The Epic MyChart lawsuit in 2026 involves claims that Epic Systems allowed patient health data to be shared with third parties like Meta and Google through tracking pixels embedded in the MyChart patient portal. If you used MyChart at a participating hospital or clinic, you may be entitled to compensation.
Multiple class action complaints have been filed in federal courts. Some cases are moving toward settlement, while others are still in discovery. The stakes are high: millions of patients may have had their private medical information exposed without consent.
This article breaks down every detail you need. You’ll learn who qualifies, how much money you could receive, filing deadlines, and the latest 2026 case updates. One estimate suggests the total settlement pool could exceed $100 million across consolidated cases.
Whether you’ve already heard about this lawsuit or you’re just finding out, this guide covers it all in plain English.
Epic MyChart Lawsuit
The Epic MyChart lawsuit is a series of legal actions accusing Epic Systems of allowing unauthorized tracking tools to collect and transmit patient health data from the MyChart portal. These lawsuits allege that pixels from Meta (Facebook) and Google were embedded in MyChart pages, capturing sensitive information like appointment details, medication names, and health conditions.
Patients argue they never consented to this data sharing. The core legal claim is that Epic, along with healthcare providers using its platform, violated patient privacy by letting advertising trackers run on pages where protected health information was visible.
| Detail | Info |
|---|---|
| Defendant | Epic Systems Corporation |
| Platform at Issue | MyChart patient portal |
| Core Allegation | Unauthorized sharing of patient data via tracking pixels |
| Legal Theories | State privacy laws, wiretapping statutes, negligence |
| Number of Affected Patients | Estimated tens of millions |
The lawsuits don’t just target Epic. Several hospital systems that deployed MyChart with tracking pixels enabled are named as co-defendants. The cases span multiple jurisdictions, with some consolidated in federal court.
Think of it this way: you logged into your health portal to check lab results, and without your knowledge, Facebook was watching over your shoulder. That’s what these lawsuits claim happened.
Epic Systems Class Action Lawsuit
The Epic Systems class action lawsuit refers to the consolidated legal efforts where plaintiffs represent a class of MyChart users. Class action status means one lawsuit can cover millions of affected patients, rather than requiring each person to file individually.
Several of these cases have been filed in the U.S. District Court for the Western District of Wisconsin, where Epic is headquartered in Verona, Wisconsin. Other cases were filed in state courts across Illinois, California, and North Carolina.

Class certification is a critical step. If a court certifies the class, all MyChart users who meet the criteria become part of the lawsuit unless they opt out. This makes it much easier for individual patients to receive compensation without hiring their own attorney.
- The named plaintiffs represent all similarly affected MyChart users
- Class certification hearings are expected to take place in mid-2026
- If certified, millions of patients could automatically become class members
- Epic has challenged class certification, arguing patient experiences differ too much
The outcome of the class certification motion will shape the entire case. A certified class puts enormous pressure on Epic to settle. Without certification, individual cases become much harder to pursue.
MyChart Data Breach Lawsuit
The MyChart data breach lawsuit focuses specifically on how patient data was exposed through tracking technologies. This isn’t a traditional data breach where hackers steal records. Instead, the data was transmitted by design, through tracking pixels that Epic and healthcare providers knowingly installed.
Meta Pixel (formerly Facebook Pixel) and similar tools were placed on MyChart login pages, appointment scheduling pages, and even pages displaying test results. When patients interacted with these pages, the pixels collected data and sent it to third-party advertising platforms.
| Type of Data Allegedly Exposed | How It Was Transmitted |
|---|---|
| Appointment types and dates | Meta Pixel tracking code |
| Medication names | Google Analytics scripts |
| Doctor names and specialties | Third-party advertising tags |
| Health conditions searched | URL parameter capture |
| Patient portal activity | Cookie-based tracking |
The distinction matters legally. Traditional data breaches involve unauthorized access. Here, the access was technically authorized by the organizations that installed the tracking tools. Patients just didn’t know about it.
This framing has led to lawsuits under state wiretapping laws. In states like California and Illinois, recording someone’s online activity without consent can trigger statutory damages, meaning set dollar amounts per violation.
Key Takeaway: The Epic MyChart lawsuits allege that tracking pixels, not hackers, exposed patient health data to companies like Meta and Google without patient knowledge or consent.
MyChart Privacy Lawsuit
The MyChart privacy lawsuit claims center on the argument that patients had a reasonable expectation of privacy when using a medical portal. Courts have recognized that health information carries a higher privacy standard than general consumer data.
Plaintiffs argue that Epic Systems and participating hospitals violated this standard in several ways:
- Installing advertising trackers on pages containing protected health information
- Failing to disclose the presence of third-party tracking in privacy policies
- Not obtaining informed consent before sharing health-related browsing data
- Allowing Meta and Google to build advertising profiles using medical activity
Some cases cite the California Invasion of Privacy Act (CIPA), which prohibits unauthorized recording of electronic communications. Others rely on the Illinois Biometric Information Privacy Act (BIPA) framework and various state consumer protection statutes.
HIPAA itself doesn’t give patients the right to sue directly. That’s a common misconception. But HIPAA violations can support state law claims by showing the standard of care that Epic and hospitals were supposed to follow.
The privacy angle is especially powerful because health data is different from regular browsing habits. Knowing someone checked a page about cancer treatment or mental health medication is fundamentally more sensitive than knowing they browsed shoes online.
Epic MyChart Settlement
The Epic MyChart settlement negotiations are ongoing as of early 2026. No final, court-approved settlement has been announced yet, but several indicators suggest that settlement discussions are active.
In cases like these, settlements typically follow a pattern. The parties negotiate after key motions are decided, such as motions to dismiss and class certification. Several courts have denied Epic’s motions to dismiss, which signals the cases have legal merit.
| Settlement Timeline Stage | Estimated Timing |
|---|---|
| Motions to dismiss decided | Completed (2024 to 2025) |
| Class certification motions | Mid-2026 |
| Settlement negotiations | Late 2026 |
| Preliminary settlement approval | Late 2026 to early 2027 |
| Claims filing period | 60 to 120 days after approval |
| Final payout distribution | 2027 |
Based on similar healthcare data privacy settlements, the total settlement fund could range from $50 million to over $200 million. The exact amount depends on the number of affected patients, the strength of the evidence, and Epic’s willingness to resolve the cases.
For reference, Advocate Aurora Health settled its pixel tracking lawsuit for $12.25 million in 2023. That case involved just one hospital system. Epic’s exposure is far larger because MyChart serves hundreds of healthcare organizations.
Epic MyChart Lawsuit Payout
The Epic MyChart lawsuit payout for individual claimants will depend on several factors, including the total settlement amount, the number of people who file claims, and the tier of harm each claimant experienced.
In similar data privacy class actions, individual payouts have ranged widely:
| Payout Tier | Estimated Amount | Criteria |
|---|---|---|
| Basic claim (no proof of harm) | $25 to $100 | Used MyChart during the affected period |
| Standard claim (documented exposure) | $100 to $500 | Evidence of specific data transmitted |
| Enhanced claim (proven harm) | $500 to $5,000 | Identity theft, financial loss, emotional distress |
| Severe harm claim | $5,000 to $25,000+ | Significant documented damages |
These are estimates based on comparable settlements. The actual numbers won’t be confirmed until a settlement is finalized and approved by the court.
One thing to keep in mind: the more people who file claims, the smaller each individual payment becomes. In the Equifax data breach settlement, payouts were much smaller than expected because so many people filed. The same dynamic could apply here.
Filing a claim is still worth it, even for the basic tier. Small payouts add up, and participating sends a message that privacy violations have consequences.
Key Takeaway: Individual payouts from the Epic MyChart lawsuit could range from $25 for basic claims to $25,000 or more for those who suffered serious, documented harm from the data exposure.
Epic Systems MyChart Settlement Amount
The Epic Systems MyChart settlement amount hasn’t been finalized, but legal analysts project the total fund could be substantial. Epic Systems generated over $4 billion in revenue in 2024. The company has deep pockets, and the scope of affected patients is massive.
Several factors influence the final settlement number:
- Number of healthcare organizations involved: Hundreds of hospitals and clinics used MyChart with tracking pixels
- Duration of the violation: Tracking allegedly occurred over multiple years (2020 to 2024)
- Number of affected patients: Estimates range from 10 million to 100 million MyChart users
- Severity of data exposed: Health-related data carries higher legal weight than general consumer data
- Strength of legal claims: Multiple courts have allowed cases to proceed past dismissal
For comparison, here’s how similar healthcare privacy settlements have played out:
| Case | Settlement Amount | Affected Users |
|---|---|---|
| Advocate Aurora Health Pixel Case | $12.25 million | 3 million |
| WakeMed Pixel Tracking | $3.5 million | 500,000 |
| Cerebral Data Sharing | $7.5 million | 3.2 million |
| Meta Healthcare Pixel MDL | Pending | Millions |
If Epic’s case settles proportionally, the total could easily surpass $100 million. Some plaintiff attorneys have suggested the figure could reach $200 million or more, given the sheer number of patients and the sensitivity of the data involved.
Epic MyChart Lawsuit: How Much Money Can You Get?
The question everyone asks about the Epic MyChart lawsuit is simple: how much money can I actually get? The honest answer is that it depends on your situation.
If you used MyChart during the years tracking pixels were active and you can show you were logged in while browsing health-related pages, you’ll likely qualify for at least the basic payout tier. That’s estimated at $25 to $100 without needing to prove specific harm.
If you can document that your health data was used in ways that hurt you, the amount goes up significantly. Examples of documented harm include:
- Receiving targeted ads related to medical conditions you only discussed through MyChart
- Identity theft or insurance fraud linked to exposed health information
- Emotional distress from learning private health details were shared with advertisers
- Out-of-pocket costs for credit monitoring or identity protection services
The highest payouts will go to claimants who can prove direct financial loss or significant emotional distress with documentation from a mental health professional.
Here’s a realistic way to think about it. If the settlement fund is $150 million and 5 million people file claims, the average basic payout would be around $30 per person. But enhanced claims would receive multiples of that amount, pulling from a separate portion of the fund.
Who Qualifies for the MyChart Lawsuit?
Who qualifies for the MyChart lawsuit is determined by a few straightforward criteria. If you had a MyChart account and used the portal during the period when tracking pixels were active, you likely qualify.
The general eligibility criteria include:
- You had a MyChart account with a healthcare provider that used Epic Systems
- You logged into or used the MyChart portal between 2020 and 2024
- Your healthcare provider’s MyChart installation included Meta Pixel, Google Analytics, or similar tracking tools
- You were a resident of a state with applicable privacy or wiretapping laws
Not every hospital that uses MyChart was running tracking pixels. The lawsuit targets specific healthcare organizations that installed these tools. A growing list of affected providers is being compiled as discovery continues.
| Qualifying Factor | Details |
|---|---|
| Account type | Active MyChart patient portal account |
| Time period | 2020 to 2024 |
| Tracking tool present | Meta Pixel, Google Analytics, or similar |
| Geographic requirement | Varies by case; strongest claims in CA, IL, PA, WI |
| Proof needed | Account records, login history, or self-attestation |
You don’t need to prove that your specific data was sent to Facebook or Google. In class action cases, the court assumes class members share the same type of harm. Your job is simply to show you were a MyChart user during the relevant period.
Key Takeaway: Most people who used a MyChart patient portal between 2020 and 2024 at a healthcare provider running tracking pixels will qualify for this lawsuit, regardless of whether they can prove individual harm.
Epic MyChart Lawsuit Eligibility
Epic MyChart lawsuit eligibility goes beyond just having an account. The strength of your claim depends on what you did on the portal and which healthcare provider you used.
Stronger claims come from patients who actively used MyChart for sensitive activities:
- Scheduling appointments for specific medical conditions
- Viewing lab results or diagnostic reports
- Messaging doctors about symptoms or treatments
- Requesting prescription refills
- Accessing billing information linked to medical services
Weaker claims, though still valid, come from patients who only logged in briefly or used MyChart for non-medical tasks like updating contact information.
The eligibility picture also depends on your state. States with strong privacy laws give plaintiffs more legal ammunition:
| State | Relevant Law | Why It Matters |
|---|---|---|
| California | California Invasion of Privacy Act | Statutory damages for unauthorized recording |
| Illinois | Consumer Fraud Act, Eavesdropping Act | Strong consumer protection framework |
| Pennsylvania | Wiretapping and Electronic Surveillance Act | Two-party consent state, strict on tracking |
| Wisconsin | State privacy statutes | Epic’s home state; key jurisdiction |
If your healthcare provider has already been identified in court filings as a defendant or co-defendant, your eligibility is stronger. Check whether your hospital or clinic appears on the list of organizations named in the lawsuits.
MyChart Privacy Violation Claims
MyChart privacy violation claims are built on several legal theories, and understanding them helps you see why this lawsuit has real teeth. These aren’t flimsy arguments. Courts have already allowed many of these claims to move forward.
The primary legal theories include:
- State wiretapping laws: Many states require all parties to consent before electronic communications are intercepted. Tracking pixels that capture health data without patient consent violate these laws.
- State consumer protection statutes: These laws prohibit deceptive business practices. Failing to disclose hidden tracking tools qualifies as deception.
- Negligence: Epic and hospitals had a duty to protect patient data. Installing advertising trackers on health pages breached that duty.
- Breach of contract: MyChart’s terms of service and privacy policies typically promise to protect patient information. Sharing data with advertisers contradicts those promises.
- Intrusion upon seclusion: This common law tort covers situations where someone intentionally intrudes on another person’s private affairs in a way that would be highly offensive to a reasonable person.
A common question is why HIPAA isn’t directly cited. The reason is simple: HIPAA doesn’t allow private lawsuits. Only the government can enforce HIPAA. But HIPAA’s standards help establish what “reasonable” privacy protections look like, which supports the other claims.
These legal theories work together. A patient suing under California’s wiretapping statute can point to HIPAA as evidence that Epic knew health data required special protection.
MyChart Data Breach 2024 and 2025
The MyChart data breach issues that surfaced in 2024 and 2025 built on earlier revelations from 2022 when investigative reports first uncovered the widespread use of Meta Pixel on hospital websites, including MyChart portals.
Here’s a timeline of key events:
| Date | Event |
|---|---|
| June 2022 | The Markup reports widespread Meta Pixel use on hospital websites |
| Late 2022 | First lawsuits filed against individual hospital systems |
| 2023 | Advocate Aurora, WakeMed, and Novant Health settle pixel cases |
| Early 2024 | Lawsuits expanded to target Epic Systems directly |
| Mid-2024 | Federal judges deny Epic’s motions to dismiss in multiple cases |
| Late 2024 | Discovery phase begins; internal emails and documents produced |
| Early 2025 | Additional healthcare providers identified as having used tracking pixels |
| Mid-2025 | Plaintiff attorneys file motions for class certification |
| Late 2025 | Settlement discussions reported to be underway |
The 2024 to 2025 period was critical because it’s when Epic Systems itself became a central defendant, not just the individual hospitals. Plaintiffs argued that Epic, as the platform provider, had the ability and responsibility to prevent tracking pixels from operating on MyChart pages.
Discovery in 2024 reportedly uncovered internal communications suggesting Epic knew about the tracking tools and delayed removing them. If true, this evidence could significantly strengthen the plaintiffs’ case and increase any settlement amount.
Key Takeaway: The 2024 to 2025 period saw the Epic MyChart lawsuit expand from targeting individual hospitals to holding Epic Systems directly accountable as the platform provider, with discovery revealing potentially damaging internal communications.
Epic Systems Patient Data Lawsuit
The Epic Systems patient data lawsuit is significant because it targets the technology company behind MyChart, not just the hospitals that used it. This distinction matters for one big reason: Epic controls the platform architecture.
Epic Systems serves more than 305 million patients through its electronic health record system. MyChart is its patient-facing portal, used by hundreds of hospitals and health systems across the United States. When tracking pixels were embedded in MyChart, the exposure wasn’t limited to one hospital. It potentially affected every organization running the platform with those tools enabled.
Plaintiffs argue that Epic:
- Designed MyChart in a way that allowed third-party tracking scripts to access health data
- Failed to implement safeguards that would prevent advertising pixels from capturing protected information
- Did not warn healthcare providers about the privacy risks of installing tracking tools on MyChart pages
- Profited from data analytics capabilities that relied on third-party integrations
Epic’s defense has centered on the argument that individual healthcare providers, not Epic, chose to install tracking pixels. The company contends it provided a platform, and hospitals made independent decisions about which third-party tools to add.
This argument is similar to saying a car manufacturer isn’t responsible if the owner installs faulty aftermarket parts. But plaintiffs counter that Epic’s platform should have included built-in protections to prevent health data from being captured by advertising trackers, just like a car has safety features regardless of what modifications the owner makes.
Is There a Class Action Against Epic Systems?
Yes, there is a class action against Epic Systems in 2026. Multiple class action lawsuits have been filed in federal and state courts across the country, and several are progressing toward class certification.
The most prominent case is pending in the U.S. District Court for the Western District of Wisconsin, Epic’s home jurisdiction. Other cases are proceeding in California, Illinois, and North Carolina.
Here’s the current status of key cases:
| Jurisdiction | Case Status (2026) | Next Major Step |
|---|---|---|
| Western District of Wisconsin | Active; discovery ongoing | Class certification hearing |
| Northern District of Illinois | Active; motion to dismiss denied | Class certification motion filing |
| Eastern District of California | Active; consolidated with related cases | Discovery deadline |
| Western District of North Carolina | Active; settlement discussions reported | Potential preliminary settlement |
The answer to whether these cases will be consolidated into a single multidistrict litigation (MDL) is still pending. An MDL would bring all federal cases under one judge, streamlining the process and making settlement more likely.
For patients, the practical effect is the same. Whether there’s one class action or several, you’ll likely only need to file one claim to receive compensation. Class action settlements typically create a single claims process that covers all related cases.
How to File an Epic MyChart Lawsuit Claim
How to file an Epic MyChart lawsuit claim depends on the current stage of the case. As of 2026, the claims process has not yet formally opened because no final settlement has been approved. But there are steps you can take right now to prepare.
Here’s what you should do:
- Confirm you used MyChart at a healthcare provider during the 2020 to 2024 period
- Save your MyChart login history or any emails confirming your account activity
- Check if your healthcare provider is named in the lawsuit filings
- Keep records of any targeted ads you received related to health topics you only discussed through MyChart
- Document any harm you’ve experienced, including identity theft, emotional distress, or unwanted data exposure
- Register with the claims administrator once a settlement website is established
When a settlement is approved, a claims administrator will create an official website where you can submit your claim. You’ll typically need to provide basic information: your name, the healthcare provider you used, and the approximate dates you used MyChart.
| Filing Step | What You Need |
|---|---|
| Register on settlement website | Name, email, mailing address |
| Identify your healthcare provider | Name of hospital or clinic |
| Provide usage dates | Approximate period of MyChart use |
| Submit proof of harm (for enhanced claims) | Documentation of financial loss, emotional distress, or identity theft |
| Attestation | Sworn statement that information is accurate |
For basic claims, you may only need to sign a sworn statement. Enhanced claims require more documentation but offer significantly higher payouts.
Key Takeaway: While the formal claims process hasn’t opened yet, you can prepare right now by gathering your MyChart login history, identifying your healthcare provider, and documenting any harm you’ve experienced from the data exposure.
MyChart Lawsuit Filing Deadline
The MyChart lawsuit filing deadline has not been set because no final settlement has been approved. Once a settlement receives preliminary court approval, a specific deadline for filing claims will be announced.
Based on similar class action cases, here’s what the timeline typically looks like:
| Phase | Typical Duration |
|---|---|
| Preliminary settlement approval | Court hearing, 1 to 2 months for decision |
| Notice period (class members notified) | 60 to 90 days |
| Claims filing window | 90 to 120 days from notice |
| Objection deadline | 30 to 60 days before final approval hearing |
| Final approval hearing | 6 to 9 months after preliminary approval |
| Payout distribution | 30 to 90 days after final approval |
If settlement negotiations wrap up in late 2026, the claims filing deadline could fall in mid to late 2027. That said, dates can shift. Courts frequently extend deadlines, especially in large class actions with millions of potential claimants.
The most important thing is to stay informed. When the deadline is set, class members will be notified through:
- Direct email to known MyChart users
- Postal mail to addresses on file with healthcare providers
- Online advertising and media coverage
- The official settlement website
Missing the deadline means forfeiting your right to compensation. Set a reminder to check for updates every few months. It’s a small effort that could be worth hundreds of dollars.
MyChart Lawsuit Update 2026
The MyChart lawsuit update for 2026 shows the case is at a pivotal stage. Several major developments are expected this year that could determine whether the case settles or heads to trial.
Here’s what’s happening in 2026:
Class certification hearings are scheduled for mid-2026 in the Wisconsin federal case. If the court certifies a class, Epic will face enormous pressure to settle rather than risk a trial representing millions of patients.
Discovery is producing key evidence. Internal documents from Epic Systems and participating hospitals are being reviewed by plaintiff attorneys. Reports suggest that some documents show awareness of tracking pixel risks before they were removed.
Settlement talks are reportedly active. While no public announcements have been made, sources close to the litigation indicate that both sides are exploring settlement terms. A preliminary settlement could be announced as early as Q4 2026.
| 2026 Milestone | Expected Timing |
|---|---|
| Class certification decision | June to August 2026 |
| Expert witness reports filed | July 2026 |
| Mediation sessions | August to September 2026 |
| Potential preliminary settlement | October to December 2026 |
| Notice to class members | Early 2027 (if settled in 2026) |
State-level cases are also progressing. California and Illinois courts are handling related cases under state privacy laws, which offer different (and sometimes stronger) remedies than federal claims. These state cases could settle independently or be folded into a broader agreement.
The bottom line: 2026 is the year this lawsuit will likely take its most definitive shape. Whether through settlement or a trial date being set, the path forward should become much clearer in the coming months.
Key Takeaway: The Epic MyChart lawsuit is expected to reach critical milestones in 2026, including class certification decisions and potential preliminary settlement announcements, making this the most important year in the case so far.
Frequently Asked Questions
How much money can I get from the Epic MyChart lawsuit?
Most claimants can expect between $25 and $500 for basic claims.
Enhanced claims with documented harm could receive $500 to $25,000 or more.
Final amounts depend on the total settlement size and how many people file.
Who qualifies for the MyChart data breach lawsuit?
Anyone who used a MyChart patient portal between 2020 and 2024 at a healthcare provider that had tracking pixels installed likely qualifies.
You don’t need to prove your specific data was shared.
Active MyChart account holders during that period are the primary eligible group.
What is the filing deadline for the Epic MyChart lawsuit?
No filing deadline has been set yet because the settlement hasn’t been finalized.
The deadline will be announced once a court grants preliminary settlement approval.
Based on case progress, the claims window is expected to open in late 2026 or early 2027.
Is there a class action lawsuit against Epic Systems in 2026?
Yes, multiple class action lawsuits are active against Epic Systems in 2026.
Cases are pending in federal courts in Wisconsin, Illinois, California, and North Carolina.
Class certification hearings are expected in mid-2026.
How do I file a claim in the MyChart privacy lawsuit?
When the settlement is approved, an official claims website will be created.
You’ll need to provide your name, healthcare provider, and approximate dates of MyChart use.
For now, gather your login history and document any harm you’ve experienced.
This lawsuit matters. If you used MyChart between 2020 and 2024, your health data may have been shared with advertisers without your permission. That’s not just a privacy issue; it’s a violation of the trust you placed in your healthcare provider and their technology partners.
Start gathering your records now. Save your MyChart account information, note which hospital or clinic you used, and document anything unusual like targeted health-related ads. When the claims window opens, you’ll be ready.
Stay updated on the case throughout 2026. The decisions made this year will determine what you’re owed and when you’ll receive it.









