Bon Secours Mercy Health MyChart Lawsuit: Settled, Paid — and a Breach Deal Pending
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
There was a Bon Secours Mercy Health MyChart lawsuit, and it is over. It covered Ohio patients who logged into Mercy MyChart from 2018 through 2021, it settled for up to $7.5 million, and the claim deadline was August 21, 2025. The Bon Secours lawsuit that is still moving is different: a data breach case over the company’s Workday system, where a settlement was filed with the court on April 2, 2026 and is waiting for a judge.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuits Say Happened
Bon Secours Mercy Health is a Cincinnati-based system with 48 hospitals and more than 60,000 employees in seven states, per a 2024 complaint. Its Ohio and Kentucky side runs as Mercy Health; in Ohio the patient portal is Mercy MyChart.
The tracking case. The plaintiff alleged that www.mercy.com and the patient portal sent patients’ personal and health information to third parties, including Facebook and Google, without authorization. Mercy denied it, including specifically denying that any medical information from the portal or website went to Facebook or Google.
The Workday breach. A separate suit alleges that intruders got into the company’s Workday test environment between April 10, 2024 and July 31, 2024 and reached names, dates of birth, Social Security numbers and addresses. The named plaintiffs say they handed over that data to get a job there.
The PJ&A breach. A transcription vendor, Perry Johnson & Associates, was breached from March 27 to May 2, 2023. Mercy Health patients were among nearly nine million people affected, and Bon Secours was sued alongside the vendor.
Case Details
Tracking: John Doe v. Bon Secours Mercy Health, Case No. A 2002633, Court of Common Pleas, Hamilton County, Ohio, before Judge Christian A. Jenkins. It is a state case.
Workday breach: In re: Bon Secours Mercy Health Data Breach Litigation, No. 1:24-cv-00594, U.S. District Court for the Southern District of Ohio, filed October 18, 2024. Judge Douglas R. Cole handled it until October 2, 2026, when it was reassigned to Judge Matthew R. Byrne.
PJ&A breach: In re: Perry Johnson & Associates Medical Transcription Data Security Breach Litigation, MDL No. 3096, No. 1:24-md-03096, Eastern District of New York, before Judge Rachel P. Kovner. Bon Secours Mercy Health is a named defendant in the consolidated complaint filed August 19, 2024.
Status: MyChart Case Closed, Breach Settlement Pending
Workday breach — settlement filed, not yet approved. On July 2, 2025 the court let the negligence and breach of implied contract claims go forward and dismissed the rest without prejudice. On April 2, 2026 the plaintiffs filed an unopposed motion for preliminary approval of a class settlement. As of October 8, 2026 we found no order granting it on the docket. The amount and terms are not public in any source we could read, so there is no claim form yet.
PJ&A breach — no settlement found. The JPML listed 57 actions pending in MDL 3096 on August 3, 2026. As of October 8, 2026 we found no settlement, fund or claim form.
Are You Affected?
MyChart settlement: the class was Ohio residents who were Bon Secours Mercy Health patients and logged into Mercy MyChart between March 27, 2018 and December 31, 2021. Bon Secours patients in Virginia or South Carolina were not in it. Either way, it is closed.
Bon Secours data breach (Workday): the named plaintiffs are people who gave their personal data to Bon Secours for employment. Who the settlement class covers will be set out in the court-approved notice. If you got a Bon Secours breach letter in 2024, keep it.
PJ&A breach: the notices came from the vendor, not the hospital. Keep the letter if you got one.
If you used a Bon Secours or Mercy Health website or MyChart outside that Ohio class, our MyChart claim form page asks three things: whether it was the website or MyChart, what you did there, and when you last used it. It records your details. It does not file a claim, and we found no open Bon Secours tracking case.
What the Cases Paid — and Might Pay
Workday breach: a settlement exists on paper, but we could not see its amount. Nothing is payable until a judge grants approval and a claim period runs. For a rough idea of what breach deals like this pay, try the data breach settlement calculator. For tracking cases at other hospitals, see the MyChart settlement calculator.
PJ&A: no settlement, no fund, no claim form.
Bon Secours Lawsuit Timeline
- 1
March 27, 2018 – December 31, 2021 — The MyChart Class Period
Ohio patients who logged into Mercy MyChart during this period later formed the settlement class in the Hamilton County tracking case.
- 2
March 27 – May 2, 2023 — PJ&A Vendor Breach
An intruder gets into the transcription vendor’s network. Mercy Health patients are among nearly nine million people affected.
- 3
January 30, 2024 — PJ&A Cases Consolidated
The JPML sends the PJ&A suits to Judge Rachel P. Kovner in New York as MDL No. 3096. Bon Secours is named in the consolidated complaint filed August 19, 2024.
- 4
April 10 – July 31, 2024 — Workday Breach
Intruders reach the Workday test environment, the complaint alleges. The first suit is filed in the Southern District of Ohio on October 18, 2024.
- 5
August 19, 2025 — MyChart Settlement Approved
Final approval hearing in Hamilton County. The claim deadline was August 21, 2025, and the official site says valid claims were paid on December 17, 2025.
- 6
April 2, 2026 — Workday Settlement Filed
The plaintiffs ask the court for preliminary approval of a settlement. On October 2, 2026 the case moved to Judge Matthew R. Byrne. As of October 8, 2026 we found no approval order.
Three Things to Watch For
Old money, a pending deal and a name used across four states give scammers plenty of material:
“Late Mercy MyChart claims accepted”
The claim deadline was August 21, 2025, and payments went out in December 2025. Anyone offering to file a new MyChart claim for you, or to collect a share for a fee, is not part of the settlement.
Workday settlement claim pages before approval
No judge has approved the Workday deal, so there is no legitimate claim form yet. A real notice will name the court and case number 1:24-cv-00594. Do not give your Social Security number to any site that skips that step.
Calls or texts asking for your MyChart login
No settlement administrator needs your MyChart password or a verification code to “confirm” that you were a patient. A message asking for one is trying to take over your account.
Bon Secours Mercy Health — Questions People Actually Ask
Is there a Bon Secours Mercy Health MyChart lawsuit?
Yes. John Doe v. Bon Secours Mercy Health, Case No. A 2002633 in Hamilton County, Ohio, alleged that Mercy’s website and MyChart portal shared patient information with Facebook and Google. Mercy denied it. The case settled for up to $7.5 million, and the claim deadline was August 21, 2025.
Can I still file a claim in the MyChart settlement?
No. The claim deadline was August 21, 2025. According to the official settlement website, valid claims were paid on December 17, 2025.
I’m a Bon Secours patient in Virginia or South Carolina. Was I covered?
No. The class covered only people living in Ohio when they logged into Mercy MyChart between March 27, 2018 and December 31, 2021. As of October 8, 2026, we found no tracking lawsuit over Bon Secours websites or portals in other states.
What is the Bon Secours data breach lawsuit about?
The current case is about the company’s Workday test environment. The complaint alleges that intruders had access between April 10, 2024 and July 31, 2024 and reached names, dates of birth, Social Security numbers and addresses. It is pending as No. 1:24-cv-00594 in federal court in Ohio.
Is there money from the Workday breach settlement?
Not yet. A settlement was submitted for preliminary approval on April 2, 2026. As of October 8, 2026, we found no order approving it and could not see its amount. If it is approved, a court-appointed administrator will send notice to class members.
I got a letter from Perry Johnson & Associates. Is that Bon Secours?
It is a different breach. PJ&A, a transcription vendor, was breached in 2023, and those cases are combined in MDL No. 3096 in New York, where Bon Secours is a named defendant. When the first suit was filed in Nevada, Bon Secours called it “without merit,” saying PJ&A is not a vendor it contracts with directly. As of October 8, 2026 we found no settlement.
I filed a MyChart claim but never got paid. What now?
Contact the settlement administrator through MercyHealthSettlement.com or 1-888-859-3670. Have the claim ID from your filing ready.
What can I check myself?
Look for any notice letter from Bon Secours, Mercy Health or PJ&A, and keep it. Freeze your credit if your Social Security number was involved. If you are not sure whether your own website or MyChart use matters, our MyChart claim form page walks through what you did and when.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
MyChart Class Actions in Ohio
Other Ohio hospital tracking cases and where each one stands
MyChart Class Action Claim Forms
Which hospital tracking settlements still take claims
Data Breach Settlement Calculator
Estimate what a breach case like the Workday one could pay
Open Class Action Settlements
Settlements with claim deadlines that have not passed yet