Shady Grove Fertility Lawsuits: Data Breach and Pixel Tracking

Shady Grove Fertility lawsuits fall into four distinct buckets: an active class action accusing the clinic of leaking patient data to Google, Meta, and Microsoft through website tracking pixels; a $5.75 million data breach settlement finalized in April 2024 involving its parent management company; a dismissed employment retaliation suit from a former physician; and a dismissed medical malpractice case brought by a former patient couple. The privacy litigation is the most consequential piece still moving.

The Pixel Tracking Class Action Is Active

On August 14, 2024, two anonymous plaintiffs filed a proposed class action against Shady Grove Reproductive Science Center in the U.S. District Court for the District of Maryland.¹ The complaint alleges Shady Grove embedded tracking software from Google, Meta, and Microsoft on its patient-facing website, letting those companies collect health information without patient consent.²

The data allegedly transmitted included patient names, addresses, dates of birth, email addresses, phone numbers, the types of fertility services being sought, which physicians patients searched for, specific clinic locations, and appointment details.² One plaintiff was an existing patient; the other was only a prospective patient, an important distinction because the alleged tracking captured data from anyone browsing the site.³

The September 2025 Ruling Kept the Case Alive

Shady Grove moved to dismiss. On September 30, 2025, Judge Adam B. Abelson denied the motion in full and allowed all four claims to move into discovery: intrusion upon seclusion under Maryland common law, unjust enrichment, violations of the Maryland Consumer Protection Act, and violations of the Maryland Wiretapping and Electronic Surveillance Act.³

The judge made several findings that mattered. Unauthorized disclosure of personally identifiable health information was itself a legally recognizable privacy injury sufficient for standing. Sharing intimate details about fertility treatment through hidden trackers would be “highly offensive” to a reasonable person, and a general website privacy policy did not amount to meaningful consent. Embedding third-party pixels is a deliberate, multi-step process, which satisfied the “willfulness” element of Maryland’s wiretapping statute. The court noted that discovery might eventually show the shared information was not personally identifiable, but at the pleading stage the plaintiffs’ allegations had to be accepted as true.³

The case remains active. The most recent docket activity was recorded in October 2025.¹

The US Fertility Data Breach Settlement

Between August 12 and September 14, 2020, hackers infiltrated the network of US Fertility LLC, the management services organization co-founded by Shady Grove, and installed ransomware. Before encrypting files, the attackers exfiltrated personal data belonging to roughly 884,000 to 900,000 patients, including names, addresses, dates of birth, Social Security numbers, medical records, and financial information. US Fertility disclosed the breach in November 2020.⁴

Lawsuits filed in January 2021 were consolidated into In re: US Fertility, LLC Data Security Litigation, Case No. 8:21-cv-299, in the U.S. District Court for the District of Maryland.⁵ The plaintiffs alleged that US Fertility and Shady Grove failed to implement reasonable cybersecurity measures.⁴

What Class Members Actually Received

US Fertility denied wrongdoing but agreed to a $5.75 million settlement fund and committed to improved cybersecurity for at least three years. Class members could claim up to $50 without documentation, up to four hours of lost time at $25 per hour, and documented out-of-pocket losses up to $15,000. Patients whose data was stolen from a California clinic were eligible for an additional payment of up to $200 under that state’s Confidentiality of Medical Information Act.⁵

Final approval came on April 18, 2024. The settlement administrator identified 881,215 unique class member records, and 61,563 people submitted valid claims, a rate of roughly 7% that ran higher than expected. Because of the elevated claim volume, payouts were reduced pro rata, and claimants received about 50% to 55% of the projected amounts. The base cash payment worked out to roughly $26.95 rather than $50.⁶ The claim window is closed and this litigation is fully resolved.

Kulshrestha v. Shady Grove: A Dismissed Employment Suit

Dr. Sunita Kulshrestha, a reproductive endocrinologist who joined Shady Grove in 2014, sued the clinic in federal court after her termination. In August 2021 she asked to work from home and take FMLA leave to care for her ailing mother. On August 30, 2021, she was given written notice her employment would end, with a final day of February 27, 2022.⁷

Kulshrestha filed suit in December 2022 in the U.S. District Court for the Eastern District of Virginia, bringing claims for breach of contract, retaliation under the Virginia Whistleblower Protection Law, defamation, and FMLA retaliation.⁸ Judge T.S. Ellis III ruled the one-year statute of limitations on the whistleblower claim ran from the date she received her termination notice, not her final workday six months later, and dismissed that claim with prejudice as untimely.⁷ The breach of contract claim was dismissed without prejudice so the parties could arbitrate in Maryland.

Zheng v. Shady Grove: A Dismissed Malpractice Case

Jingjing Zheng and Zhongan Wang, a married couple, filed a pro se complaint against Shady Grove in Montgomery County, Maryland, in 2022, alleging what they described as “fertility fraud.” They said the clinic provided false preimplantation genetic testing results, failed to perform contracted IVF procedures including ICSI fertilization and embryo transfer, and could not account for several of the 10 oocytes retrieved. They sought $560,000 in damages.⁹

The Circuit Court dismissed the case on May 10, 2022, holding that the claims were medical malpractice in substance and that the plaintiffs had failed to meet two mandatory Maryland prerequisites: submitting the claim to the Health Care Alternative Dispute Resolution Office and filing a Certificate of Qualified Expert. The Appellate Court of Maryland affirmed on December 7, 2022.⁹ The Supreme Court of Maryland denied certiorari on April 25, 2023, and denied reconsideration in June 2023.¹⁰ The couple then filed a petition for certiorari with the U.S. Supreme Court, received by the Clerk’s Office on December 1, 2023, arguing that the lower courts had mischaracterized their fraud claims as malpractice.¹¹

Who You’re Actually Suing: Shady Grove and US Fertility

The name on the clinic door is not the whole picture. In May 2020, Shady Grove Fertility partnered with Amulet Capital Partners, a Greenwich, Connecticut private equity firm, to form US Fertility, a physician-led management services organization providing administrative, financial, and operational support to fertility practices.¹² Founding member practices also included Fertility Centers of Illinois, Reproductive Science Center of the San Francisco Bay Area, and IVF Florida.¹³

By late 2025, US Fertility operated with more than 200 physicians across 121 clinics in 20 states.¹⁴ That structure is why the 2020 breach lawsuit named US Fertility as the primary defendant while the pixel-tracking suit names Shady Grove Reproductive Science Center directly. If you are a patient trying to figure out which entity affects you, the answer usually depends on which clinic you visited and what year the events occurred.

1
CourtListener. Doe v. Shady Grove Reproductive Science Center, P.C.
2
Bloomberg Law. Shady Grove Fertility Sued Over Info Shared With Google, Meta
3
U.S. District Court for the District of Maryland. Doe v. Shady Grove Reproductive Science Center, Memorandum Opinion
4
HIPAA Journal. U.S. Fertility Data Breach Settlement
5
TZ Legal. $5.75 Million Data Breach Class Action Settlement – US Fertility
6
U.S. District Court for the District of Maryland. Order Granting Plaintiffs’ Motion for Final Approval of Class Action Settlement
7
Virginia Lawyers Weekly. Delay Dooms Doctor’s VWPL Claim
8
FindLaw. Kulshrestha v. Shady Grove Reproductive Science Center
9
Appellate Court of Maryland. Zheng v. Shady Grove Fertility
10
Supreme Court of the United States. Zheng v. Shady Grove Fertility, Certiorari Petition
11
Supreme Court of the United States. Zheng v. Shady Grove Fertility, Certiorari Petition
12
US Fertility. Amulet Capital and Shady Grove Fertility Form US Fertility
13
Shady Grove Fertility. US Fertility Announcement
14
Fertility Bridge. US Fertility L Catterton Investment