Geisinger Health $5M Data Breach Class Action Settlement

Individuals who received a notice stating the Nov. 29, 2023, data security incident involving Geisinger Health compromised their personal or health information may be eligible to submit a claim for up to $5,000 and other benefits from a class action settlement.

Geisinger Health and Nuance Communications Inc. agreed to pay $5 million to settle a class action lawsuit alleging they failed to adequately protect patient data, resulting in a data security incident that exposed sensitive personal and health information.

Who can file a claim?

Class members are individuals in the United States whose private information the Nov. 29, 2023, data security incident allowed unauthorized individuals to access and or acquire.

How much is the class action settlement payment?

Class members have the following options:

• Cash payment A – Documented losses: Class members can claim up to $5,000 for actual, documented out-of-pocket losses losses the data security incident caused, including compensation for lost time the class member spent on matters related to the incident, which requires only an attestation rather than third-party documentation. Other monetary losses, such as fraud or bank fees, require supporting documentation
• Cash payment B – Alternate cash payment: Class members who do not submit a documented losses claim may submit a claim to receive a pro rata cash payment. The settlement administrator will determine the final payment amount based on the total number of valid claims filed and the funds remaining after settlement expenses.
• Credit and medical monitoring services: All class members may elect to enroll in one year of three-bureau credit and medical monitoring and identity theft protection services. The service includes $1 million in identity theft insurance, dark web monitoring, medical record monitoring and access to fraud resolution agents.

The settlement administrator will distribute settlement funds after it pays settlement administration costs, attorneys’ fees and expenses and service awards to class representatives. If the number of valid claims exceeds the available funds, the settlement administrator will reduce all cash payments on a pro rata basis.

How to claim an award

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail it to the settlement administrator. The claim deadline is March 18, 2026.

Settlement administrator's mailing address: Settlement Administrator - 83320, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324

Required proof and claim information

• For online or mailed claims, claimants must provide their contact information and any required claim identification information.
• For out-of-pocket expense reimbursement, claimants must provide reasonable third-party documentation of actual, unreimbursed losses that are fairly traceable to the data security incident. Self-prepared documents alone are not sufficient.
• For alternate cash payments and credit and medical monitoring services, claimants do not need to submit documentation of losses. They must attest to their eligibility and submit the claim form.

$5 million settlement fund

The $5,000,000 settlement fund includes:

• Settlement administration costs: To be determined
• Attorneys’ fees and expenses: Up to $1,666,666.67
• Service awards to class representatives: $2,000 each for five representatives ($10,000 total)
• Credit and medical monitoring services: Total determined by number of claims filed
• Payments to eligible class members: Remaining settlement funds

Important dates

• Opt-out deadline: Feb. 17, 2026
• Final approval hearing: March 16, 2026
• Deadline to file a claim: March 18, 2026

When is the Geisinger Health data security incident payout date?

The settlement administrator will issue payments and provide credit monitoring enrollment instructions after the court grants final approval of the settlement and resolves any appeals.

Why is there a class action settlement?

This class action lawsuit alleged the Nov. 29, 2023, data security incident compromised Geisinger Health computer systems, allowing unauthorized parties to access files containing sensitive personal and medical information. The plaintiffs claimed Geisinger Health and Nuance Communications failed to adequately protect this information.

The defendants deny any wrongdoing but agreed to settle to avoid the expense and uncertainties of ongoing litigation.

Sources

1. Class notice
2. Claim form
3. Official settlement website FAQ
4. Settlement agreement