HCA Healthcare data breach class action settlement

HCA Healthcare agreed to a class action lawsuit settlement to resolve claims that it failed to prevent a 2023 data breach that compromised patient information.

The HCA Healthcare settlement benefits current HCA patients whose personal information was compromised in the July 2023 data breach.

The HCA Healthcare data breach was reportedly the result of a “criminal cyberattack” that allowed hackers to access and steal information from 3.6 million patients. Plaintiffs in the data breach class action lawsuit argue that HCA’s failure to protect their information has put them at risk for identity theft and fraud.

HCA Healthcare, a healthcare provider with locations across the United States, has not admitted any wrongdoing but agreed to pay an undisclosed sum to resolve these allegations.

Under the terms of the HCA Healthcare settlement, class members can receive one year of free credit monitoring and insurance services. These services include up to $1 million in identity theft insurance and one-bureau credit monitoring.

Class members can also receive a payment of up to $5,000 for documented losses related to the data breach. These losses can include fraudulent charges, identity theft, bank fees, credit expenses and more. Class members must provide reasonable documentation of these losses in order to receive compensation.

The deadline for exclusion and objection is Aug. 25, 2025.

The final approval hearing for the HCA Healthcare data breach settlement is scheduled for Oct. 27, 2025.

To receive settlement benefits, class members must submit a valid claim form by Sept. 25, 2025.

Who’s Eligible

Current HCA patients whose personal information was compromised in the July 10, 2023, data breach.

Potential Award

$5,000 in documented expenses

Proof of Purchase

Receipts, bills or invoices, bank statements, correspondence including emails and other documentation of data breach related expenses.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

09/25/2025

Case Name

In re: HCA Healthcare Inc. Data Security Litigation, Case No. 3:23-cv-00684, in the U.S. District Court for the Middle District of Tennessee

Final Hearing

10/27/2025

Settlement Website

HCAHealthcareSettlement.com

Claims Administrator

In re HCA Healthcare, Inc., Data Security Litigation
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
833-420-3945

Class Counsel

Jean Martin
MORGAN & MORGAN COMPLEX LITIGATION GROUP

J. Gerard Stranch IV
Grayson Wells
STRANCH, JENNINGS & GARVEY PLLC

Defense Counsel

Andrew B. Clubok
Susan E. Engel
Melanie M. Blunschi
Marissa Alter-Nelson
LATHAM & WATKINS LLP