Current patients of HCA Healthcare Inc. in the United States whose personal information was compromised in a July 2023 data breach may be eligible to claim up to $5,000 from a class action settlement.
HCA Healthcare has agreed to settle a lawsuit that alleged it failed to protect sensitive patient data, resulting in a cyberattack that exposed personal information.
Who Is Eligible to File a Claim?
To qualify, class members must meet all of the following criteria:
- Be a current HCA Healthcare patient
- Reside in the United States
- Have had their personal information compromised in the data breach HCA disclosed around July 10, 2023
What Compensation Is Available?
Eligible class members may claim one or both of the following:
- Credit Monitoring and Identity Protection Services: One year of one-bureau credit monitoring, identity theft insurance (up to $1 million), fraud consultation, and identity restoration services. If a class member already has credit monitoring, they may defer enrollment for up to 12 months.
- Documented Loss Payment: Up to $5,000 for verified financial losses directly tied to the data breach. This includes costs like fraudulent charges, identity theft expenses, or fees for credit repair services.
How to File a Claim
Claims can be filed online or by mailing a completed PDF claim form. The deadline to submit a claim is September 25, 2025.
Mailing Address for Claims:
In re HCA Healthcare Inc. Data Security Litigation
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
Documentation Requirements
- Claimants must include the Class Member ID from their official settlement notice.
- Claims for documented losses must include supporting documents such as receipts, bills, bank or credit card statements, or correspondence linking the loss to the data breach.
- Personal affidavits are not sufficient by themselves but may be used in addition to other documentation.
Payment Methods
- Electronic transfer (available only for online claims)
- Paper check (for both online and mail-in claims)
Settlement Fund Allocation
The settlement fund will be used for:
- Administrative costs
- Attorneys’ fees and expenses (up to $3.1 million)
- Service awards to class representatives (up to $5,000 each)
- Credit monitoring and identity protection costs
- Payments to eligible class members
Exact costs will be finalized after court approval. Any remaining funds will be distributed to claimants.
Key Deadlines
- Opt-out deadline: August 25, 2025
- Claim submission deadline: September 25, 2025
- Final approval hearing: October 27, 2025
When Will Payments Be Made?
Payments are expected to be distributed approximately 90 days after final court approval and resolution of any appeals. Credit monitoring instructions will be sent out about 30 days after final approval.
Why Is There a Settlement?
The lawsuit alleged that HCA Healthcare failed to implement sufficient cybersecurity protections, allowing hackers to access patient information stored on an external platform. HCA denies any wrongdoing but agreed to settle to avoid further legal costs and the uncertainty of litigation.
Sources
Settlement Status: Open for Claims
Award Amount: Varies
Claim Deadline: September 25, 2025
Please be aware that your claim form will be rejected if it contains fraudulent information. By submitting your information and your sworn statement of its accuracy, you are agreeing to do so under penalty of perjury. Submitting false information not only jeopardizes your claim but also affects others who are genuinely eligible for the settlement. If you are uncertain about your eligibility for this class action settlement, please visit the class action administrator’s website for more information. Note that NoProofClassActions.org participates in the Amazon affiliate advertising program, and this post may include affiliate links, which could result in us earning a commission if you make a purchase through those links.
