About the HealthEC Data Breach Lawsuit & Settlement
Following a 2023 data breach that allegedly put the personal health information of more than 1.5 million patients at risk, health technology company HealthEC was sued for claims of negligence. Several HealthEC clients were named as additional defendants, including Community Health Care Systems, Corewell Health, MD Valuecare, LLC, and Oakwood Accountable Care Organization, LLC (d/b/a Beaumont ACO).
The defendants claim they committed no wrongdoing but have agreed to a settlement of $5.48 million to resolve the legal allegations. The settlement received preliminary approval in June 2025, allowing eligible patients to file a claim for compensation.
Continue reading to learn if you qualify for the settlement—and how to make a claim.
Who Qualifies For The HealthEC Data Breach Settlement?
You must meet a few requirements to qualify to make a claim for a portion of the $5.48 million settlement. These include:
- You must have been a patient at Community Health, Corewell, MD Valuecare, and/or Beaumont
- Your protected health information and/or personal information must have been compromised in the HealthEC data breach announced in December 2023
Readers should note that any class member whose information was accessed during the HealthEC data breach—even if no fraud or identity theft resulted—may be eligible to submit a claim.
All identified class members were emailed or mailed a settlement notice. If you did not receive a notice but believe you are a class member, you can contact the Settlement Administrator at 833-699-9199 or [email protected] to verify your status.
How Much Will Claimants Receive?
The total settlement fund is $5.48 million, but individual payouts will depend on the total amount of valid claims and a variety of other factors. An eligible class member may receive a portion of the remaining settlement amount after attorneys’ expenses, Medical Shield Complete service fees, and other administrative costs are taken out.
Final payout amounts will also depend on the nature of a class member’s claim:
- Out-of-pocket loss claims: Can be claimed by class members who experienced fraud or identity theft following the data breach. These include losses related to identity theft or fraud and/or expenses for credit freezes, notary services, credit monitoring, and more.
- Lost time claims: Can be claimed by class members who invested time in fraud prevention or remediation following the data breach. Those who suffered eligible out-of-pocket losses can typically claim up to 10 hours at $25 per hour; otherwise, 4 hours of time can be claimed at $25 per hour.
- Alternative cash payments: For class members not claiming out-of-pocket expenses or lost time. Residents of California as of July 14, 2023, may claim $50, while all others can claim $25.
Regardless of claim type, all class members may also enroll in a minimum of three years of Medical Shield Complete at the defendants’ expense. This monitoring service helps prevent fraud and identity theft and includes medical record monitoring, credit monitoring, dark web monitoring, security freezes, and a $1-million identity theft insurance policy.
How Do I Make A Claim?
Eligible class members can submit a claim online at the official HealthEC settlement page. It’s also possible to print out a PDF version of the claim form to mail in. Paper claims should be mailed to the Settlement Administrator at:
HealthEC Data Breach Litigation
Settlement Administrator
P.O. Box 301134
Los Angeles, CA 90030-1134
All claims must be received by November 18, 2025, to be considered. Class members can choose to receive their payouts via electronic payment (only for online claims) or paper check.
What Do I Need To Make A Claim?
Proof may be needed to claim a share of the HealthEC settlement. See below for generally required documentation for each claim type.
- Online claims: Claim ID and PIN from your mailed or emailed settlement notice
- Paper claim forms: Claim ID and PIN from your mailed or emailed settlement notice, or the email address used for your HealthEC account
- Lost time claims: A summary of the actions you took, including duration
- Out-of-pocket loss claims: Proof of expenses related to the data breach, including bank statements, credit card statements, invoices, receipts, or other relevant documentation
For alternative cash payments or credit monitoring services, no additional proof is required beyond your claim ID, PIN, and/or email address associated with your HealthEC account.
HealthEC Data Breach Settlement Fast Facts
Deadline to File a Claim: November 18, 2025
Payout Amount: ~$25+ and free credit monitoring
Proof Needed: Claim ID number, PIN, and/or email address associated with your HealthEC account for alternative cash payments and/or credit monitoring; documentation required for lost time claim and out-of-pocket loss claims
Add Comment