There is no single nationwide “MyChart lawsuit” or universal MyChart claim form. The phrase now commonly refers to several separate privacy lawsuits and settlements involving hospitals or health systems that use Epic’s MyChart patient portal.
Most of the recent cases concern allegations that tracking pixels, cookies or related analytics technologies sent patient or portal activity to third parties without proper consent. Each case has its own defendant, class period, court, claim deadline and official settlement website.
Quick answer: if you searched “MyChart lawsuit” after receiving an email, postcard or online notice, first identify the health system named in the notice. As of September 20, 2026, court-approved claim windows remain open in several MyChart-related privacy settlements, including Bayhealth, Cone Health and Wellstar. Other well-known MyChart settlements—such as SSM Health, BJC HealthCare, Catholic Health and Memorial Health Services—have already passed their original claim deadlines.
This page is informational, not legal advice and not a claims administrator. MyChart-Health.org cannot determine whether you are legally entitled to compensation. Settlement rights can be affected by deadlines, class definitions, exclusions and releases. Use the court-approved notice for the exact case or speak with a qualified attorney if you need advice about your individual rights.
There Is Not One MyChart Lawsuit
MyChart is Epic’s patient-portal technology, but individual hospitals and health systems operate their own MyChart environments. That distinction matters because the recent privacy cases do not all name the same defendant and do not cover every MyChart user.
MyChart is the platform
Epic provides MyChart technology to healthcare organizations. Your actual patient account is associated with the health organization where you receive care.
The health system is usually the case identifier
Current settlement websites identify defendants such as Bayhealth, Cone Health and Wellstar—not a single nationwide group called “MyChart users.”
Eligibility is case-specific
Using MyChart at one hospital does not automatically make you eligible for a privacy settlement involving another hospital.
Do not assume a settlement proves wrongdoing. In the open settlements described below, the defendants deny wrongdoing and the agreements resolve disputed claims without the court deciding that every allegation is true.
MyChart-Related Settlements Still Accepting Claims
The table below was checked against court-approved settlement websites on September 20, 2026. Deadlines and hearing dates can change, so open the official administrator site before submitting personal information.
| Case / health system | Who may be included | Benefit | Deadline | Official site |
|---|---|---|---|---|
|
Bayhealth Pixel Settlement Claims open |
Bayhealth patient-portal users who used defined Bayhealth web properties, including the Bayhealth MyChart portal, between January 1, 2019 and December 31, 2025, subject to the settlement exclusions. | A valid claimant may request a $25 cash payment, one year of CyEx Privacy Shield, or both. |
October 5, 2026 for claims. The earlier opt-out/objection deadline was September 4, 2026. |
BayhealthPixelSettlement.com |
|
Cone Health Pixel Settlement Claims open |
Living individuals who accessed Cone Health’s MyChart patient portal or completed a submission form on a Cone Health website between September 1, 2016 and November 3, 2022, subject to exclusions. | Cone Health agreed to a $1.765 million settlement fund. The net fund is to be divided among valid, timely claims. |
October 5, 2026 for claim, opt-out and objection. Final approval hearing: November 5, 2026. |
ConePixelSettlement.com |
|
Wellstar Data Privacy Settlement Claims open |
U.S. residents whose information was disclosed to a third party through tracking technologies on Wellstar web properties between February 19, 2020 and July 22, 2026, subject to exclusions. | Wellstar agreed to a $4.25 million settlement fund. Valid claimants may receive a pro rata cash payment. |
Claim: November 10, 2026. Opt-out/object: October 26, 2026. Hearing: December 1, 2026. |
WellstarDataPrivacySettlement.com |
Important: being a patient of one of these systems is not necessarily enough. Read the official class definition. Some definitions turn on portal use, specific web properties, specific dates or whether information was allegedly disclosed through tracking technologies.
How to File Safely in Each Currently Open Case
Bayhealth
- Open the court-approved Bayhealth settlement site.
- Read the class definition before opening the claim form.
- Use the LoginID and PIN from the settlement notice if requested.
- If the ID/PIN is missing, contact the administrator rather than guessing.
- Submit online/email by October 5, 2026, or mail the signed claim with a timely postmark.
Cone Health
- Confirm you used the covered MyChart portal or website form during the stated class period.
- Open the official Cone settlement site.
- Use the LoginID and PIN from your notice.
- If they are missing, the official claim page instructs users to contact the administrator.
- File online or mail the completed form by October 5, 2026.
Wellstar
- Confirm that the official class definition fits your situation.
- Open Wellstar’s court-approved settlement website.
- Use the Unique ID and PIN printed on the notice.
- Submit by November 10, 2026.
- Save the confirmation email and confirmation code after online filing.
Useful distinction: the unique settlement ID or PIN printed on a court-approved notice is not your MyChart password. A legitimate settlement administrator does not need your healthcare portal password to process a privacy-settlement claim.
Older MyChart Privacy Settlements: Do Not File Against a Closed Deadline
Search results often keep old claim pages visible after the filing period ends. A third-party article saying a settlement exists does not mean claims are still being accepted.
| Health system | Class / issue summary | Claim status | Useful next step |
|---|---|---|---|
| SSM Health | Settlement covered qualifying SSM patients who logged into SSM Health MyChart between July 6, 2020 and February 10, 2023. |
Deadline passed Claim deadline: November 25, 2025. |
If you already filed, use the official settlement site for payment updates. For current portal access, see our SSM MyChart login guide. |
| BJC HealthCare | Settlement class covered people who used BJC MyChart between June 2017 and August 2022. |
Payments issued Official site says payments to valid claimants were issued January 16, 2026. |
The old claim window is closed. For current BJC/WashU patient access, use our MyChart BJC portal guide. |
| Catholic Health System | The court-approved settlement concerned qualifying current/former patients and certain MyChart users during the stated January 1, 2020 through December 11, 2025 period. |
Deadline passed Claim deadline: April 10, 2026. |
Check the court-approved Catholic Health settlement site for final-status or payment information. |
| Memorial Health Services | Settlement class covered people who accessed the Memorial Health Services patient portal from March 7, 2022 through July 8, 2022. |
Claim period closed Claim deadline: August 21, 2026. |
The official site listed a September 17, 2026 final-approval hearing. If you filed in time, check the official site for the latest post-hearing update. |
Missing a deadline is not the same as being eligible for a new claim elsewhere. Do not submit personal information to a website that promises to “reopen” a closed settlement unless the court-approved administrator itself announces a new opportunity.
How to Verify a MyChart Lawsuit Notice Before You File
This is the highest-value check you can do. A real-looking email can still direct you to the wrong case or a fake claim form.
Identify the exact healthcare organization
Look for the legal name of the defendant—such as Bayhealth Medical Center, Cone Health or Wellstar Health System. “MyChart” by itself is not specific enough.
Match the case number
Court-approved notices normally identify the case title and docket/case number. Compare it with the administrator’s official site.
Match the class period
Check whether your portal use or other covered activity occurred during the dates stated in the notice.
Open the administrator website independently
Type the court-approved settlement domain yourself or reach it from official court documents. Avoid search ads and forwarded social-media links.
Check the deadline before filling anything out
Claim, exclusion and objection deadlines can be different. A claim deadline being open does not necessarily mean the opt-out deadline is still open.
Use the notice ID only where the administrator asks
Some claim forms use a LoginID, Unique ID and/or PIN printed on the settlement notice. Those are settlement credentials—not MyChart healthcare credentials.
Keep proof that you filed
Save the confirmation email/code, a screenshot of the final confirmation page or a copy of the mailed form. Do not store your MyChart password with settlement paperwork.
MyChart Settlement Route Checker
Choose the organization named in your notice. This tool does not collect your name, health information, MyChart login or settlement ID.
What Are Tracking Pixels, and Why Do They Appear in These Lawsuits?
A tracking pixel is not necessarily a visible dot on the screen. Modern tracking technologies can be scripts or code that record how someone interacts with a website or app and send information to the website owner, analytics provider or another third party.
Authenticated patient portals are especially sensitive
HHS says tracking technologies on authenticated pages—such as a logged-in patient portal—can have access to information including IP address, medical-record number, appointments, diagnoses, treatment, prescriptions and billing information.
Public healthcare pages are more nuanced
Not every visit to a public hospital webpage automatically involves protected health information. Context and the information actually collected or disclosed matter.
HIPAA, Tracking Pixels and an Important 2024 Court Limitation
HHS’s Office for Civil Rights says HIPAA-regulated organizations must comply with the HIPAA Privacy, Security and Breach Notification Rules when tracking technologies receive protected health information. HHS specifically treats authenticated patient-portal pages as sensitive because tracking tools there generally can access PHI.
There is also an important legal limitation: in June 2024, a federal court vacated the portion of HHS guidance that treated the combination of an IP address plus a visit to an unauthenticated public webpage about a specific health condition or provider as automatically triggering HIPAA obligations in the circumstances addressed by the case.
Why this matters: “A hospital website used a pixel” and “HIPAA was definitely violated” are not interchangeable statements. The page type, information involved, purpose, disclosure, consent/authorization and applicable law all matter.
The MyChart-related settlements discussed on this page also involve different legal theories and jurisdictions. Some lawsuits invoke state privacy or wiretap laws and other claims. Read the actual complaint, settlement notice and court orders for the specific case rather than assuming every case is identical.
Does a MyChart Lawsuit Mean You Should Stop Using MyChart?
A privacy lawsuit involving one health system does not mean every MyChart installation has the same alleged problem. MyChart is deployed separately by many healthcare organizations, and features, privacy configurations and third-party technologies can differ.
If you still need the portal
- Start from the healthcare organization’s official website or Epic’s MyChart finder.
- Check the domain before entering credentials.
- Use two-step verification when the organization offers or requires it.
- Keep the email and phone attached to the account secure.
- Sign out on shared devices.
If you are worried about privacy
- Read your healthcare organization’s current privacy notice.
- Ask the organization how web/app tracking technologies are handled.
- Review account activity and connected apps where available.
- Change your password if you believe login credentials were compromised.
- Use the official privacy-complaint route if you believe your rights were violated.
How to Find the Correct MyChart Login After Reading About a Lawsuit
Do not sign in through a settlement administrator’s website. Settlement sites manage legal notices and claims; they do not replace your health system’s patient portal.
Open Epic’s “Find your MyChart” page
Search by healthcare organization, state or country.
Choose the organization where you received care
Similar names can belong to completely different systems.
Follow the result to that organization’s MyChart login
Enter healthcare credentials only on the provider-associated portal.
Use “Forgot login information?” if you cannot sign in
Epic’s current MyChart help directs users to the healthcare organization’s recovery workflow rather than creating duplicate accounts.
Settlement Claim vs HHS Privacy Complaint: They Are Different Processes
| Process | Purpose | Where it goes | Timing |
|---|---|---|---|
| Class-action settlement claim | Request the benefit offered under a specific court-approved settlement. | The settlement administrator named in that case’s notice. | The exact claim deadline in the settlement notice. |
| HHS OCR privacy complaint | Report a possible HIPAA Privacy, Security or Breach Notification Rule violation by a regulated entity. | U.S. Department of Health and Human Services Office for Civil Rights. | HHS says complaints generally must be filed within 180 days of the violation, subject to its rules and possible extensions for good cause. |
Filing an OCR complaint does not automatically file a class-action claim, and filing a settlement claim does not automatically create an OCR complaint. They are separate processes with different purposes.
MyChart Lawsuit Scam Checklist
Settlement searches attract fake claim pages because users expect to enter identifying information. Use the case documents—not the appearance of a website—as your trust signal.
Signs the claim route deserves extra scrutiny
- The page cannot name the court or case number.
- It asks for your MyChart password or activation code.
- It demands payment, gift cards or cryptocurrency to “unlock” a settlement.
- It promises a guaranteed payout before eligibility is checked.
- It says every MyChart user automatically qualifies.
- It asks you to upload full medical records without explaining why.
Safer verification signals
- The case name and number match the court-approved notice.
- The site identifies the settlement administrator.
- Eligibility dates match the court materials.
- Contact information is consistent across the notice and settlement site.
- The claim form uses the settlement notice ID/PIN rather than your health-portal password.
- The site explains legal rights such as claim, exclusion, objection and doing nothing.
Why the Health System Name Matters More Than the Word “MyChart”
The BJC and SSM cases illustrate the point well: both organizations used MyChart, yet each case had different defendants, dates, notices and settlement rules. If your old notice names one of those providers, the lawsuit page and current portal should be treated as separate destinations.
For current care access after an older settlement, use the provider-specific guides: SSM Health MyChart or BJC & WashU MyChart. Neither current portal guide can reopen a closed settlement claim.
MyChart Lawsuit FAQs
1. Is there one nationwide MyChart lawsuit that covers every MyChart user?
No. “MyChart lawsuit” is a broad search term covering multiple separate lawsuits and settlements involving different hospitals and health systems. Each case has its own class definition, dates, court, claim form and deadline.
2. Does a MyChart privacy settlement mean Epic was found legally responsible?
Not automatically. MyChart is Epic’s portal platform, but the current settlement websites discussed here name individual healthcare organizations as defendants. Read the specific complaint and settlement documents before attributing liability to Epic or any other party.
3. Which MyChart-related settlements are still accepting claims on September 20, 2026?
Court-approved claim windows are currently open for the Bayhealth, Cone Health and Wellstar settlements described above. Bayhealth and Cone Health list October 5, 2026 claim deadlines, while Wellstar lists November 10, 2026. Verify the latest status on each official settlement website before filing.
4. Do I need to stop using MyChart because of these lawsuits?
There is no universal requirement to stop using MyChart. The lawsuits concern specific organizations, technologies, dates and alleged data practices. If you continue using MyChart, access it through your healthcare organization’s official portal and use its current security and privacy controls.
5. What is a tracking pixel in a MyChart lawsuit?
“Tracking pixel” is commonly used for website or app code that records user interactions and can send information to analytics, advertising or other third-party services. The legal significance depends on the information involved, the page, consent or authorization, applicable law and other facts.
6. How can I tell whether a MyChart settlement notice is real?
Match the health system, case name, case number, class period and administrator with the court-approved settlement website. Do not trust a notice solely because it uses a hospital or MyChart logo.
7. Should a MyChart settlement claim form ask for my MyChart password?
No legitimate claim process described in the court-approved settlement materials reviewed for this guide requires your MyChart healthcare password. Some settlement forms use a separate LoginID, Unique ID or PIN from the legal notice. Keep your portal credentials private.
8. What can I do if I missed a MyChart settlement claim deadline?
First check the official settlement website for any court-approved update or extension. Do not assume a third-party site can reopen the deadline. If the deadline affects important legal rights, consider asking the settlement administrator or a qualified attorney about your individual situation.
9. Can I report a health-privacy concern to HHS even if there is no class-action claim form?
HHS Office for Civil Rights accepts complaints about possible HIPAA Privacy, Security or Breach Notification Rule violations by regulated entities. HHS says complaints generally must be filed within 180 days of the violation, subject to its complaint rules.
10. Where do I log in to MyChart if I came here looking for my patient portal?
Use Epic’s official “Find your MyChart” directory or start from your healthcare organization’s official website. A settlement administrator website is not a patient portal and should not be used for medical records, appointments, messages or MyChart login credentials.
Shortest Safe Path
I received a notice
Match the health system, case number and class period with the official administrator website.
Verify the noticeI want to file a claim
Use only the case-specific settlement administrator and check the current deadline first.
See open casesI need my patient portal
Use the health system’s MyChart login—not the lawsuit website.
Find official MyChartI have a privacy concern
Review HHS privacy-complaint information separately from any settlement claim.
HHS privacy complaintsVerification note: settlement information on this page was checked against court-approved administrator websites and official federal privacy guidance on September 20, 2026. Court orders, deadlines, administrator instructions and payment timing can change. Always use the current official case website for the final filing step.