Mercy Health Settlement: Eligibility, Payouts, and Claim Status

The Mercy Health settlement is a $7.5 million class action deal resolving claims that Bon Secours Mercy Health let tracking tools on its website and Mercy MyChart patient portal send patient information to companies like Facebook and Google without consent. A Hamilton County, Ohio judge approved it on August 19, 2025, and payments of about $35 per valid claim began going out on December 17, 2025.¹²

Who Was Eligible

The settlement class covers anyone who lived in Ohio, was a patient of Bon Secours Mercy Health, and logged into the Mercy MyChart patient portal between March 27, 2018, and December 31, 2021.¹

If you never used the MyChart portal during that window, or you lived outside Ohio, you are not part of this class, even if you were a Mercy patient during those years.

What Claimants Get Paid

Each class member who filed a valid, timely claim was eligible for a $35 cash payment. That figure is subject to adjustment: it can go up if the fund is under-utilized, or down on a pro-rata basis if the total value of claims exceeds the $7.5 million cap.³

The structure of the fund itself has two tiers. Mercy agreed to pay an initial $5 million, with an additional $2.5 million available on a claims-made basis if valid claims exceeded that amount. The fund also covers administrative costs, a service award of up to $18,000 for the named plaintiff, and attorneys’ fees of up to $2.1 million.¹

Beyond the cash, Mercy agreed to stop using specified digital analytics technologies on its web properties for at least two years. On the MyChart portal, Mercy cannot use any analytics tools, including Google Analytics. On mercy.com and blog.mercy.com, a long list of platforms is banned, including Google Doubleclick, Google Ads, Meta, Amazon, TikTok, Pinterest, LinkedIn (except on its careers page), Oracle, Twitter/X, Hotjar, and CrazyEgg. Mercy must send plaintiff’s counsel an annual sworn declaration confirming compliance.⁴

Key Dates (All Passed)

The parties reached an agreement in principle on December 18, 2024, following mediation with retired Judge Laura C. Inveen.⁴¹²

You can no longer file a new claim, opt out, or object.

If You Filed a Claim but Haven’t Been Paid

Claimants who selected a paper check and still have not received one can contact the settlement administrator to request a reissue:

Phone: 1-888-859-3670
Email: info@MercyHealthSettlement.com
Mail: Mercy Health Privacy Litigation, Settlement Administrator, PO Box 6909, Portland, OR 97228-6909

What the Lawsuit Alleged

The case, John Doe v. Bon Secours Mercy Health (Case No. A 2002633), was filed in the Hamilton County Court of Common Pleas in Cincinnati. The plaintiff alleged that Mercy embedded code on mercy.com and the Mercy MyChart patient portal that transmitted patients’ personally identifiable information and protected health information to outside companies, including Facebook, Google, Twitter, Bing, LinkedIn, Hotjar, Crazy Egg, LivePerson, The Trade Desk, and Adobe.⁴

According to the complaint, the disclosures happened while patients used the portal to search for doctors, look up conditions and treatments, access medical records and test results, and schedule appointments. The legal claims included invasion of privacy (intrusion upon seclusion) and breach of contract.³

Mercy denied all wrongdoing and specifically denied that any medical information from the portal or website was ever shared with Facebook or Google.¹

Other Mercy Health Settlements and Cases

The tracking-tool case is not the only Mercy Health matter you may have heard about. Two others are separate proceedings with different classes and different facts.

The 2020 Insider Breach ($1.8 Million Settlement)

On October 7, 2020, Mercy discovered that an employee had accessed patient medical records multiple times without a legitimate work reason. The breach affected 11,187 individuals, and exposed data included names, addresses, dates of birth, medical record numbers, treatment and clinical information, radiological images, and in some cases health insurance numbers.⁵

Mercy denied wrongdoing and settled for $1.8 million. Class members could claim a flat $90 payment or up to $300 for documented expenses and lost time (at $30 per hour). Mercy terminated the employee, provided free credit monitoring, and said it had found no instances of fraud tied to the breach. The final approval hearing was held on June 18, 2024.⁵

The 2024 Employee Data Breach

A more recent case involves a Workday test environment used for finance and human resources. Unauthorized access occurred between April 10 and July 31, 2024. No patient data was involved. The compromised information belonged to current and former employees of Bon Secours Mercy Health, Roper St. Francis Healthcare, and partner organizations, and included names, birth dates, Social Security numbers, addresses, and other demographic details.⁶

A proposed federal class action, Lausche v. Bon Secours Mercy Health, Inc. (Case No. 1:24-cv-00594), was filed on October 18, 2024, in the U.S. District Court for the Southern District of Ohio.⁷ In July 2025, Judge Douglas R. Cole dismissed some claims but allowed negligence and breach of implied contract claims to proceed. As of April 2026, the plaintiffs filed an unopposed motion for preliminary approval of a class action settlement, indicating the parties have reached a deal, though terms have not been publicly finalized.⁸

1
Mercy Health Settlement. Frequently Asked Questions
2
Mercy Health Settlement. Mercy Health Privacy Litigation Settlement
3
Bon Secours Mercy Health Settlement. Class Action Settlement Notice
4
Mercy Health Settlement. Settlement Agreement
5
HIPAA Journal. Mercy Health $1.8 Million Settlement Insider Breach
6
ClassAction.org. Bon Secours Mercy Health Data Breach
7
Bloomberg Law. Bon Secours Mercy Health Hit With Class Action Over Data Breach
8
PACER Monitor. Lausche v. Bon Secours Mercy Health, Inc.