Norton Healthcare $11M Data Breach Class Action Settlement

Current and former patients and employees who received a letter from Norton Healthcare or Norton Hospitals notifying them that their personal information may have been exposed in a data breach around May 9, 2023, may be eligible to submit a claim up for to $2,500 plus additional benefits from a class action settlement.

Norton Healthcare Inc. and Norton Hospitals Inc. have agreed to pay $11 million to settle a class action lawsuit alleging negligence, breach of implied contract, unjust enrichment, and invasion of privacy following a cybersecurity incident that affected current and former patients and employees. The breach compromised PII and PHI belonging to as many as 2,487,683 people.

Who can file a claim for a data breach payout?

Class members must meet the following criteria:

• Their personal and protected health information may have been compromised in Norton Healthcare and Norton Hospitals data breach that occurred in 2023.
• They are on the class list provided by the defendants and received notification of the data incident.

How much will the settlement payment be?

Class members can submit to receive one or more of the following:

• Medical monitoring services: All class members can elect to receive three years of CyEx’s Medical Shield Pro medical account monitoring.
• Out-of-pocket losses: Class members can claim up to $2,500 for unreimbursed expenses and losses, which may include bank or credit card fees, fees for credit reports or monitoring, freezing/unfreezing credit, identity theft insurance and losses due to fraud or identity theft. Losses and expenses must have occurred between May 9, 2023 and May 18, 2026.
• Lost time: Class members can claim $20 per hour for up to four hours, a maximum of $80, of lost time spent dealing with issues related to the data breach, such as acquiring credit freezes, remedying fraud, monitoring statements and changing passwords.
• Cash payment: All class members can submit to receive a pro rata cash payment of at least $5, from the remaining net settlement fund after all other claims are paid. Final amount will be determined by the total number of claims filed.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: Berthold, et al. v. Norton Healthcare, Inc., et al. c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324

Claim deadline is May 18, 2026.

Required claim information and proof

• Class Member ID required to submit a claim online.
• Out-of-pocket losses claims require supporting documentation, which may include bank or credit card statements showing unreimbursed fees or charges due to fraud, receipts, invoices and other proof of fraud or identity theft.

Payout options

• Electronic payment, only available for online claims
• Paper check, mailed to the address provided

$11 million data breach settlement fund

The $11,000,000 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $3,666,666.67
• Attorneys' expenses: To be presented to the court for approval at a later date
• Service awards to class representatives: $3,500 each
• Medical monitoring: Cost determined by number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Final approval hearing: May 15, 2026
• Deadline to file a claim: May 18, 2026
• Deadline to opt out: April 20, 2026

When is the Norton Healthcare data breach settlement payout date?

Payments and medical monitoring information will be issued to approved claimants approximately 76 days after the court grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit alleged that Norton Healthcare Inc. and Norton Hospitals Inc. failed to protect confidential personal and protected health information, resulting in a data breach. Plaintiffs claimed negligence, breach of implied contract, unjust enrichment, and invasion of privacy.

The defendants deny the allegations, but agreed to settle to avoid the uncertainty and expense of further litigation and a possible trial.

Sources

1. Official class notice
2. Official settlement website
3. Official settlement claim form