CHRISTUS Health MyChart Lawsuit: No Tracking Case, but an Oracle Breach Letter
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
As of October 6, 2026 we found no CHRISTUS Health MyChart lawsuit — no case and no settlement over Meta Pixel or Google tracking on christushealth.org or the MyCHRISTUS portal. What CHRISTUS patients are actually receiving is a letter about a breach at its former lab-software vendor, Oracle Health (formerly Cerner). That breach is being litigated in federal court in Missouri. There is no settlement and no claim form.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened: The Oracle Health Breach, Not a Pixel
CHRISTUS Health says an unauthorized third party got into legacy Cerner systems at Oracle Health — laboratory software previously used at CHRISTUS locations — as early as January 22, 2025. Oracle Health told CHRISTUS in October 2025 and sent it the list of affected patients on December 9, 2025. CHRISTUS says federal investigators asked for notification to be delayed.
Per the CHRISTUS notice, the data may include names, Social Security numbers and lab records: orders, blood bank records, medical record numbers, doctors, diagnoses, medicines and test results. Only records from before February 2025 are involved. CHRISTUS says its current IT systems were not affected.
On tracking: we searched for any case alleging that CHRISTUS sent website or MyCHRISTUS activity to Meta, Google or other ad platforms. As of October 2026 we found none.
Case Details
Tracking: no CHRISTUS Health lawsuit found, so no court or case number.
Oracle Health breach: the lead federal case is Blount v. Oracle Health, Inc., No. 4:25-cv-00259, filed April 11, 2025 in the U.S. District Court for the Western District of Missouri. Court records describe it as the lead case, before Chief Judge Beth Phillips, and related suits are consolidated into it. Paubox reported on July 22, 2026 that the judge ruled eight named health systems must face the consolidated case, rejecting the argument that a hospital is off the hook because the breach happened at its vendor. We could not confirm from the docket whether any CHRISTUS entity is a named defendant.
Status: No CHRISTUS Case, No Settlement
The Oracle Health breach litigation is in pretrial proceedings with no settlement. Being a CHRISTUS patient with an Oracle letter may matter if that case ever settles, but nothing is payable today and there is nothing to sign up for.
The one CHRISTUS settlement that made news is a $12.24 million False Claims Act deal announced September 1, 2017, over Medicaid-funding donations in New Mexico. That was a government case. Patients were never able to claim any of it.
Are You Affected? Three Quick Checks
1. Did you get a letter about Oracle Health? If so, your lab records from before February 2025 were on the list Oracle Health sent CHRISTUS. Keep the letter. It has an engagement number for the CHRISTUS call center (833-918-1131), and it comes with an offer of two years of free credit monitoring.
2. Did you use christushealth.org or MyCHRISTUS? The portal is Epic MyChart branded as MyCHRISTUS. In other hospital cases, the claims were about tracking code on public pages (searching symptoms, booking appointments) and sometimes inside the portal. No such claim has been made against CHRISTUS that we could find. Our form on this page asks whether you used the website or MyChart, what you did there and when you last did it. That is what any future case would turn on.
3. Were you a CHRISTUS patient during the May 2022 cyberattack? HIPAA Journal reported that 15,062 people were affected, per a report to federal regulators. We found no class settlement from it.
What Similar MyChart Cases Paid
• Wellstar settled for $4.25 million for about 870,000 people. Claims close November 10, 2026.
• Loyola Medicine settled for $2.67 million. Final approval came September 17, 2025, and it is closed.
• MemorialCare settled for $750,000 covering 182,303 people. Duke settled for $3.74 million.
• Hennepin Healthcare paid nothing; the plaintiffs dropped the case.
Individual MyChart checks have typically run $15 to $50. See the MyChart claim form guide for open deadlines, or estimate with the MyChart settlement calculator. For the Oracle breach side, see the data breach settlement calculator.
CHRISTUS Health Timeline
- 1
September 1, 2017 — $12.24 Million Government Settlement
CHRISTUS St. Vincent and CHRISTUS Health agree to pay $12.24 million plus interest to resolve False Claims Act allegations over Medicaid funding. No patient payments.
- 2
May 2022 — Attack on CHRISTUS Systems
CHRISTUS says it blocked an attempted cyberattack. A ransomware group claims credit, and 15,062 people are reported to federal regulators as affected.
- 3
January 22, 2025 — Oracle Health Breach Begins
Per CHRISTUS, an unauthorized party gets into legacy Cerner systems at Oracle Health, including lab data previously used at CHRISTUS locations.
- 4
April 11, 2025 — Lead Federal Case Filed
Blount v. Oracle Health, Inc., No. 4:25-cv-00259, is filed in the Western District of Missouri. Other suits are later consolidated into it.
- 5
October–December 2025 — CHRISTUS Learns, Then Gets the List
Oracle Health tells CHRISTUS in October 2025 and sends the affected-patient list on December 9, 2025. Letters with two years of credit monitoring follow.
- 6
October 2026 — No CHRISTUS Tracking Case
We found no CHRISTUS Health MyChart lawsuit or settlement. The Oracle breach case is pretrial with no settlement, no fund and no claim form.
Three Things to Watch For
A real breach letter and a search term with no case behind it make an easy opening for imposters:
“CHRISTUS MyChart settlement” claim sites
There is no CHRISTUS tracking settlement, so there is no claim site. A page asking for your MyCHRISTUS login or Social Security number to “file” is collecting data, not filing anything.
Calls quoting your Oracle Health letter
Breach letters are widely known, so a caller can mention Oracle or Cerner without knowing anything about you. The real CHRISTUS line is the toll-free number printed in your letter. Call it yourself rather than calling back a number someone gives you.
Fake MyCHRISTUS login pages
Texts about “verifying your portal” to receive a payment are phishing. The real login is mychart.christushealth.org, and no settlement is paid through your patient portal.
CHRISTUS Health Lawsuit — Questions People Actually Ask
Is there a CHRISTUS Health MyChart lawsuit?
Not that we could find. As of October 6, 2026 we found no lawsuit or settlement alleging that CHRISTUS shared website or MyCHRISTUS activity with Meta, Google or other trackers. If one is filed, this page will be updated.
Is there a CHRISTUS Health data breach lawsuit?
The CHRISTUS Health data breach that is in the news is the Oracle Health (Cerner) incident. It is being litigated as Blount v. Oracle Health, Inc., No. 4:25-cv-00259, in the Western District of Missouri. We could not confirm whether CHRISTUS itself is a named defendant. There is no settlement.
Is the Oracle Health letter from CHRISTUS real?
CHRISTUS posts a notice about it on its own website, and letters with an offer of two years of credit monitoring are going to affected patients. To check your letter, call the number on the official CHRISTUS notice page (833-918-1131) with the engagement number from your letter.
What is the CHRISTUS patient portal called?
MyCHRISTUS. It runs on Epic MyChart at mychart.christushealth.org. Records from care before March 2025 may still be in older regional portals, which CHRISTUS lists on its legacy-portal page. The MyCHRISTUS helpline is 833-912-4278.
What data was exposed in the Oracle Health breach?
Per CHRISTUS: names, Social Security numbers and lab records, including lab orders, blood bank records, medical record numbers, doctors, diagnoses, medicines and test results. Only data from before February 2025 is involved. Your letter says which of these applied to you.
Can I get money from CHRISTUS today?
No. There is no settlement, no fund and no claim form for tracking or for the Oracle breach. The $12.24 million paid in 2017 went to the government, not to patients.
Does the 2022 CHRISTUS cyberattack have a settlement?
We found none. A 2022 attack that a ransomware group claimed was reported as affecting 15,062 people. We found only law-firm investigation notices, not a filed class settlement.
What should I do right now?
Turn on the free credit monitoring in your letter, keep the letter, and freeze your credit at all three bureaus. Check your insurer's explanation-of-benefits statements for care you never received. If you used the CHRISTUS website or MyCHRISTUS, note roughly what you did and when — that is what a tracking claim would turn on.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
MyChart Class Action Claim Form
Which hospital tracking settlements are open and how to file
HealtheLife and Cerner Lawsuits
The Oracle Health breach case behind many hospital notice letters
Data Breach Settlement Calculator
What breach settlements with medical data have actually paid
Open Class Action Settlements
Settlements still taking claims, with deadlines