If you used MyChart to access your health records, you may be eligible for compensation in one of the largest healthcare data privacy lawsuits in recent American history. Millions of patients had their sensitive health data secretly shared with Facebook, Google, and other advertisers without ever consenting.
The lawsuits center on tracking pixels that were quietly embedded inside MyChart patient portals used by hundreds of hospitals across the country. These tiny pieces of code transmitted private health information to tech companies for advertising purposes.
This guide covers everything you need to know: what happened, whether you qualify, which hospitals are involved, how much you might receive, and what deadlines you cannot afford to miss in 2026.
One striking fact before we begin: the U.S. Department of Health and Human Services has confirmed that pixel tracking tools at healthcare websites violated HIPAA rules, giving these lawsuits significant legal weight.
MyChart Lawsuit Eligibility: The Core Question Answered
MyChart lawsuit eligibility depends primarily on whether you used a MyChart patient portal hosted by a hospital or health system that deployed third-party tracking pixels without your informed consent.
If you logged into MyChart at any point between 2015 and 2023, used it to schedule appointments, view test results, message your doctor, or check prescriptions, and if your hospital is among those named in active litigation, you may have a valid claim.
You do not need to prove your data was actually sold or that you suffered direct financial harm. Courts have recognized that unauthorized disclosure of protected health information is itself a legally recognized injury in these cases.
| Eligibility Factor | Required? |
|---|---|
| Used MyChart patient portal | Yes |
| Hospital is a named defendant | Yes (check list below) |
| Date of use: 2015 to 2023 | Preferred range |
| Proof of specific data misuse | Not required |
| Documented financial loss | Not required |
| U.S. resident | Yes |
The timeline for these lawsuits is active in 2026. Several cases are in settlement negotiation phases, while others remain in federal court litigation.
MyChart Class Action Lawsuit 2026: Where Things Stand
The MyChart class action lawsuits are active in 2026, with multiple federal cases pending across several U.S. district courts simultaneously.
These are not single lawsuits. They are a wave of related class actions filed against individual hospital systems and, in some cases, against Epic Systems itself. Courts in Illinois, California, and Wisconsin have seen the heaviest filing activity.
In 2022 and 2023, federal regulators issued guidance confirming that using tracking pixels on patient portals likely violates HIPAA. That regulatory confirmation has strengthened plaintiff positions in all pending cases.
By early 2026:
- Several hospital defendant cases have moved into settlement discussions
- At least two major cases have achieved class certification
- Discovery phases have uncovered internal communications showing hospitals knew about the tracking
- Defendants continue contesting whether plaintiffs have standing to sue without showing direct monetary harm
Key stat: The Advocate Aurora Health pixel tracking case alone exposed data from an estimated 3 million patients, making it one of the largest healthcare data exposure events in the past decade.
What Is the MyChart Privacy Lawsuit: Plain English Explanation
The MyChart privacy lawsuit is a set of class action cases alleging that hospital systems used their MyChart patient portals to secretly collect and transmit private health data to Facebook, Google, and other advertising platforms.
MyChart is a patient portal software created by Epic Systems Corporation. It allows patients to log in and access their medical records, test results, appointment history, and doctor messages. It is used by over 300 million patients worldwide.
The problem: many hospitals embedded tracking pixels inside MyChart pages. When you logged in and clicked around, those pixels fired off signals to Facebook and Google. Those signals could include what conditions you searched, what medications appeared in your records, even the fact that you scheduled a specific type of appointment.
Think of it this way: imagine writing a private letter to your doctor, but someone was reading over your shoulder and taking notes to sell to advertisers. That is what these pixels allegedly did.
The hospitals never asked for your permission. Most patients had no idea this was happening.
| What Was Shared | Where It Went |
|---|---|
| Login events (you visited a health portal) | Meta / Facebook |
| Appointment types and scheduling data | Google Analytics |
| Health condition-related page views | Third-party ad networks |
| Prescription and medication page activity | Marketing platforms |
| Location and device data | Multiple advertisers |
MyChart Pixel Tracking Lawsuit Explained: The Technology Behind It
The MyChart pixel tracking lawsuit centers on small pieces of JavaScript code called tracking pixels or web beacons that hospitals placed inside their patient-facing web pages.
These pixels are standard tools in digital advertising. Websites use them all the time to measure ad performance and retarget shoppers. The legal problem is that healthcare providers are bound by HIPAA, which protects patient health information from being disclosed to third parties without explicit authorization.
When a pixel fires inside a patient portal, it sends data back to Facebook or Google. That data can include the URL of the page you were on, which might say something like “diabetes-management” or “oncology-appointment-scheduling.” Combined with your Facebook account information or Google identity, this creates a linked health profile.
The HHS Office for Civil Rights issued a bulletin in December 2022 explicitly stating that using tracking technologies on webpages where patients access health information likely constitutes a HIPAA violation.
What the pixels captured:
- Your IP address and device identifiers
- The exact pages you visited within the portal
- The time and duration of your visit
- Button clicks and form submissions
- Health-related keywords embedded in page URLs
- Whether you were logged into a Facebook or Google account simultaneously
This was not a hack. This was intentional technology placed by hospitals themselves.
Epic Systems MyChart Lawsuit Details: The Company at the Center
Epic Systems Corporation built and maintains the MyChart platform, making it a central figure in these lawsuits even when hospitals are the primary defendants.
Epic is based in Verona, Wisconsin. It holds roughly 36% of the U.S. electronic health records market. MyChart is its patient-facing product, used by hospitals from rural community clinics to the largest academic medical centers in the country.
Plaintiffs in several cases have argued that Epic facilitated the data sharing by integrating pixel-friendly features into MyChart’s architecture. Some lawsuits name Epic directly as a co-defendant.
Epic has largely argued that it provides the software tools and that hospitals bear responsibility for how they configure and deploy those tools. This “vendor versus operator” dispute is one of the key legal battlegrounds in 2026.
| Epic Systems Fast Facts | Detail |
|---|---|
| Founded | 1979 |
| Headquarters | Verona, Wisconsin |
| U.S. EHR Market Share | Approximately 36% |
| MyChart Users Worldwide | Over 300 million |
| Primary Defendants in Lawsuits | Hospital systems using MyChart |
| Epic’s Legal Position | Hospitals control pixel deployment |
Courts are still working through questions about Epic’s liability exposure. Some rulings have been mixed.
Hospitals Named in the MyChart Lawsuit: Who Is a Defendant
Dozens of major hospital networks and health systems have been named as defendants in MyChart-related data privacy lawsuits filed between 2022 and 2024.
This is one of the most important facts for potential claimants to understand: the lawsuit you may be eligible for depends on which hospital system treated you, not just on the fact that you used MyChart. MyChart is the platform; the hospitals are the operators and the primary defendants.
Hospital systems named in active or settled litigation include:
- Advocate Aurora Health (Illinois and Wisconsin)
- CommonSpirit Health (multiple states)
- Novant Health (North Carolina)
- WakeMed Health and Hospitals (North Carolina)
- Northwestern Memorial Hospital (Illinois)
- University of California San Francisco Medical Center
- Dignity Health (California and Arizona)
- Rush University Medical Center (Illinois)
- Piedmont Healthcare (Georgia)
- Froedtert Health (Wisconsin)
This list is not exhaustive. More than 100 hospital systems have faced pixel-tracking-related complaints or investigations.
Key Takeaway: If your hospital is listed above, you likely have a pathway to eligibility that is worth pursuing before the 2026 filing deadlines pass.
MyChart HIPAA Violation Lawsuit: The Legal Theory Explained
The HIPAA violation theory is the backbone of every MyChart-related class action in federal court right now.
HIPAA, the Health Insurance Portability and Accountability Act, prohibits healthcare providers from disclosing protected health information to third parties without patient authorization. The law covers not just written records but also any data that could identify a patient and connect them to a health condition or treatment.
When MyChart pixels transmitted data about a patient’s portal activity to Facebook or Google, plaintiffs argue this constitutes an unauthorized disclosure of protected health information. The fact that the information was transmitted digitally rather than handed to a stranger in a hallway does not remove it from HIPAA’s scope.
Beyond HIPAA, many lawsuits also allege violations of:
- State consumer protection laws
- Electronic Communications Privacy Act
- California’s Confidentiality of Medical Information Act (CMIA)
- Illinois’ Biometric Information Privacy Act (in some cases)
- Common law breach of confidence and invasion of privacy
The HIPAA violation argument gives these cases particular strength because federal regulators have already validated the theory. HHS said in writing that pixel tracking on health portals likely crosses the legal line.
MyChart Data Breach Settlement: What Has Been Agreed to So Far
Several MyChart-related cases have reached settlement agreements, while others are still being litigated in 2026.
Advocate Aurora Health agreed to a $12.25 million settlement in a case covering approximately 3 million patients whose data was shared through Facebook and Google pixels on its MyChart portal. That settlement received preliminary court approval and is moving toward final approval and distribution.
Novant Health faced separate federal action and reached a resolution valued at tens of millions of dollars covering patients in North Carolina and surrounding states.
WakeMed settled HIPAA-related pixel tracking claims with the federal government for $240,000 in civil money penalties. That was a regulatory settlement, not a class action payout, so affected patients may still have separate civil claims available.
| Settlement | Approximate Value | Patients Covered | Status in 2026 |
|---|---|---|---|
| Advocate Aurora Health | $12.25 million | ~3 million | Distribution phase |
| Novant Health | Tens of millions | TBD | Final approval pending |
| WakeMed (HHS regulatory) | $240,000 | N/A (regulatory only) | Resolved |
| CommonSpirit Health | Litigation ongoing | Millions | Active litigation |
| Northwestern Memorial | Partial resolution | TBD | Active |
These settlement figures represent early results. Larger and more complex cases involving bigger hospital networks could yield significantly higher total fund amounts.
Key Takeaway: Settlements are already happening, which means deadlines to file are real and approaching fast.
MyChart Lawsuit Settlement Amount: What Individual Claimants Can Expect
Individual MyChart lawsuit settlement payouts vary significantly based on which hospital is the defendant, how large the settlement fund is, and how many valid claimants submit claims.
In the Advocate Aurora settlement, with approximately 3 million covered patients and a $12.25 million fund, a rough per-capita estimate lands around $4 per claimant before deductions for legal fees and administration costs. That sounds small. But courts often create tiered systems where claimants who can show greater harm or greater exposure receive larger shares.
Some claimants in similar healthcare data cases have received between $50 and $500 per person through tiered distribution structures. Cases with smaller claimant pools and larger settlement funds produce better individual payouts.
| Settlement Type | Estimated Per-Person Range | Notes |
|---|---|---|
| Large fund, large claimant pool | $4 to $30 | Advocate Aurora structure |
| Medium fund, targeted claimants | $50 to $200 | Smaller class sizes |
| High-harm tier claimants | $200 to $500+ | Documented sensitivity |
| Statutory damages cases | Set by statute | State law variations apply |
| Regulatory-only settlements | $0 to individuals | Government keeps funds |
The real value for many claimants is not just the check. Class actions also force hospitals to change their data practices, which protects millions of patients going forward.
MyChart Lawsuit Payout Per Person: How the Math Works
The payout per person in a MyChart lawsuit depends on four key variables: the total settlement fund amount, the number of valid claims filed, how courts tier the distribution, and whether legal fees are deducted before or after allocation.
In most class actions, attorneys receive between 25% and 33% of the total settlement fund. Administration costs take another few percentage points. What remains is divided among qualifying claimants.
Courts often create multiple payout tiers:
- Tier 1 (Base claimants): Anyone who used the portal during the covered period. Lowest payout.
- Tier 2 (Enhanced claimants): Those who can show sensitive health categories were involved (mental health, reproductive care, cancer treatment). Higher payout.
- Tier 3 (Documented harm claimants): Those who show actual downstream harm from the data exposure. Highest individual payout.
The strategic move for claimants is to document your usage history and note whether any sensitive health topics appeared in your portal activity during the covered period. Courts have awarded larger shares to those who can show they used the portal for sensitive conditions.
Not filing at all guarantees zero dollars. Filing costs nothing but a few minutes of your time.
Who Qualifies for the MyChart Lawsuit: Detailed Eligibility Breakdown
You likely qualify for the MyChart lawsuit if you meet the following core criteria.
You must have:
- Used a MyChart patient portal at least once between approximately 2015 and 2023
- Received care from a hospital system that is a named defendant in an active lawsuit
- Been a patient, not just an employee or visitor, using the portal for your own health records
- Resided in the United States during the period of covered use
You do NOT need:
- Proof that your specific data was sold or misused
- Evidence of financial loss or identity theft
- Any medical records confirming what data was transmitted
- Prior contact with attorneys or notification letters from the hospital
| Qualifier | Meets Eligibility? |
|---|---|
| Used MyChart for personal health records | Yes, qualifies |
| Hospital is a named defendant | Yes, qualifies |
| Used portal only for a family member’s records | Possibly, case-specific |
| Received a breach notification letter from hospital | Strong qualifier |
| Used MyChart at non-defendant hospital | Not eligible under current suits |
| Used portal after lawsuit’s cutoff date | May not qualify |
If you received a letter from your hospital informing you of a data privacy incident involving pixel tracking or third-party data sharing, that letter is strong documentation. Keep it.
Key Takeaway: Eligibility does not require proof of harm. Using the portal at a named hospital during the covered window is the primary threshold.
How to File a MyChart Lawsuit Claim: Step-by-Step
Filing a MyChart lawsuit claim in 2026 is a straightforward process, but the steps differ slightly depending on which hospital’s settlement you are filing under.
General process:
- Confirm your hospital is a named defendant in a settled or active case
- Locate the official claims administrator website for that specific settlement (search the hospital name plus “class action settlement”)
- Gather your information: full name, address, date of birth, approximate dates of MyChart use, and email address used to register the portal
- Complete the online claim form or download and mail a paper form
- Submit any supporting documentation if the case requires it (most do not)
- Receive a confirmation number and await payment distribution
What you will typically need to provide:
- Personal identification information matching your MyChart account
- The hospital or health system where you were a patient
- Approximate date range of portal use
- Contact information for payment delivery
You generally do not need an attorney to file a basic class action claim. The process is designed for self-filing. For Tier 2 or Tier 3 claims involving documented harm, attorney guidance may increase your individual recovery.
Most claims take between 5 and 20 minutes to complete online.
MyChart Lawsuit Claim Form: What to Expect When You File
The MyChart lawsuit claim form is typically a short digital form administered by a court-appointed claims administrator, not by the hospital or the plaintiff’s attorneys.
Different settlements use different administrators. Each has its own portal. There is no single universal MyChart claim form that covers all cases. You must identify which specific case applies to your hospital and file through that settlement’s process.
Common fields on the claim form:
- Full legal name
- Current mailing address
- Email address on file with MyChart
- Name of the hospital or health system
- Approximate dates of portal use
- Whether you received a breach notification letter (if applicable)
- Preferred payment method (check, Venmo, PayPal, or digital payment)
- Signature and certification of accuracy
Fraudulent claims are screened. Claims administrators compare submitted information against the hospital’s patient records. Do not submit a claim for a hospital where you were never a patient.
The form is free to submit. Any website charging you to submit a class action claim form is a scam.
MyChart Lawsuit Deadline 2026: Do Not Miss These Dates
The MyChart lawsuit deadline in 2026 varies by settlement, and missing it means losing any right to compensation from that specific case.
Class action deadlines are hard stops. Courts set them, and once they pass, claimants who failed to file are typically barred from recovery regardless of how strong their claim would have been.
| Settlement | Claims Deadline | Notes |
|---|---|---|
| Advocate Aurora Health | Check administrator site | Claims distribution in progress |
| Novant Health | Pending court order | Monitor for 2026 announcement |
| CommonSpirit Health | Litigation ongoing | No deadline set yet |
| Other hospital cases | Varies | Check each hospital’s settlement page |
What “opting out” means: If you receive a class action notice and do nothing, you are automatically included in the settlement. You receive whatever the court awards without needing to do anything extra for most base-tier settlements.
If you want to pursue an individual lawsuit instead of accepting the class settlement (because you believe your harm is greater), you must formally opt out before the opt-out deadline. Missing that deadline locks you into the class settlement terms.
General advice for 2026: Do not wait. If your hospital is in active settlement discussions, deadlines can be announced and expire within 60 to 90 days of court approval. Set up a search alert for your hospital’s name plus “class action settlement 2026.”
MyChart Lawsuit Update 2026: What Is Happening Right Now
In 2026, the MyChart data privacy litigation is in multiple simultaneous phases depending on which hospital defendant you are tracking.
The Advocate Aurora Health settlement has moved into its distribution phase. Claimants who filed before the deadline are now in the queue for payment.
The CommonSpirit Health case, which could be one of the largest because of the size of the hospital network, remains in active litigation. CommonSpirit operates 140 hospitals across 21 states. If this case reaches settlement, the potential claimant pool runs into the tens of millions.
Several smaller hospital cases have achieved settlements or are in final approval stages. Courts are issuing orders at different times, which means the litigation landscape continues to shift throughout 2026.
Notable 2026 developments:
- Federal court rulings on standing continue to shape which claims can proceed
- HHS has initiated separate enforcement actions against multiple hospital defendants
- State attorneys general in California, Illinois, and North Carolina have opened parallel investigations
- Congress has discussed but not passed comprehensive health data privacy legislation, leaving HIPAA as the primary legal framework
- Epic Systems faces ongoing scrutiny in congressional testimony about its platform’s role in enabling pixel deployment
The pressure on hospital defendants to settle is increasing. Discovery has surfaced internal emails showing awareness of pixel tracking in some cases.
Is the MyChart Lawsuit Legitimate: Separating Fact From Scam
The MyChart class action lawsuits are legitimate legal proceedings filed in federal courts across the United States. They are not scams.
These cases have been covered by major news organizations including Reuters, the Associated Press, ProPublica, and The Wall Street Journal. Federal courts have accepted the cases, certified classes in some instances, and approved settlements. The U.S. Department of Health and Human Services has issued formal guidance supporting the underlying legal theory.
Signs a MyChart claim opportunity is legitimate:
- Settlement information is available on official .gov or court-administered domains
- There is no fee to submit your claim
- The claims administrator is named and verifiable through court records
- You received notice via mail or email from the settlement administrator
- Case numbers are listed and searchable on federal court databases (PACER)
Red flags that signal a scam:
- Website charges a fee to file your “claim”
- You are asked for your Social Security number upfront before any court process
- Email comes from a generic address with no verifiable law firm affiliation
- Claims of guaranteed payouts in specific large amounts before settlement is finalized
- Pressure to sign up with a specific attorney in exchange for filing
Class action lawsuits do not require victims to pay anything to participate. Period.
Key Takeaway: These lawsuits are real, court-verified, and backed by regulatory findings. The only scams to watch for are third parties trying to exploit public awareness of the litigation to collect fees or personal data.
Frequently Asked Questions
Who is eligible for the MyChart lawsuit in 2026?
You are eligible if you used a MyChart patient portal at a hospital that is a named defendant in an active or settled class action.
The covered period generally spans 2015 through 2023.
You do not need proof of financial harm. Using the portal at a qualifying hospital during the covered window is the primary requirement.
How much money can I get from the MyChart lawsuit settlement?
Most base-tier claimants can expect between $4 and $50 per claim, depending on the settlement fund size and total number of claimants.
Claimants who can document involvement of sensitive health categories may qualify for enhanced tier distributions ranging from $50 to $500.
The Advocate Aurora Health settlement of $12.25 million is the largest confirmed settlement to date in 2026.
What is the deadline to file a MyChart lawsuit claim?
Deadlines vary by settlement and must be checked for each specific hospital case.
The Advocate Aurora Health claims period is in its distribution phase as of 2026.
New settlement deadlines are expected to be announced for CommonSpirit Health and other hospital defendants throughout 2026.
Which hospitals are included in the MyChart data privacy lawsuit?
Dozens of hospital systems are named defendants, including Advocate Aurora Health, CommonSpirit Health, Novant Health, WakeMed, Northwestern Memorial, and UCSF Medical Center.
The full list changes as new lawsuits are filed and existing ones are resolved.
Your first step is to confirm whether your specific hospital is a defendant in a filed or settled case.
Is the MyChart class action lawsuit legitimate or a scam?
The lawsuits are legitimate federal class action proceedings filed in U.S. district courts.
Federal courts have accepted cases, certified classes, and approved settlements. HHS has confirmed that pixel tracking on health portals likely violates HIPAA.
Never pay anyone to file your claim. Legitimate class action participation is always free.
Check Your Eligibility and Act Before the Deadline
The MyChart lawsuit eligibility window is open in 2026, but it will not stay open forever. If you used MyChart at any of the named hospital defendants between 2015 and 2023, you have a real path to compensation.
Filing costs you nothing. It takes less time than a coffee break. The courts have already done the hard work of establishing that something wrong happened.
Find your hospital’s settlement administrator, gather your basic personal information, and submit your claim. If your hospital’s case is still in litigation, register your interest with a plaintiff’s law firm handling the case so you are notified the moment a settlement is reached and a filing deadline is set
