Corewell Health referred insurance-already-paid medical bills to collection agencies—a scheme one lawsuit says violated debt collection and consumer protection laws.
Ascension's May 2024 ransomware attack exposed 5.6 million patients' personal and medical information, leading to a class action lawsuit that remains unsettled as of 2026.
Labcorp's breach exposed 10 million patient records including SSNs and banking data; eligible patients can claim ~$50 or up to $5,000 for documented losses.
Quest Diagnostics patient data was exposed in a massive third-party breach and subsequent mishandled waste disposal scandal, leaving millions vulnerable to identity theft.
Rite Aid is facing lawsuits for allegedly sharing customers' health-related searches with Meta and Google without consent through tracking tools on its website.
CVS faced claims that its website shared pharmacy customers' personal health data with Meta through tracking technology.
VillageMD pixel tracking lawsuit against Walgreens remains unsettled, with no finalized compensation available yet.
GoodRx transmitted prescription searches and health data to Meta, Google, and Criteo without user consent—affecting 56 million people in a $32 million settlement.
Cerebral exposed 3.2 million mental health patients' data to advertisers for three years, triggering a $500,000 class action settlement and $7.1 million FTC penalty.
Talkspace shared therapy users' mental health data with Facebook and Google tracking tools without consent, sparking a class action lawsuit and settlement.