A federal judge in the U.S. District Court for the Western District of Kentucky denied Humana's motion to dismiss a proposed class action over alleged disclosure of members' health data to third parties.
The ruling lets the case move forward into discovery, where plaintiffs will have to prove their claims rather than argue the law simply allows them, according to Bloomberg Law. The lawsuit centers on tracking tools plaintiffs say Humana placed on parts of its website used only by logged-in members. Those tools allegedly sent personal health information to outside vendors, and the court's decision means that allegation will now be tested through evidence rather than dismissed on the pleadings.
Official resource:
- Explore the official data from Bloomberglaw — Use this primary source to review the underlying data.
Table of Contents
- What the Court Actually Decided
- What Humana Is Accused of Doing
- How This Fits a Wider Pattern Against Health Insurers
- What This Case Is Not
- What the Ruling Means for Members Right Now
- Frequently Asked Questions
What the Court Actually Decided
The Western District of Kentucky judge rejected Humana's bid to end the case early, allowing four separate legal theories to proceed: breach of fiduciary duty, intrusion upon seclusion, unjust enrichment, and violations of the federal Wiretap Act, according to Bloomberg Law. A motion to dismiss is typically a defendant's first and best chance to end a lawsuit before it reaches the discovery and evidence-gathering stage.
The Wiretap Act claim survived because the court found that plaintiffs' allegations of real-time interception of their communications could support that theory, according to Health Law Daily/VitalLaw. That statute, originally built around wiretapping phone lines, has become a common legal tool in website-tracking lawsuits because it covers interception of electronic communications as they happen, not just data stored afterward.
What Humana Is Accused of Doing
Plaintiffs allege Humana embedded third-party tracking tools on three non-public portals of its website, allowing outside vendors to collect members' personal health information, according to Bloomberg Law. Because these were non-public, login-protected pages, the information at issue would reflect specific health-related activity by identifiable members rather than general browsing by anonymous visitors.
The complaint goes further than a one-time disclosure. Plaintiffs allege Humana continued transmitting sensitive health information to third parties even after members used the company's own privacy controls on its website and patient portals to restrict that tracking, according to Health Law Daily/VitalLaw. That allegation, if proven, would matter because it describes a gap between a stated option to opt out and what plaintiffs say was happening behind the scenes.
How This Fits a Wider Pattern Against Health Insurers
Humana's case is one piece of a larger wave of class actions against health insurers and hospitals over analytics and tracking tools, including Meta Pixel-type technology, that plaintiffs claim disclosed patient identities and online activity to third parties without adequate consent, according to Baker Donelson's DSIR Deeper Dive. Humana is far from the only insurer facing this type of claim.
Outcomes across that wave have not been uniform. A UnitedHealthcare website-tracking suit was dismissed in March 2026 after a judge found the plaintiff hadn't shown concrete harm from the data collection, according to Becker's Payer Issues. That dismissal, compared against Humana's result here, shows that surviving a motion to dismiss depends heavily on how a specific complaint is written and what a specific judge requires to find harm — not on a uniform industry standard.
What This Case Is Not
This tracking-disclosure lawsuit is separate from other active litigation involving Humana. The company also faces a 2025–2026 data breach case tied to a vendor's software vulnerability that exposed names, Social Security numbers, and medical billing and claims data, as well as a securities fraud class action over Medicare Advantage cost disclosures, according to GlobeNewswire.
Neither of those matters is the case that advanced past the motion to dismiss described here. Members following Humana's legal situation should keep these matters distinct:.
- The tracking/disclosure suit (Western District of Kentucky) — focused on website analytics tools and the Wiretap Act, fiduciary duty, intrusion upon seclusion, and unjust enrichment claims.
- The vendor data breach matter — focused on exposure of Social Security numbers and billing/claims data through a separate software vulnerability.
- The securities fraud class action — focused on Medicare Advantage cost disclosures to investors, not member privacy.
What the Ruling Means for Members Right Now
The denial of Humana's motion to dismiss means the case proceeds toward discovery and potentially class certification — it does not resolve members' claims or establish that Humana did anything wrong, according to Bloomberg Law. No settlement fund exists, no damages have been awarded, and no court has yet found Humana liable.
For a member wondering what to do at this stage, there is no claim form to file and no compensation to request yet. The practical step available now is monitoring the docket or legitimate legal-news coverage for a class certification ruling or settlement announcement, since either of those developments — not this procedural ruling — would be the point at which members could take an action tied to compensation.
Frequently Asked Questions
Does this ruling mean Humana was found guilty of improperly sharing health data?
No. The court only denied Humana's request to end the case early; it did not rule on whether Humana actually violated the law, according to Bloomberg Law.
Can members file a claim for compensation now?
No. No settlement or damages award exists yet; the case is moving into discovery and potential class certification, according to Bloomberg Law.
Is this the same case as Humana's Social Security number data breach?
No. That is a separate matter involving a vendor's software vulnerability, distinct from this tracking-related lawsuit, according to GlobeNewswire.
Do all health insurer tracking lawsuits succeed past a motion to dismiss?
No. A similar UnitedHealthcare suit was dismissed in March 2026 for lack of concrete harm, showing outcomes vary by case, according to Becker's Payer Issues.