Major Health Settlements: Premiums, Pixel Tracking, and Data Breaches

Major health settlements paying out in 2025 and 2026 cover four main problems: inflated insurance premiums, hospitals quietly sharing patient data with advertisers, cyberattacks that leaked medical records, and anticompetitive drug pricing. Whether you can claim money depends on who insured you, where you got care, which hospital’s website you used, and when. The biggest fund in play is the $2.67 billion Blue Cross Blue Shield subscriber settlement, which started sending payments in May 2026.1In re: Blue Cross Blue Shield Antitrust Litigation MDL 2406

Insurance Premium Settlements

Blue Cross Blue Shield Subscribers

The BCBS subscriber settlement grew out of antitrust claims in the Northern District of Alabama alleging the Blue Cross entities limited competition among themselves and pushed premiums higher. It became final on September 23, 2025, after the U.S. Supreme Court declined to take up further appeals in 2024.

The claim deadline passed in November 2021, so new claims are no longer being accepted. If you filed back then and your claim was approved, payments began going out in May 2026 by virtual or physical debit card. After roughly $770 million in fees and administrative costs came off the top, the average payout worked out to about $333, but amounts vary with how much you paid in premiums. One claimant reported receiving $77.98, which gives a sense of the lower end.

A separate $2.8 billion fund covers hospitals and physician practices rather than individual subscribers. Notices to those providers went out in February 2026. Nearly 6,500 providers opted out, including facilities tied to Mayo Clinic, Providence, University of Michigan Health, and AdventHealth.

Sutter Health Policyholders in Northern California

Sutter Health agreed to pay $228.5 million to settle claims it used its market power in Northern California to force insurers into restrictive contracts that drove up premiums for roughly three million people. Magistrate Judge Laurel Beeler gave final approval on November 6, 2025 in Sidibe, et al. v. Sutter Health (Case No. 3:12-cv-4854-LB).

You may be a class member if you paid premiums to Aetna, Anthem Blue Cross, Blue Shield of California, Health Net, or UnitedHealthcare between January 1, 2011 and March 8, 2021, while living or working in one of 39 designated California counties. Payouts are proportional: your share depends on your total premiums compared with everyone else’s.

Hospital Website Tracking Settlements

The fastest-growing category of healthcare settlements involves tracking pixels. These are small pieces of code from companies like Meta and Google that hospitals embedded on their websites and patient portals, often without clearly telling patients. The code could transmit information about what pages you viewed, what appointments you booked, or what conditions you searched for. Between 2023 and 2025, healthcare providers paid more than $100 million to resolve claims tied to this practice.

Kaiser Permanente

Kaiser Foundation Health Plan agreed to a settlement of $46 million, potentially rising to $47.5 million, over tracking tools on authenticated pages of its websites and apps that sent personal and health data to Adobe, Microsoft, Google, and X. Kaiser disclosed that up to 13.4 million people may have been affected.

The class covers Kaiser members in California, Colorado, Georgia, Hawaii, Maryland, Oregon, Virginia, Washington, and the District of Columbia who accessed authenticated Kaiser pages between November 2017 and May 2024. Valid claims filed by March 12, 2026 were estimated at $20 to $40 each. A fairness hearing was set for May 7, 2026. Kaiser denied the allegations.

Aspen Dental

Aspen Dental Management settled for about $18 million in Donnelly, et al. v. Aspen Dental Management, Inc. (Case No. 2025LA000036) over tracking on its online appointment booking tool. The class splits in two: people who booked between February 20, 2022 and June 1, 2023 share roughly $2.7 million pro rata, while people who booked between June 2, 2023 and January 1, 2025 can claim up to $15 from a $16 million fund. Final approval came on October 20, 2025, and payments began on February 27, 2026.

Mass General Brigham

Mass General Brigham agreed to $18.4 million for website visitors between May 23, 2016 and July 31, 2021 whose data was collected through web analytics tools. Class members are eligible for up to $100. The hospital system denied the allegations.

HealthPartners

A $6 million settlement in In re Group Health Plan Litigation (Case No. 23-cv-00267-JWB-DJF) resolved claims that HealthPartners used tracking pixels on healthpartners.com and virtuwell.com that sent browsing data to Meta and Google. The class includes people who logged into those sites between January 1, 2018 and November 10, 2023. Final approval came on July 9, 2025.

WakeMed

WakeMed Health and Hospitals in North Carolina settled for $2.45 million in Weddle v. WakeMed Health & Hospitals (Case No. 22CVS013860-910), covering roughly 500,000 patients whose data was allegedly shared with Meta through its tracking pixel. Final judgment was entered on November 17, 2025. Only 16 class members opted out and one objected.

Northwell Health

Northwell Health in New York faces a settlement in Kaplan v. Northwell Health, Inc. (Case No. 520763/2025) over tracking on its website and the FollowMyHealth patient portal. Subclass 1, patients who logged into FollowMyHealth or booked appointments on northwell.edu between January 1, 2020 and December 31, 2023, is eligible for $15 cash plus 12 months of privacy monitoring. Subclass 2, all other Northwell patients from January 2020 through July 25, 2024, is eligible for the monitoring service only. A final approval order came down on April 23, 2026, but a notice of appeal has been filed, so payment timing is uncertain.

Other Pixel Settlements Worth Checking

Several other providers resolved pixel claims in the same window. Advocate Aurora Health settled for $12.25 million (final approval July 2024, Eastern District of Wisconsin), which paid less than five dollars per class member because so many people filed. Novant Health settled for $6.66 million, University of Rochester Medical Center for $2.85 million, Loyola University Medical Center for $2.67 million, and Mount Nittany Health for $1.8 million. SSM Health settled claims involving tracking on its MyChart patient portal between July 2020 and February 2023; approved class members received $31.50 each, with payments distributed on March 31, 2026.

Data Breach Settlements

If your medical records were caught up in a hospital or health vendor cyberattack, you may be able to claim both a flat payment and reimbursement for documented losses like fraud or time spent dealing with the breach.

Hospital Sisters Health System

HSHS reached a $7.6 million settlement after a cyberattack between August 16 and August 27, 2023 knocked out systems across the network and affected roughly 869,000 to 883,000 patients. Judge Adam Giganti finalized it on December 10, 2025. The claim deadline was November 14, 2025.

HealthEC

HealthEC, LLC, a data analytics vendor, agreed to $5.48 million in Lempinen v. HealthEC, LLC (Case No. 2:24-cv-00026) after an intrusion between July 14 and July 23, 2023 copied files on about 1.67 million patients of providers including Corewell Health and Beaumont ACO. Social Security numbers, medical records, and insurance details were exposed. The claim deadline was November 18, 2025, with a final approval hearing on January 12, 2026.

Capital Health

Capital Health Systems agreed to a $4.5 million fund in Bruce Graycar, et al. v. Capital Health Systems, Inc. (Civil Action No. 3:23-CV-1418) after a November 11–26, 2023 incident potentially exposed Social Security numbers and clinical information. Class members can claim up to $5,000 for documented losses or an estimated $100 flat payment without documentation, plus three years of free credit monitoring. The claim deadline was April 6, 2026, with a final approval hearing on July 14, 2026.

Community First Medical Center

Community First Medical Center in Chicago agreed to a $1 million settlement after an intruder accessed its network on July 12, 2023, potentially affecting about 216,000 patients. The claim deadline was April 2, 2026, and the settlement was awaiting final approval in early 2026 with a hearing initially set for March 25, 2026.

Outcomes One

Outcomes One settled for $1.7 million in Silva, et al. v. Outcomes One, Inc. (Case No. CACE-25-019099) after a July 1, 2025 phishing attack compromised an employee email account holding data on roughly 257,500 people, including medication information. Class members could claim up to $3,500 for documented losses or an estimated $75 without documentation, plus a year of medical data monitoring. Final approval came on May 26, 2026.

Xyrem Prescription Drug Settlement

Jazz Pharmaceuticals and Hikma Pharmaceuticals agreed to pay a combined $195 million to resolve In re Xyrem (Sodium Oxybate) Antitrust Litigation in the Northern District of California. The claim is that Jazz used patent litigation settlements and regulatory tactics to keep generic competitors off the market for the narcolepsy drug Xyrem, keeping its price high. Jazz contributed $145 million and Hikma $50 million. The class covers entities that paid for or reimbursed Xyrem or Xywav purchases in designated states between January 1, 2017 and May 16, 2025, with a minimum payment of $15. Final approval came in October 2025. This settlement is directed at payers rather than individual patients paying copays. Jazz denied wrongdoing.

How to Tell if You Qualify

Eligibility in each of these cases turns on four questions: who your insurer or provider was, where you lived or got care, when the conduct happened, and whether you filed by the claim deadline. The window to file for the BCBS subscriber settlement closed in November 2021, so that money is only moving to people who already filed. Many of the pixel and breach deadlines fell in late 2025 or early-to-mid 2026, and a few, including Capital Health, remain open into mid-2026.

If you think you were a patient at any of the hospitals or health systems named above during the relevant period, check the official settlement website for that case. Payment amounts vary with how many people file: Advocate Aurora’s high claim rate dropped payouts below five dollars, while narrower cases like SSM Health paid $31.50 per person. For breaches, the flat payment is usually easier to claim, but documented losses can be worth significantly more if you kept records.

  • 1
    In re: Blue Cross Blue Shield Antitrust Litigation MDL 2406