitation Act. That case covered a different period (January 2021 through August 2025), paid up to $75 per qualifying text, and already sent payments in March 2026.13Kaiser TCPA Settlement. Kaiser TCPA/FTSA Settlement It has nothing to do with the privacy tracking case, and eligibility for one does not mean eligibility for the other.