Latest Update (as of September 26, 2026): One of the more sizable new hospital settlements to emerge since this article was last touched is a Cone Health deal, reported August 12, 2026, resolving pixel-tracking claims for roughly 375,000 patients who used the Cone Health MyChart portal or website forms between September 2016 and November 2022. Claims for that settlement close October 5, 2026. Separately, the $750,000 Memorial Health Services (MemorialCare) settlement — covered in this article’s earlier update — held its final approval hearing on September 17, 2026; the outcome of that hearing has not yet been publicly confirmed. Several other hospital-specific settlements (Banner Health, Bayhealth, Duke) remain at various claim or approval stages, underscoring that this is still a hospital-by-hospital process rather than one unified case.
Last updated: September 2026
Millions of Americans who used the MyChart patient portal may have had their private health information secretly shared with Facebook and Google without ever giving consent. The my chart lawsuit is now one of the most significant healthcare privacy cases in the country, with dozens of hospital systems named as defendants and patients across the United States potentially entitled to compensation.
This is not a single lawsuit. It is a web of class action cases and federal complaints targeting hospitals, the software behind MyChart, and the tech giants that collected the data.
In this article, you will learn exactly what happened, which hospitals are involved, whether you qualify, how much you could receive, and what steps to take before the 2026 filing deadlines close.
One number puts this in perspective: researchers found Meta Pixel embedded on the patient portals of at least 33 major health systems, potentially exposing the private health data of tens of millions of patients.
What Is the My Chart Lawsuit?
The my chart lawsuit refers to a series of class action lawsuits filed against hospitals and health systems that used tracking technology on the MyChart patient portal, resulting in patients’ private health data being transmitted to third parties including Meta and Google.
MyChart is an online patient portal built on software developed by Epic Systems. Patients use it to schedule appointments, view test results, message doctors, and manage prescriptions.
The problem? Many of those hospitals embedded invisible tracking tools called pixels inside the portal. When patients logged in, those pixels sent data about their actions, including which medications they viewed or which appointments they booked, directly to Facebook and Google.
That data transfer allegedly happened without patient knowledge or consent, which is where the lawsuits come in.
| Case Type | Details |
|---|---|
| Type of Action | Class Action Lawsuits |
| Main Defendants | Hospitals, Health Systems, Meta, Google |
| Software at Center | Epic Systems MyChart Portal |
| Core Allegation | Unauthorized sharing of private health data |
| Primary Laws Cited | HIPAA, ECPA, State Privacy Statutes |
MyChart Lawsuit 2026: What Is New This Year?
The mychart lawsuit 2026 timeline is moving fast, with several cases entering settlement negotiation phases and new court rulings reshaping who can file.
Several of the earlier class actions were consolidated into multi-district litigation, or MDL, which speeds up the discovery process. Courts in California and Illinois have both seen significant activity in these cases heading into 2026.
New plaintiffs are still being added in some jurisdictions. If you used MyChart through a covered hospital between 2018 and 2024, you may still be within a filing window depending on your state’s statute of limitations.
The FTC and the HHS Office for Civil Rights have both signaled increased enforcement around hospital data practices, which adds regulatory pressure on top of the private civil lawsuits already in motion.
| 2026 Milestone | Expected Timing |
|---|---|
| MDL Discovery Phase | Ongoing through mid-2026 |
| Settlement Negotiations | Active in multiple cases |
| New Claim Filing Windows | Open in several jurisdictions |
| Court Rulings on Class Certification | Expected Q2 to Q3 2026 |
What Is the MyChart Patient Portal Lawsuit About?
The MyChart patient portal lawsuit is about one thing at its core: hospitals sharing your most sensitive health information with advertising companies without telling you.
Think of it like this. You walk into your doctor’s office, and unknown to you, a company films the conversation and sends the footage to advertisers. That is roughly the digital equivalent of what the lawsuits allege happened on the MyChart portal.
Patients who logged in to check lab results, request prescription refills, or schedule cancer screenings may have had those specific actions transmitted to Meta and Google. Those companies then used the data for targeted advertising.
The lawsuits argue this is not just a technical glitch. It is a deliberate design choice that violated patient privacy rights and federal law.
Core Claims in the Lawsuit:
- Hospitals intentionally embedded tracking pixels on password-protected patient portals
- Data was transmitted to Meta and Google without patient authorization
- Patients were never informed their health data would be used for ad targeting
- The sharing violated HIPAA, state wiretapping laws, and consumer protection statutes
Key Takeaway: The MyChart patient portal lawsuit is not about a hacker stealing data. It is about hospitals giving your private health information to advertising companies through hidden tracking tools.
Epic Systems and the MyChart Lawsuit Explained
Epic Systems is the Wisconsin-based company that built the MyChart software used by hundreds of hospitals across the country. The epic systems mychart lawsuit question is complicated: Epic is named in some cases, but most lawsuits primarily target the hospitals themselves.
Here is why. Epic provided the platform, but individual hospitals made the decision to embed third-party tracking pixels inside it. That means the hospitals bear primary legal responsibility for the unauthorized data sharing in most complaints.
That said, some plaintiffs have argued Epic should have built privacy safeguards into the platform and warned hospitals about the risks. Epic has disputed its role in the privacy violations and maintains that its software is HIPAA-compliant when used correctly.
Several cases are actively litigating the question of Epic’s liability separately from hospital liability. Expect court decisions on this issue in 2026.
| Party | Role | Liability Status |
|---|---|---|
| Epic Systems | Software developer for MyChart | Named in some suits; disputes primary liability |
| Hospital Defendants | Embedded tracking pixels on portals | Primary defendants in most class actions |
| Meta Platforms | Received health data via pixel | Defendant in related but separate suits |
| Google LLC | Received data via Analytics | Named in multiple complaints |
Which Hospitals Were Sued for MyChart Data Sharing?
Dozens of major hospital systems have been sued for mychart data sharing, including some of the most recognized names in American healthcare.
Advocate Aurora Health faced one of the earliest and largest complaints after disclosing in 2022 that its use of Meta Pixel on patient-facing websites may have exposed the data of approximately 3 million patients. That disclosure triggered a wave of related lawsuits.
Other hospital systems that have been named in various complaints include UC San Diego Health, Dignity Health, Northwestern Memorial Hospital, and several regional health networks across the South and Midwest.
The list keeps growing. Researchers at The Markup identified Meta Pixel on the websites of 33 of the top 100 U.S. hospitals by revenue, which means new lawsuits continue to emerge as affected patients come forward.
Hospitals Named in MyChart-Related Data Lawsuits (Partial List):
- Advocate Aurora Health
- UC San Diego Health
- Dignity Health
- Northwestern Memorial Hospital
- WakeMed Health and Hospitals
- Novant Health
- Community Health Network (Indiana)
- University of Chicago Medicine
The MyChart HIPAA Lawsuit: What Laws Were Broken?
The mychart HIPAA lawsuit claims that hospitals violated the Health Insurance Portability and Accountability Act by disclosing protected health information to unauthorized third parties without patient consent.
HIPAA defines protected health information, known as PHI, as any data that can identify a patient and relates to their health condition, treatment, or payment. When a hospital transmits information like “this patient viewed a page about chemotherapy” to Meta, that transmission qualifies as PHI disclosure under HIPAA.
The law requires patient authorization before PHI can be shared with non-covered entities like advertising companies. Hospitals never obtained that authorization.
Beyond HIPAA, the lawsuits also cite the Electronic Communications Privacy Act, which prohibits the unauthorized interception of electronic communications, and state-level statutes like California’s Confidentiality of Medical Information Act.
Laws Cited in MyChart Lawsuits:
- HIPAA (federal health privacy law)
- Electronic Communications Privacy Act (ECPA)
- California Confidentiality of Medical Information Act (CMIA)
- State wiretapping and eavesdropping statutes
- State consumer protection laws
- Common law invasion of privacy
Key Takeaway: The MyChart HIPAA lawsuit is not just about bad corporate behavior. It involves specific federal and state laws with real penalties, which is why these cases have serious legal weight.
The MyChart Meta Pixel Lawsuit: How Facebook Got Your Health Data
The mychart Meta Pixel lawsuit explains the technical mechanism behind the privacy violation, and it is simpler than it sounds.
Meta Pixel is a small piece of JavaScript code that website owners embed on their sites to track visitor behavior for advertising purposes. It is designed for retail and e-commerce, not for password-protected medical portals.
When hospitals placed Meta Pixel on MyChart pages, every patient action triggered a data event. Viewing an appointment confirmation sent the appointment type and date to Meta. Clicking on a specific condition page sent the condition name. Searching for a specialist sent the specialty.
Meta received this information even though patients had never agreed to share medical data with Facebook. The data was then used to build advertising profiles.
| What Meta Pixel Tracks on Patient Portals | Data Transmitted to Meta |
|---|---|
| Page URLs visited inside portal | Condition names, department names |
| Button clicks and searches | Appointment types, specialist searches |
| Form submissions | Medication names, test results pages |
| Login events | Patient identity signals |
The lawsuits argue hospitals knew or should have known that placing Meta Pixel inside a HIPAA-protected environment was illegal.
Did Google Also Receive Your MyChart Data?
Yes. The mychart Google tracking lawsuit alleges that many hospitals also embedded Google Analytics and other Google tracking tools inside the MyChart portal, with the same result: private health data flowing to an advertising company without patient consent.
Google Analytics is the world’s most widely used website analytics tool. Like Meta Pixel, it was built for non-medical websites. When installed inside a patient portal, it can collect extremely sensitive data.
Google has faced related complaints in multiple states, particularly California, where state privacy laws impose stricter requirements than federal law.
The legal argument against Google mirrors the one against Meta: by receiving health data it had no right to receive, Google became a participant in the privacy violation, not just a passive tool.
What Google Analytics Can Collect in a Patient Portal:
- The pages a patient visited and how long they stayed
- Search queries entered inside the portal
- Referral paths showing how patients navigated from page to page
- Browser and device data that can be used to identify individuals
What Is the MyChart Data Sharing Lawsuit Really Claiming?
The mychart data sharing lawsuit is claiming that hospitals treated patient privacy as a sacrifice worth making for better website analytics and more effective advertising.
The lawsuits allege hospitals used the data indirectly. By allowing Meta and Google to track patient behavior, they improved their own ad targeting on social media and search engines, which drove more patient traffic to their facilities.
In plain terms: hospitals may have profited from your private health data, and they never asked your permission.
Plaintiffs are seeking damages not just for the data exposure itself but for the unjust enrichment hospitals allegedly received by using patient data as a marketing asset.
Core Damages Theories:
- Actual damages from privacy violation
- Statutory damages under HIPAA-related state laws
- Unjust enrichment (hospitals profited from patient data)
- Disgorgement of profits derived from data sharing
- Punitive damages where intentional conduct is proven
Key Takeaway: The MyChart data sharing lawsuit goes beyond simple negligence. Plaintiffs argue hospitals actively benefited from sharing patient data and should be forced to return those profits.
Who Qualifies for the MyChart Lawsuit?
You may qualify for the mychart lawsuit if you used the MyChart patient portal through a hospital that embedded tracking pixels on its patient-facing digital platforms.
Eligibility is not limited to people who noticed anything unusual. Most patients had no idea their data was being shared. The lawsuits are designed to cover anyone whose data was transmitted without consent, even if they never knew it happened.
The broadest qualification criteria apply to patients who:
General Eligibility Criteria:
- Used MyChart through a hospital in the United States
- Had an active MyChart account between approximately 2018 and 2024
- Logged in to view appointments, test results, or health records
- Used a hospital website where Meta Pixel or Google Analytics was confirmed present
- Did not sign any separate agreement authorizing health data sharing with advertisers
You do not need to prove financial harm to qualify in most class actions. The violation of your privacy rights itself is treated as the injury.
MyChart Lawsuit Eligibility Requirements in Detail
The mychart lawsuit eligibility requirements vary depending on which specific lawsuit or settlement applies to your situation, because these are not all one single case.
Some cases target specific hospital systems. If your hospital is named as a defendant, you need to have been a patient or portal user of that specific system. Other cases are broader and target the data-sharing practice more generally.
State residency matters in some cases. California residents, for example, have stronger protections under the CMIA and may have access to higher statutory damages than patients in states with weaker privacy laws.
| Eligibility Factor | Requirement |
|---|---|
| Portal Platform | MyChart by Epic Systems |
| Hospital Named in Suit | Patient of that specific health system |
| Time Period of Use | Approximately 2018 to 2024 |
| State of Residence | May affect available damages |
| Proof of Harm Required | Not required in most class actions |
| Consent to Data Sharing | Must NOT have signed data-sharing consent |
Patients who signed broad consent forms at hospital registration should still consult a class action review form, because generic consent forms do not typically authorize HIPAA-protected data sharing with advertising networks.
How Much Is the MyChart Settlement Amount?
No single unified mychart settlement amount has been established as of early 2026, because multiple cases are at different stages of litigation.
That said, comparable healthcare data privacy settlements give a useful benchmark. The Advocate Aurora Health settlement, which resolved claims related to its Meta Pixel use, was valued at approximately $12.25 million for roughly 3 million affected patients. That works out to around $4 per person at a purely mathematical level, though individual payouts vary based on claim tier and documented harm.
Other similar healthcare data breach class actions have produced individual settlements ranging from $50 to $300 for standard class members, with higher amounts for people who can demonstrate specific harm from the data exposure.
| Settlement Comparison | Amount |
|---|---|
| Advocate Aurora Health Settlement | $12.25 million total |
| Per-Patient Average (Advocate Aurora) | Approximately $4 base |
| Typical Individual Payout Range | $50 to $300 |
| Enhanced Claims (Documented Harm) | $300 to $1,000+ |
| Cases Still in Litigation | No settlement yet announced |
These numbers will shift as 2026 settlements are finalized. Patients who file earlier tend to have better documentation on record when distributions are calculated.
Key Takeaway: The MyChart settlement amount is not one number. It varies by hospital, by case stage, and by what you can document. Filing early and keeping records of your portal use matters.
What Compensation Can You Get from the MyChart Lawsuit?
The mychart lawsuit compensation you could receive depends on several factors, including which hospital system is named, what state you live in, and whether you can show any specific harm from the data disclosure.
For standard class members who simply used MyChart through a named hospital, expect compensation in the lower range, typically somewhere between $25 and $150 based on comparable settlements in similar privacy cases.
For patients who can demonstrate that the exposed data caused them identifiable harm, such as receiving targeted ads for conditions they had discussed with their doctor, or experiencing embarrassment or emotional distress from the disclosure, the compensation ceiling rises.
Types of Compensation Available:
- Cash payment from settlement fund
- Credit monitoring services
- Identity protection services
- Reimbursement for documented out-of-pocket losses
- Enhanced awards for provable specific harm
- Punitive damages in cases that go to trial
California residents may be entitled to statutory damages under the CMIA, which allows $1,000 per violation regardless of actual harm. That is a meaningful difference from the federal baseline.
How to File a MyChart Lawsuit Claim in 2026
Filing a mychart lawsuit claim in 2026 depends on which case or settlement applies to your hospital system, but the general process follows a consistent pattern.
Start by identifying whether your hospital has been named in any active class action. Several consumer rights organizations and class action tracking services maintain public records of named defendant hospitals.
Once you confirm your hospital is involved, the next step is to look for the official settlement claims website for that specific case. Each settlement has its own official claims portal set up by the court-appointed settlement administrator.
Steps to File a MyChart Claim:
- Confirm your hospital is named as a defendant in an active case
- Locate the official claims administration website for that specific settlement
- Gather documentation: MyChart account history, appointment records, emails from the hospital
- Complete the online claim form or mail-in form before the posted deadline
- Submit your claim and save the confirmation number
- Watch for court approval of the settlement, which triggers payment distribution
You do not need an attorney to file a basic claim. However, patients with documented specific harm from the data exposure may benefit from individual legal representation to seek higher compensation.
MyChart Lawsuit Deadline 2026: Do Not Miss This Date
The mychart lawsuit deadline 2026 is not a single date. Each settlement or case has its own filing deadline, and missing yours means losing your right to compensation.
Most class action claim deadlines run between 60 and 120 days from the date a court grants preliminary approval of a settlement. Courts have been granting preliminary approvals in several MyChart-related cases throughout late 2025 and into 2026, which means deadlines are actively running right now.
How to Track Your Deadline:
- Sign up for email alerts from the settlement administrator for your hospital’s case
- Check the court docket for your specific hospital system’s settlement
- Watch for a postcard or email notice from the settlement administrator, which most class members receive by mail or email
- Do not wait for a second notice. The first notice you receive sets your deadline clock.
Deadline Risk Factors:
- Living at a different address than when you were a hospital patient (postcard notices may not reach you)
- Not checking email linked to your MyChart account
- Assuming you will hear about deadlines automatically
| Action | Why It Matters |
|---|---|
| Check your MyChart email inbox | Settlement notices go there first |
| Update your address with the hospital | Ensures mailed notice reaches you |
| File as early as possible | Eliminates deadline risk entirely |
| Keep your claim confirmation | Needed if there are payment disputes |
Key Takeaway: The filing deadline for the MyChart lawsuit is specific to each case. If your hospital has settled, the clock on your claim may already be running.
MyChart Lawsuit Status and Update for 2026
The mychart lawsuit status in 2026 shows a case picture that is actively evolving, with some claims settling and others ramping up for trial.
The Advocate Aurora Health case produced one of the first settlements in this wave of hospital data lawsuits. Several other hospital system cases are in the late stages of class certification or settlement approval as of 2026.
Cases against Meta and Google directly are taking longer. The tech companies have more resources to fight, and the legal theories around their liability as data recipients are more complex than the theories against the hospitals that did the sharing.
2026 Case Status Overview:
| Case Category | Current Status |
|---|---|
| Advocate Aurora Health | Settlement finalized; claims period active |
| Other Named Hospital Systems | Various stages; several in settlement talks |
| Epic Systems Liability Cases | Active litigation; no settlement yet |
| Meta Pixel Claims (against Meta) | In discovery; trial unlikely before 2027 |
| Google Analytics Claims | Early litigation stage |
| New Hospital Defendant Additions | Ongoing; new cases still being filed |
The overall trajectory of these lawsuits is moving toward resolution for hospital-level claims, while the cases against the tech companies will take longer. If your hospital has settled, that is a separate process from any future Meta or Google resolution.
Is the MyChart Lawsuit Legit?
Yes, the mychart lawsuit is legitimate and is being actively litigated in federal courts across the United States.
This is not a scam. These are real cases with real case numbers filed in real federal courts by real law firms representing millions of patients. The underlying facts, hospitals embedding advertising tracking tools in password-protected patient portals, have been publicly confirmed by the hospitals themselves in breach notification disclosures required under HIPAA.
Hospitals including Advocate Aurora Health, Novant Health, and Community Health Network all filed official HIPAA breach notifications with the U.S. Department of Health and Human Services confirming that patient data was transmitted to Meta through pixel tracking tools.
How to Verify the Lawsuit Is Real:
- Search the HHS OCR Breach Portal (public database) for your hospital’s name
- Look up case filings using PACER, the federal court records system
- Check official court documents filed in the Northern District of California or Northern District of Illinois for related cases
- Look for settlement websites that end in .com and reference specific court case numbers
Red Flags That Indicate a Scam:
- Anyone asking for upfront payment to file your claim
- Websites without a court case number listed
- Emails asking for your Social Security number before any settlement approval
- Claims of guaranteed payouts before a court has approved any amount
Real class action claims are free to file. You only pay if you win through individual representation, and even then, fees come from the settlement, not from you directly.
Frequently Asked Questions
What is the MyChart lawsuit about?
The MyChart lawsuit is about hospitals sharing patients’ private health data with Meta and Google through hidden tracking tools called pixels.
Patients who used the MyChart portal to view appointments, test results, or medical records may have had that activity transmitted to advertising companies without their consent.
The lawsuits allege this violated HIPAA and multiple state and federal privacy laws.
Who qualifies for the MyChart class action lawsuit?
Anyone who used the MyChart patient portal through a hospital that has been named as a defendant in an active class action may qualify.
You generally need to have logged in between approximately 2018 and 2024 and used a hospital portal where tracking pixels were confirmed present.
You do not need to prove financial harm. The privacy violation itself is treated as the qualifying injury in most cases.
How much money can I get from the MyChart settlement?
Individual payouts vary by case, but comparable settlements have produced between $50 and $300 for standard class members.
Patients in states with stronger privacy laws, particularly California under the CMIA, may be entitled to statutory damages of up to $1,000 per violation.
No single unified settlement has been finalized for all MyChart cases as of 2026, so final amounts are still being determined case by case.
What is the deadline to file a MyChart lawsuit claim in 2026?
Each settlement or case has its own deadline, typically 60 to 120 days after a court grants preliminary approval of a settlement agreement.
Several MyChart-related settlements received preliminary approvals in late 2025 and early 2026, meaning some deadlines are already running.
Check the settlement administrator’s website for your hospital’s specific case to find the exact date.
Is the MyChart lawsuit against Epic Systems or the hospitals?
The primary defendants in most MyChart lawsuits are the individual hospitals that embedded tracking pixels on their patient portals.
Epic Systems, which developed the MyChart software, is named in some complaints but disputes that it bears primary responsibility for how hospitals used its platform.
Meta and Google are named as separate defendants in related but distinct lawsuits for their role in receiving the improperly shared data.
Where Things Stand and What You Should Do
The my chart lawsuit is one of the most active healthcare privacy cases in the country right now. Real settlements are being paid. Real deadlines are running. And new cases are still being filed.
If you used MyChart through a hospital in the last several years, your data may have been part of this. Checking whether your hospital is named in an active case takes minutes and costs nothing.
File your claim if a settlement is open for your hospital. Document your portal use. And watch for notice from a settlement administrator. The window does not stay open forever.
