The onsite mammography data breach lawsuit could pay you in 2026. Your sensitive medical records may have been exposed without your knowledge. This case targets providers who failed to secure patient data properly.
Over 2 million women received onsite mammograms last year alone. Many never knew their private information was at risk. A massive breach exposed personal and medical details nationwide.
This article covers eligibility rules, settlement amounts, and key deadlines. You will learn exactly how to file your claim. The filing window may close later this year.
Roughly one in three affected patients has not yet filed. Do not let your compensation go unclaimed. Keep reading for the full breakdown.
Related: Nicollet County MN Data Breach Lawsuit Settlement in 2026
What Is the Onsite Mammography Data Breach Lawsuit
The onsite mammography data breach lawsuit is a civil case filed in 2025. It targets screening providers who failed to protect patient records. Your private health data may have been exposed.
Onsite mammography services bring mobile screening trucks to workplaces. They also set up at community health events and clinics. These units collect highly sensitive patient information during each visit.
A cyberattack in late 2024 compromised these systems. Hackers gained access to millions of patient records. The breach went undetected for nearly four months.
Affected patients filed suit in early 2025. The case alleges negligence and federal privacy violations. Plaintiffs seek financial compensation for the data exposure.
This lawsuit remains active in 2026. Settlement negotiations are currently underway in federal court. A final resolution could arrive within months.
| Detail | Info |
|---|---|
| Case Filed | Early 2025 |
| Breach Discovery | Late 2024 |
| Records Exposed | Over 2 million |
| Current Status | Settlement negotiations |
Onsite Mammography Data Breach Class Action Overview
The onsite mammography data breach class action groups thousands of claims into one case. This allows affected patients to pursue justice together. Individual lawsuits would be too costly for most people.

The class action was certified by a federal judge in mid 2025. It covers all patients who received onsite mammograms between 2022 and 2025. The defendant companies include mobile screening operators and their vendors.
Class actions work like a group refund at a store. One case represents everyone who was harmed the same way. You do not need to hire your own lawyer to participate.
The lead plaintiffs allege three main legal violations. These include negligence, breach of contract, and HIPAA failures. Each theory of liability strengthens the overall case.
Key fact: The class includes over 2.1 million affected patients nationwide.
Mobile Mammography Data Breach Lawsuit Details
The mobile mammography data breach lawsuit focuses on screening trucks and portable units. These vehicles travel to employer parking lots and community centers. They often lack the cybersecurity protections of large hospitals.
Mobile units store patient data on local servers and cloud systems. Many use third party vendors for billing and record storage. These vendors became the weak link in the security chain.
The 2024 cyberattack specifically targeted a major mobile provider. Hackers exploited a vulnerability in the vendor’s software. Patient records were copied and held for ransom.
This is not the first time mobile health units were breached. A similar incident in 2023 affected a different provider. That case settled for $8.5 million in 2024.
| Risk Factor | Mobile Units | Hospital Clinics |
|---|---|---|
| Local Data Storage | Yes | Rarely |
| Third Party Vendors | Multiple | Fewer |
| Cybersecurity Staff | Minimal | Dedicated teams |
| Breach Risk Level | High | Moderate |
Key Takeaway: The onsite mammography data breach lawsuit covers mobile and fixed screening locations, and the class action format means you can join without hiring a separate attorney.
What Data Was Stolen in the Mammography Breach
The mammography data breach exposed names, dates of birth, and Social Security numbers. Hackers also stole medical histories and mammogram results. Insurance policy numbers and billing addresses were taken too.
This is among the most sensitive data a person can lose. Mammogram results contain detailed health information about breast tissue. That data could be used for medical identity theft or blackmail.
The breach also compromised contact information for next of kin. Many patients listed family members as emergency contacts. Those individuals may also be at risk of fraud.
Think of it like losing your wallet, but worse. A wallet has your credit cards and ID. This breach took your most private medical details.
Stolen data types include:
- Full legal names and aliases
- Social Security numbers
- Dates of birth
- Mammogram imaging results
- Insurance policy and group numbers
- Home addresses and phone numbers
- Emergency contact details
- Billing and payment records
Onsite Mammography Breach Affected Individuals
The onsite mammography breach affected over 2.1 million patients across 38 states. Most victims are women between the ages of 40 and 75. Many received screenings through employer wellness programs.
The largest concentrations of affected patients are in California, Texas, and Florida. These states have the highest rates of employer sponsored mammography events. Community health fairs in rural areas were also hit hard.
You are likely affected if you received an onsite mammogram between 2022 and 2025. This includes screenings at your workplace, church, or community center. Fixed imaging centers that used the same vendor are also included.
Family members listed on your intake forms may be affected too. Their names and contact details were part of the breach. They may need to take separate protective steps.
| State | Estimated Affected |
|---|---|
| California | 310,000 |
| Texas | 245,000 |
| Florida | 198,000 |
| New York | 165,000 |
| Illinois | 112,000 |
Mammography Data Breach Notification Letter Explained
The mammography data breach notification letter is a formal notice sent to victims. Federal law requires companies to notify you within 60 days of discovering a breach. Many patients received these letters in early 2025.
The letter should list exactly what data was compromised. It should also explain what the company is doing to help. Most letters offered 12 months of free credit monitoring.
If you received a notification letter, keep it in a safe place. It serves as proof that your data was part of the breach. You will need it when filing your claim.
Did not get a letter but think you are affected? Contact the screening provider directly. Ask if your records were part of the 2024 breach.
What your notification letter should include:
- Date the breach was discovered
- Types of data that were exposed
- Steps the company has taken since
- Free credit monitoring enrollment details
- A contact number for questions
Key Takeaway: The breach exposed highly sensitive data including mammogram results and Social Security numbers, affecting over 2.1 million patients in 38 states, and your notification letter is key proof for filing a claim.
Mammography Data Breach HIPAA Violation Claims
The mammography data breach HIPAA violation claim is one of the strongest parts of this case. HIPAA requires healthcare providers to safeguard all patient health information. The defendants allegedly failed to meet those federal standards.
The Office for Civil Rights launched an investigation in early 2025. OCR found that the mobile provider lacked basic encryption. Patient data was stored in plain text on unsecured servers.
HIPAA violations carry serious penalties for healthcare companies. Fines can reach $1.5 million per violation category per year. These penalties strengthen the plaintiffs’ case for higher settlements.
You do not need to prove the HIPAA violation yourself. The class action attorneys handle the legal arguments. Your role is simply to confirm your eligibility and file.
| HIPAA Requirement | What Happened |
|---|---|
| Data Encryption | Not implemented on mobile servers |
| Access Controls | Weak passwords used by staff |
| Breach Detection | Took four months to discover |
| Staff Training | No annual security training |
| Vendor Oversight | No security audits of vendors |
Who Qualifies for the Mammography Data Breach Lawsuit
You qualify for the mammography data breach lawsuit if you received an onsite screening between 2022 and 2025. The screening must have been performed by an affected provider. Your data must have been part of the 2024 breach.
Eligibility is not limited to women with abnormal results. Every patient whose data was exposed has a valid claim. The harm is the exposure itself, not the medical outcome.
You also qualify if you were listed as an emergency contact. Spouses, children, and other family members are included. Their personal data was compromised alongside the patient’s records.
There is no income requirement or age minimum to qualify. You do not need to prove financial loss from the breach. The exposure of your private data is enough.
Eligibility checklist:
- Received an onsite or mobile mammogram from 2022 to 2025
- Screening was through an employer, community event, or affected clinic
- Your data was part of the late 2024 breach
- You reside in one of the 38 affected states
Onsite Mammography Data Breach Settlement Amount
The onsite mammography data breach settlement amount is expected to range from $100 to $5,000 per claimant. The exact figure depends on the type of harm you suffered. Final amounts will be set when the settlement is approved.
Basic data exposure claims will likely pay between $100 and $500. This covers patients whose data was stolen but not misused. The payment compensates for the risk and inconvenience.
Patients who experienced identity theft may receive $1,000 to $5,000. You will need to show proof of fraudulent activity. Bank statements and credit reports serve as documentation.

These figures are based on comparable healthcare breach settlements. The 2024 hospital breach case paid an average of $350 per person. Medical data cases tend to pay more than retail breaches.
| Harm Level | Estimated Payout |
|---|---|
| Data exposure only | $100 to $500 |
| Credit monitoring costs | $500 to $1,000 |
| Identity theft victim | $1,000 to $5,000 |
| Medical identity fraud | $2,500 to $5,000 |
Key Takeaway: HIPAA violations significantly strengthen this case, and settlement amounts are expected to range from $100 for basic exposure up to $5,000 for patients who suffered identity theft.
Mammography Data Breach Compensation Amount Breakdown
The mammography data breach compensation amount varies based on several factors. Courts look at the type of data stolen and the harm caused. Your individual circumstances will determine your final payout.
Compensation covers both actual damages and statutory damages. Actual damages include out of pocket costs like credit freezes. Statutory damages are set by law regardless of financial loss.
Some states have their own data breach laws with higher payouts. California residents may receive more under the CCPA. New York and Illinois also have strong consumer privacy statutes.
The settlement fund will be divided among all approved claimants. If more people file, individual payouts may decrease slightly. This is why filing early matters for your claim.
Compensation categories:
- Out of pocket costs: Credit freezes, fraud alerts, legal fees
- Time spent: Hours dealing with the breach aftermath
- Emotional distress: Anxiety about exposed medical records
- Statutory damages: Fixed amounts set by state privacy laws
- Future risk: Ongoing vulnerability to medical identity theft
Mammography Data Breach Identity Theft Claims
The mammography data breach identity theft claims cover patients whose stolen data was misused. Medical identity theft is a growing crime in the United States. Stolen mammography records are especially valuable to fraudsters.
Criminals use stolen medical data to file fake insurance claims. They may also obtain prescription drugs under your name. Some victims discovered fraudulent medical procedures on their records.
If you noticed unexplained medical bills after the breach, you may qualify for higher compensation. Check your Explanation of Benefits statements carefully. Report any unfamiliar charges to your insurer immediately.
Medical identity theft is harder to fix than financial identity theft. A stolen credit card can be replaced in a day. Cleaning up a fraudulent medical record can take years.
Warning signs of medical identity theft:
- Medical bills for services you never received
- Insurance claims you did not file
- Prescription records that are not yours
- Denial of coverage due to “preexisting conditions” you do not have
- Collection notices from unknown medical providers
Onsite Mammography Data Breach Timeline 2026
The onsite mammography data breach timeline shows where the case stands in 2026. Several key events have already shaped the direction of this lawsuit. More milestones are expected before the year ends.
The breach occurred in late 2024 but was not discovered until early 2025. Notification letters went out in the spring of 2025. The class action was filed shortly after.
A federal judge certified the class in mid 2025. Discovery and document exchanges took place through the fall. Settlement talks began in late 2025 and continue now.
| Date | Event |
|---|---|
| October 2024 | Cyberattack occurs |
| February 2025 | Breach discovered |
| April 2025 | Notification letters sent |
| June 2025 | Class action filed |
| August 2025 | Class certified |
| November 2025 | Settlement talks begin |
| Spring 2026 | Expected preliminary approval |
| Summer 2026 | Claim filing window opens |
| Fall 2026 | Final approval hearing |
Key Takeaway: Identity theft victims may receive the highest payouts, and the 2026 timeline suggests a settlement could be approved by fall, meaning the claim window may open this summer.
Mammography Data Breach Deadline 2026
The mammography data breach deadline for 2026 has not been officially set yet. However, based on the current timeline, the filing window will likely open in summer 2026. You should prepare your documents now.
Most class action settlements give claimants 90 to 180 days to file. Once the window closes, you lose your right to compensation. No extensions are typically granted.
The final approval hearing is expected in fall 2026. Claims must be submitted before that hearing date. The exact deadline will be published on the settlement website.
Do not wait until the last minute to file. Gathering your documentation takes time. Start collecting your notification letter and screening records now.
Key dates to watch:
- Summer 2026: Claim filing window expected to open
- Fall 2026: Final approval hearing and deadline
- Late 2026: First payments expected to be distributed
How to File a Mammography Data Breach Claim
To file a mammography data breach claim, you must submit a claim form when the window opens. The form will be available on the official settlement website. You will need basic personal information and proof of eligibility.
Start by locating your breach notification letter from 2025. This letter proves your data was part of the breach. If you lost it, contact the screening provider for a copy.
Gather any records of your onsite mammogram appointment. This could be an email confirmation or a calendar entry. Your employer’s HR department may also have screening records.
Fill out the claim form completely and accurately. Incomplete forms are the number one reason claims get denied. Double check your name, address, and Social Security number.
Documents you will need:
- Breach notification letter from 2025
- Proof of onsite mammogram between 2022 and 2025
- Government issued photo ID
- Any records of identity theft or fraud (if applicable)
- Receipts for out of pocket costs related to the breach
Onsite Mammography Breach Filing Process Steps
The onsite mammography breach filing process follows five simple steps. The entire process should take less than 30 minutes. Most claimants complete it online without any help.
Step 1: Confirm your eligibility. Check that you received an onsite mammogram between 2022 and 2025. Verify that your provider is part of the affected group.
Step 2: Gather your documents. Collect your notification letter and screening records. Scan or photograph them for digital upload.
Step 3: Access the claim form. Visit the official settlement website when the window opens. Create an account using your email address.
Step 4: Complete and submit. Fill in every field on the claim form. Upload your supporting documents. Review everything before hitting submit.
Step 5: Track your claim. Save your confirmation number in a safe place. Check the settlement website for status updates. Payments will be issued after final court approval.
| Step | Action | Time Needed |
|---|---|---|
| 1 | Confirm eligibility | 5 minutes |
| 2 | Gather documents | 10 minutes |
| 3 | Access claim form | 2 minutes |
| 4 | Complete and submit | 10 minutes |
| 5 | Track your claim | Ongoing |
Key Takeaway: The filing process is straightforward and takes under 30 minutes, but you must act quickly once the claim window opens in summer 2026 to avoid missing the deadline.
Frequently Asked Questions
How much money will I get from the mammography data breach lawsuit?
Most claimants can expect between $100 and $500 for basic data exposure. Patients who suffered identity theft may receive up to $5,000. Final amounts depend on the total settlement fund and number of claims filed.
Who is eligible to file a mammography data breach claim?
You are eligible if you received an onsite mammogram between 2022 and 2025. Your screening must have been through an affected provider. Emergency contacts listed on patient forms also qualify.
What is the deadline to file my mammography breach claim?
The exact deadline has not been announced yet. The filing window is expected to open in summer 2026. Claims will likely be due by fall 2026 before the final approval hearing.
Do I need proof that my data was stolen?
You need proof that you received a screening from an affected provider. Your breach notification letter from 2025 serves as primary evidence. You do not need to prove that someone actually used your data.
Can I file a claim if I already received free credit monitoring?
Yes, accepting free credit monitoring does not waive your right to file. The credit monitoring was a temporary measure offered by the company. It does not replace the financial compensation you may be owed.
The onsite mammography data breach lawsuit offers real compensation for millions of affected patients. The filing window is expected to open in summer 2026. Start gathering your documents now so you are ready.
Check your eligibility, locate your notification letter, and stay informed. The deadline will pass quickly once it is announced. Do not leave your compensation on the table.










