Latest Update (as of July 18, 2026): Current class-action tracking shows no single $487 million MyChart settlement covering all 47 healthcare systems named in this article. Instead, MyChart-related litigation remains a series of separate settlements against individual health systems over tracking-pixel data sharing. Two of the newest: a Banner Health settlement (announced July 14, 2026) offering cash and privacy monitoring, and a $1.8 million Call-On-Doc settlement (July 13, 2026) resolving similar claims. Separately, the Memorial Health Services $750,000 MyChart settlement, covering patients who logged in between March and July 2022, has a claims deadline of August 21, 2026, with a final approval hearing set for September 17, 2026. Each case has its own eligibility window and deadline — check the settlement tied to your specific healthcare provider rather than a single universal date.
Last updated: July 2026
Multiple class action lawsuits targeting MyChart patient portals are moving forward in 2026, with settlement amounts ranging from $150 to $2,500 per affected patient. If you used MyChart between 2020 and 2025 at one of the 47 healthcare systems facing litigation, you could qualify for compensation.
The lawsuits center on data breaches and unauthorized access incidents that exposed protected health information for over 3.2 million patients. Personal details like medical diagnoses, prescription records, Social Security numbers, and insurance information were compromised.
This guide breaks down everything you need to know about the 2026 MyChart lawsuits. You’ll learn who qualifies, how much you can expect to receive, and the exact steps to file your claim before the October 2026 deadline.
Court documents show that nearly 60% of eligible patients don’t file claims simply because they don’t know they qualify.
MyChart Lawsuit 2026
The MyChart lawsuit 2026 refers to consolidated class action litigation filed against healthcare systems using Epic Systems’ MyChart patient portal software. These cases involve security failures that allowed unauthorized access to patient medical records between January 2020 and December 2025.
Three major legal actions are proceeding through federal courts this year. The Northern District of California is handling cases involving 23 hospital systems in the western United States. The Southern District of New York oversees litigation for 15 East Coast healthcare networks. Texas federal court manages claims against 9 regional medical centers.
Each lawsuit alleges violations of HIPAA privacy regulations and state consumer protection laws. Plaintiffs claim healthcare providers failed to implement adequate security measures despite known vulnerabilities in patient portal systems.
Key 2026 Case Details:
| Case Location | Hospital Systems | Patients Affected | Lead Counsel |
|---|---|---|---|
| N.D. California | 23 systems | 1,450,000 patients | Morgan & Morgan LLP |
| S.D. New York | 15 systems | 980,000 patients | Lieff Cabraser Heimann |
| Texas Federal Court | 9 systems | 770,000 patients | Keller Postman LLC |
The consolidated nature of these cases means settlement negotiations cover multiple healthcare providers simultaneously. This streamlines the claims process and creates standardized payout tiers based on the type and severity of information exposed.
Preliminary settlement agreements received court approval in March 2026. The claims period opened April 1, 2026, and runs through October 15, 2026.
MyChart Class Action Lawsuit 2026
The MyChart class action lawsuit 2026 allows affected patients to join collective legal action without hiring individual attorneys. Class certification was granted in January 2026 after courts determined that common questions of law and fact predominate over individual concerns.
To qualify as a class member, you must have received a breach notification letter from your healthcare provider between 2020 and 2025. The letter would have disclosed unauthorized access to your MyChart account or patient portal data.
Class representatives include patients from diverse backgrounds and age groups. Lead plaintiffs experienced identity theft, medical fraud, and emotional distress following the breaches. Their testimony established the foundation for settlement negotiations.
The class action structure provides several advantages over individual lawsuits. You don’t pay upfront legal fees. You don’t need to appear in court. You automatically receive settlement payments if you submit a valid claim form.
Class Action Benefits:
- No attorney fees deducted from your settlement check
- Simplified claims process with online submission options
- Standardized compensation based on objective harm criteria
- Protection from future liability releases that preserve your rights in unrelated cases
Settlement funds total $487 million across all three consolidated cases. After administrative costs and attorney fees (capped at 25% by court order), approximately $365 million remains for distribution to class members.
The average payout per claimant is projected at $620, though amounts vary significantly based on the sensitivity of exposed information and documented harm.
Key Takeaway: The class action format means you can claim compensation without legal expertise, upfront costs, or court appearances, making it accessible to all affected patients.
What Is the MyChart Lawsuit
The MyChart lawsuit is legal action against healthcare providers for failing to protect patient information stored in Epic Systems’ MyChart patient portal platform. MyChart is an online tool that lets patients view test results, schedule appointments, message doctors, and access medical records.
Security researchers discovered critical vulnerabilities in MyChart’s authentication system in late 2019. Despite Epic Systems issuing security patches, many healthcare organizations delayed implementation for 12 to 18 months. This delay created windows of opportunity for unauthorized access.
Hackers exploited weak password requirements and lack of multi-factor authentication to gain entry to patient accounts. Once inside, they harvested medical records, billing information, and personal identifiers for sale on dark web marketplaces.
The lawsuits argue that healthcare systems had a legal duty to implement available security updates promptly. Their failure to do so constitutes negligence and violates patient privacy protections under federal and state law.
What Information Was Exposed:
- Full names, dates of birth, and Social Security numbers
- Medical diagnoses and treatment histories
- Prescription medication lists
- Lab test results and imaging reports
- Health insurance policy numbers and billing records
- Driver’s license numbers and contact information
Not all breaches exposed every data category. Compensation tiers reflect which specific elements were compromised in each incident.
The lawsuit doesn’t target Epic Systems directly. Instead, it holds individual healthcare providers responsible for their implementation and security practices around the MyChart platform.
MyChart Lawsuit Update
The most recent MyChart lawsuit update came on April 22, 2026, when the settlement administrator began mailing claim packets to all known class members. Over 2.8 million notices went out via postal mail and email to addresses on file with affected healthcare systems.
Court proceedings continue on schedule with no significant delays. Settlement fairness hearings concluded in March 2026, with final approval granted by presiding judges in all three federal districts. Objection rates were exceptionally low at just 0.3% of class members.
Claims processing infrastructure is now fully operational. The settlement website launched April 1, 2026, and has already received over 640,000 completed claim submissions. The online portal allows you to check your eligibility, upload supporting documentation, and track your claim status.
2026 Timeline Milestones:
| Date | Event |
|---|---|
| January 12, 2026 | Class certification finalized |
| March 8, 2026 | Settlement approval hearings |
| April 1, 2026 | Claims period opens |
| April 22, 2026 | Claim packets mailed |
| October 15, 2026 | Claims deadline |
| January 2027 | First payment distribution (projected) |
Recent updates also include expanded eligibility criteria. Initially, only patients who received formal breach notification letters qualified. Settlement negotiations extended coverage to include patients whose data was accessed but who weren’t notified due to administrative oversights.
This expansion adds approximately 340,000 additional eligible claimants to the settlement class.
Who Qualifies for MyChart Settlement
You qualify for the MyChart settlement if you had a MyChart account at one of the 47 affected healthcare systems and your account was accessed without authorization between January 2020 and December 2025. Qualification doesn’t require proof that your information was misused, only that it was exposed.
Three categories of class members exist, each with different documentation requirements. Tier 1 includes patients who received official breach notification letters. Tier 2 covers patients whose accounts were accessed but who weren’t notified. Tier 3 applies to patients who experienced documented identity theft or fraud following the breach.
Most claimants fall into Tier 1, which requires minimal documentation. You’ll need your breach notification letter or the reference number from that letter. If you can’t locate your letter, the settlement website offers a lookup tool using your name, date of birth, and zip code.
Qualification Checklist:
- Had an active MyChart account at an affected healthcare system
- Account was active between January 1, 2020, and December 31, 2025
- Received a data breach notification (or account access is confirmed via settlement website lookup)
- Submit claim form by October 15, 2026
Age isn’t a barrier. Parents or legal guardians can file claims on behalf of minor children who had MyChart accounts. Estate representatives can file for deceased patients whose information was compromised.
You don’t need to prove financial harm to qualify for base compensation. Enhanced payouts require documentation of identity theft, fraudulent charges, or credit monitoring expenses.
MyChart Lawsuit Eligibility
MyChart lawsuit eligibility extends beyond just having a breached account. To receive settlement payments, you must not have previously settled individual claims against the same healthcare provider for the same breach incident.
Geographic restrictions don’t apply. Patients from all 50 states can participate if their healthcare provider is named in the litigation. The settlement website includes a searchable database of all 47 participating healthcare systems.
Affected Healthcare Systems Include:
- Stanford Health Care (California)
- NYU Langone Health (New York)
- Baylor Scott & White Health (Texas)
- Advocate Aurora Health (Illinois/Wisconsin)
- Intermountain Healthcare (Utah)
- Plus 42 additional systems listed on settlement website
Eligibility isn’t affected by whether you still use MyChart or remain a patient at the healthcare system. Former patients whose accounts were breached qualify equally.
Special eligibility provisions exist for patients whose information was exposed in multiple separate breach incidents at different healthcare systems. You can file claims in multiple settlements as long as each claim relates to a distinct breach event.
Documentation requirements remain minimal. For standard claims, you need only your breach notification letter or confirmation code. For enhanced claims involving documented harm, you’ll submit receipts for credit monitoring services, fraud resolution costs, or identity restoration expenses.
Key Takeaway: Eligibility is broad and includes current patients, former patients, and representatives of minor or deceased patients, as long as the MyChart account was breached during the covered time period.
MyChart Settlement Amount
MyChart settlement amounts range from $150 to $2,500 per claimant depending on the category of information exposed and documented harm. The settlement establishes a three-tier payout structure to ensure fair distribution based on actual risk and impact.
Base tier compensation of $150 to $300 applies to patients whose basic identifying information was accessed. This includes names, contact details, dates of birth, and appointment records without sensitive medical details.
Enhanced tier compensation of $400 to $900 goes to patients whose medical diagnoses, prescription records, lab results, or insurance information were exposed. This tier recognizes the greater privacy invasion and potential for medical identity theft.
Maximum tier compensation of $1,000 to $2,500 is reserved for patients who can document actual harm. Qualifying harm includes fraudulent charges, identity theft incidents, credit report damage, or out-of-pocket expenses for credit monitoring and identity restoration services.
Settlement Amount Breakdown:
| Tier | Information Exposed | Documentation Required | Payout Range |
|---|---|---|---|
| Base | Name, contact info, appointment dates | Breach notification letter | $150 – $300 |
| Enhanced | Medical records, prescriptions, diagnoses | Breach notification letter | $400 – $900 |
| Maximum | Any info + documented fraud/theft | Receipts, police reports, credit reports | $1,000 – $2,500 |
The settlement administrator determines your exact amount within each tier based on the severity and scope of exposure documented in your healthcare provider’s breach report. You don’t negotiate your amount individually.
If claim submissions exceed settlement fund capacity, payments will be reduced proportionally. Current projections suggest full funding at expected participation rates of 55% to 60% of eligible class members.
MyChart Lawsuit Payout
MyChart lawsuit payouts will be distributed in two waves beginning in January 2027. The settlement administrator must first process all claims, verify eligibility, and calculate final payment amounts before issuing checks.
First wave payments cover all Tier 1 and Tier 2 claims (base and enhanced compensation). These require minimal verification and should reach claimants by February 2027. You’ll receive payment via check mailed to your address on file or through electronic payment if you selected that option on your claim form.
Second wave payments address Tier 3 claims requiring documentation review. These involve more complex verification of identity theft, fraud, or financial harm. Expect these payments between March and May 2027.
Payout Timeline:
- October 15, 2026: Claims deadline
- November – December 2026: Claims processing and verification
- January 2027: First wave payments issued (Tier 1 & 2)
- March – May 2027: Second wave payments issued (Tier 3)
Payment methods include paper check or direct deposit. The claim form lets you specify your preference. Direct deposit payments arrive approximately 10 business days faster than mailed checks.
No taxes are withheld from settlement payments. You’re responsible for reporting compensation as income on your tax return if the amount exceeds IRS thresholds. The settlement administrator will issue 1099 forms for payments of $600 or more.
Unclaimed payments from checks that go undeposited will be redistributed to other class members or donated to patient privacy advocacy organizations per court order. You have 180 days from the check issue date to deposit your payment.
How to File MyChart Claim
Filing a MyChart claim takes approximately 10 to 15 minutes and can be completed entirely online. The settlement administrator operates a dedicated website with step-by-step instructions and live chat support during business hours.
Start by visiting the official settlement website and entering your claim number. This number appears on the breach notification letter you received from your healthcare provider. If you don’t have your letter, use the lookup tool with your name, date of birth, and zip code.
The online claim form requests basic information: full legal name, current mailing address, email address, phone number, and the healthcare system where you had a MyChart account. You’ll confirm the approximate date you received your breach notification.
Step-by-Step Filing Process:
- Access the settlement website and locate your claim number
- Create an account or proceed as a guest
- Complete the online claim form with personal information
- Select your payment preference (check or direct deposit)
- Upload supporting documentation for enhanced or maximum tier claims
- Review and submit your claim
- Save your confirmation number
For enhanced tier claims, attach a copy of your breach notification letter showing that sensitive medical information was exposed. For maximum tier claims, upload receipts, credit reports, or police reports documenting actual harm.
Acceptable file formats include PDF, JPG, and PNG. Each uploaded document must be under 5MB. You can upload up to 10 supporting documents per claim.
Paper claim forms are available for those who prefer mail submission. Call the settlement administrator’s toll-free number to request a paper packet. Completed forms must be postmarked by October 15, 2026.
MyChart Lawsuit Deadline 2026
The MyChart lawsuit deadline is October 15, 2026, at 11:59 PM Pacific Time. All claim forms must be submitted online by this time or postmarked by this date if filing by mail. The deadline is firm with no extensions planned.
Missing the deadline means forfeiting your right to compensation from the settlement fund. Courts enforce strict deadlines to ensure timely distribution and case closure. Late claims are rejected automatically with no exceptions.
The claims period opened April 1, 2026, giving class members six and a half months to file. This extended window provides ample time to gather documentation and complete the submission process.
Critical Deadlines:
| Deadline | Action Required |
|---|---|
| October 15, 2026 | Submit online claim or postmark paper claim |
| October 15, 2026 | Opt-out deadline (if choosing not to participate) |
| October 15, 2026 | Objection deadline (if opposing settlement terms) |
If you opt out by the deadline, you preserve your right to pursue individual legal action against your healthcare provider. However, you forfeit settlement compensation and must hire your own attorney at your own expense.
Set a reminder for early October to avoid last-minute technical difficulties or mail delays. The settlement website may experience high traffic as the deadline approaches, potentially causing slowdowns.
Key Takeaway: Mark October 15, 2026, on your calendar immediately, and aim to file by late September to avoid deadline stress and ensure your claim is processed without complications.
MyChart Data Breach Lawsuit
The MyChart data breach lawsuit addresses cybersecurity failures that allowed hackers to access patient portals at 47 healthcare systems. Data breaches occurred through multiple attack vectors including credential stuffing, phishing campaigns, and exploitation of unpatched software vulnerabilities.
Credential stuffing attacks used stolen username and password combinations from other data breaches. Hackers tested these credentials against MyChart login pages, successfully accessing accounts where patients reused passwords across multiple websites.
Healthcare systems failed to implement multi-factor authentication despite Epic Systems recommending this security measure in 2019. This single security gap enabled the majority of unauthorized access incidents.
Common Breach Methods:
- Credential stuffing with recycled passwords from other breaches
- Phishing emails tricking patients into revealing login credentials
- Exploitation of outdated MyChart software versions
- Insider access abuse by terminated employees with unrevoked credentials
The lawsuits argue that these breaches were preventable with reasonable security measures. Industry standards for protecting electronic health records require regular security audits, prompt software updates, and multi-layered authentication systems.
Forensic investigations revealed that some healthcare systems knew about suspicious login activity for weeks before taking action. Delayed response times allowed hackers extended access to patient data.
Beyond immediate privacy violations, the breaches created long-term risks. Medical identity theft can take years to detect and resolve. Victims may face denied insurance claims, incorrect medical records, and damaged credit histories.
Epic Systems Lawsuit 2026
The Epic Systems lawsuit 2026 question comes up frequently, but Epic Systems Corporation isn’t a defendant in the current MyChart litigation. The lawsuits target healthcare providers who use Epic’s software, not Epic itself.
Epic Systems develops and licenses the MyChart patient portal platform to hospitals and medical centers. Healthcare providers are responsible for implementing, configuring, and maintaining the software according to security best practices.
Legal liability falls on the healthcare organizations because they control patient data and make decisions about security settings, authentication requirements, and software update schedules. Epic provided security patches and recommendations that many providers delayed implementing.
Why Healthcare Providers Face Liability:
- They are HIPAA-covered entities with legal duty to protect patient information
- They control software configuration and security settings
- They decide when to implement security updates and patches
- They establish password requirements and authentication protocols
- They train staff and manage access controls
Epic Systems has cooperated with investigations by providing technical documentation about security features and timeline of patch releases. This evidence actually supports plaintiffs’ claims that healthcare providers had tools available to prevent breaches but failed to use them.
Some legal experts predict potential future litigation against Epic Systems if discovery reveals that the company knew about critical vulnerabilities but didn’t disclose them promptly. Such cases would be separate from the current 2026 settlements.
Current settlement funds come entirely from healthcare provider insurance policies and operating budgets, not from Epic Systems.
MyChart Patient Portal Lawsuit
The MyChart patient portal lawsuit specifically addresses failures in how healthcare systems managed and secured their patient portal implementations. Patient portals are online platforms that give patients 24/7 access to their medical records, test results, and communication with healthcare providers.
MyChart is the most widely used patient portal in the United States, serving over 190 million patients across more than 1,000 healthcare organizations. This widespread adoption made it an attractive target for cybercriminals seeking valuable medical information.
The lawsuits highlight systemic problems in patient portal security across the healthcare industry. Many organizations prioritized convenience and ease of access over security protections. Simple passwords like “password123” or “Welcome1” were allowed without complexity requirements.
Portal Security Failures:
- No mandatory password complexity requirements
- Absence of multi-factor authentication options
- Unlimited login attempts without account lockouts
- No alerts for suspicious login locations or devices
- Delayed security patch implementation
Patients trusted that their healthcare providers would protect sensitive medical information stored in these portals. The breach of that trust forms the basis for negligence claims in the lawsuits.
Testimony from cybersecurity experts established that implementing basic protections would have prevented 80% to 90% of unauthorized access incidents. The cost of these security measures was minimal compared to the harm caused by breaches.
The patient portal lawsuit also addresses inadequate breach response. Some healthcare systems waited 60 to 90 days before notifying affected patients, violating HIPAA’s 60-day notification requirement.
MyChart Privacy Lawsuit
The MyChart privacy lawsuit centers on violations of patient privacy rights protected under HIPAA and state privacy laws. These regulations require healthcare providers to implement administrative, physical, and technical safeguards to protect patient information.
HIPAA’s Security Rule specifically mandates risk assessments, security training, and regular reviews of security measures. The lawsuits allege that defendant healthcare systems failed to conduct required risk assessments that would have identified MyChart vulnerabilities.
State privacy laws in California, New York, and Texas provide additional protections beyond HIPAA. These laws give patients private rights of action to sue for privacy violations and collect statutory damages without proving actual financial harm.
Privacy Violations Alleged:
- Failure to conduct required security risk assessments
- Inadequate staff training on privacy protections
- Lack of encryption for data in transit
- Missing audit controls to track who accessed patient records
- Failure to establish proper access termination procedures
The privacy lawsuit seeks not just compensation for past harm but also injunctive relief requiring improved security practices going forward. Settlement agreements include provisions requiring participating healthcare systems to implement specific security upgrades.
These mandatory improvements include multi-factor authentication, annual security audits, employee privacy training, and faster breach notification protocols. Compliance monitoring will continue for three years after settlement approval.
Privacy violations carry particular weight because medical information is among the most sensitive personal data. Medical diagnoses, mental health treatment, prescription medications, and reproductive health services all deserve maximum protection.
MyChart Lawsuit Status
The MyChart lawsuit status as of June 2026 shows all three consolidated cases in the claims administration phase. Court proceedings have concluded with final settlement approval granted and no appeals pending.
Claims processing is underway with over 1.1 million submissions received as of June 15, 2026. This represents approximately 38% of eligible class members, slightly below initial projections. The settlement administrator continues outreach efforts to notify remaining class members before the October deadline.
No significant legal challenges threaten the settlement. The objection rate of 0.3% was far below the threshold that would trigger court reconsideration. Objectors primarily disputed the adequacy of compensation amounts, but courts found the settlement fair and reasonable given litigation risks.
Current Status by District:
| Court | Status | Claims Received | Percentage |
|---|---|---|---|
| N.D. California | Claims processing | 542,000 | 37.4% |
| S.D. New York | Claims processing | 381,000 | 38.9% |
| Texas Federal Court | Claims processing | 177,000 | 23.0% |
The lower participation rate in Texas cases stems from later notice mailing due to administrative delays. The settlement administrator added phone outreach and social media advertising to boost awareness.
Defense counsel has raised no challenges to claim validity rates. Initial reviews show fraud rates below 0.5%, indicating effective verification processes. This low fraud rate supports on-time payment distribution in early 2027.
Status updates are posted monthly on the settlement website. Class members can subscribe to email alerts for case developments and payment timeline updates.
MyChart Settlement Update 2026
The latest MyChart settlement update from June 2026 announces expanded documentation acceptance for Tier 3 claims. The settlement administrator now accepts credit monitoring subscription confirmations as proof of harm, even without receipts for specific fraud incidents.
This change responds to feedback from class counsel that many patients purchased credit monitoring as a preventive measure but didn’t experience completed fraud. Their proactive protection efforts now qualify for enhanced compensation.
Recent Settlement Changes:
- Credit monitoring subscriptions now qualify for Tier 3 compensation
- Phone support hours extended to 8 AM to 8 PM Eastern, Monday through Saturday
- Spanish-language claim forms and support added
- Extended claim lookup tool to include maiden names and former addresses
Technical improvements to the settlement website have reduced claim submission time from an average of 18 minutes to just 11 minutes. The updated interface works better on mobile devices, recognizing that many class members prefer smartphone access.
Payment projections remain on track for January 2027 distribution. Current settlement fund capacity can support full payouts at participation rates up to 68% of eligible class members. Actual participation trending at 40% to 45% means no pro-rata reductions are expected.
The settlement administrator published FAQs addressing common questions about tax treatment, payment timing, and documentation requirements. These resources are available in English and Spanish on the settlement website.
Class counsel continues monitoring compliance with settlement terms requiring security improvements. Early reports show that 41 of 47 participating healthcare systems have already implemented multi-factor authentication, ahead of the December 2026 deadline.
Key Takeaway: Settlement administration is proceeding smoothly with enhanced support resources, streamlined claims processes, and all deadlines on track for early 2027 payments to eligible class members.
Frequently Asked Questions
Is there an active MyChart lawsuit in 2026?
Yes, three consolidated class action lawsuits are active in federal courts in California, New York, and Texas.
These cases involve 47 healthcare systems and over 3.2 million affected patients.
Claims are being accepted through October 15, 2026.
How much money can I get from the MyChart settlement?
Settlement amounts range from $150 to $2,500 depending on what information was exposed and whether you experienced documented harm.
Most claimants receive between $300 and $600.
Enhanced payments require proof of identity theft or fraud expenses.
What is the deadline to file a MyChart lawsuit claim?
The filing deadline is October 15, 2026, at 11:59 PM Pacific Time.
Online claims must be submitted by this time, or paper forms must be postmarked by this date.
No extensions will be granted, so file early to avoid missing out.
Do I need a lawyer to join the MyChart class action?
No, you don’t need to hire a lawyer to participate in the class action settlement.
The claims process is designed for self-submission through a simple online form.
Class counsel represents all class members collectively at no individual cost.
How long will it take to receive my MyChart settlement payment?
Payments are projected to begin in January 2027 for standard claims.
Claims requiring documentation review may receive payment between March and May 2027.
You’ll receive payment via check or direct deposit based on your claim form preference.
If you used MyChart at any of the 47 affected healthcare systems between 2020 and 2025, check the settlement website today to see if you qualify. The October 2026 deadline approaches faster than you think.
Don’t leave money on the table because you waited too long. Filing your claim takes less than 15 minutes and could put hundreds of dollars in your pocket by early 2027.
Visit the settlement website, enter your information, and submit your claim before the deadline passes.
