$11M Norton Healthcare data breach class action settlement

Norton Healthcare has agreed to pay $11 million as part of a class action lawsuit settlement to resolve claims it failed to protect consumers from a 2023 data breach.

The Norton Healthcare settlement benefits individuals who received a data breach notification letter from Norton Healthcare informing them their personal information may have been compromised in a data breach on or around May 9, 2023.

The Norton Healthcare data breach class action lawsuit claims Norton Healthcare could have prevented a 2023 data breach through reasonable cybersecurity measures. The breach reportedly compromised sensitive patient and employee information, including Social Security numbers.

Norton Healthcare is a Kentucky-based healthcare system that employs over 14,000 people. The company provides services to over 1 million patients each year.

Norton Healthcare has not admitted any wrongdoing but agreed to an $11 million settlement to resolve the data breach class action lawsuit.

Under the terms of the Norton Healthcare settlement, class members can receive up to $2,500 for out-of-pocket expenses related to the data breach. This includes bank fees, communication charges, travel expenses, credit-related costs and fraudulent charges. Class members will need to provide documentation of these expenses in order to receive reimbursement.

Class members may also receive compensation for up to four hours of lost time at a rate of $20 per hour. The lost time must be related to the Norton Healthcare data breach and class members will need to provide documentation of this time in order to receive reimbursement.

In addition to this, class members can get up to three years of medical monitoring services through the settlement. These services can help class members monitor their medical accounts for signs of fraud and identity theft.

Class members are also eligible for a cash payment from the settlement. These payments will be pro rata based on the number of claims filed with the settlement. If the net settlement fund is less than $5 per claimant, payments will be reduced pro rata so that each claimant receives at least $5.

The deadline for exclusion and objection is April 20, 2026.

The final approval hearing for the Norton Healthcare settlement is scheduled for May 15, 2026.

To receive settlement benefits, class members must submit a valid claim form by May 18, 2026.

Who’s Eligible

Individuals who received a letter from the defendants notifying them that their personal information may have been compromised in the data incident.

Potential Award

Up to $2,500 for out-of-pocket losses incl. $80 for lost time, or a cash payment of at least $5.

Proof of Purchase

Documentation of out-of-pocket expenses, such as bank statements, phone bills, gas receipts of credit report fees.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

05/18/2026

Case Name

Berthold, et al. v. Norton Healthcare Inc., et al., Case No. 23-CI-003349, in the Jefferson Circuit Court, Division Two, Kentucky

Final Hearing

05/15/2026

Settlement Website

NortonDataIncidentSettlement.com

Claims Administrator

Berthold v. Norton Healthcare
c/o Kroll Settlement Administration
LLC PO Box 5324 New York, NY 10150-5324
[email protected]
833-319-9294

Class Counsel

J. Gerard Stranch
STRANCH, JENNINGS & GARVEY PLLC

Lynn A. Toops
COHEN MALAD LLP

Defense Counsel

David P. Saunders
MCDERMOTT WILL & SCHULTEVLLP