Healthcare Highways Data Breach: SSNs and Diagnoses Copied, No Lawsuit Yet
Reference Guide
Healthcare Highways is a Frisco, Texas company that builds doctor-and-hospital networks for employer health plans and administers benefit plans — so you likely know it only from your insurance card or plan paperwork. Its notice says an intruder copied data between July 22 and July 27, 2026. As of October 17, 2026, we found no filed healthcare highways data breach lawsuit, only law firms investigating. There is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened, According to the Company
In a notice dated October 2, 2026, Healthcare Highways, LLC said it identified suspicious activity in its network on August 4, 2026. Its investigation found that information was “accessed and copied by an unauthorized user” between July 22 and July 27, 2026.
The company says the data varies by person and may include names, addresses, dates of birth, Social Security numbers, dates of service, patient ID numbers, procedure codes and costs, provider information, diagnoses, health insurance and claim information, and payment information. A report filed with the Texas Attorney General on October 6, 2026 also lists driver’s license numbers and financial information, described in press reports as account numbers or credit and debit card numbers.
The Chaos ransomware group claimed the attack on August 4, 2026 and says it took 235 GB of data. That is the group’s claim; the company has not named who was behind it. The company says it has seen no indication of actual or attempted fraud, reported the event to law enforcement and added security measures.
Case details
No lawsuit found. As of October 17, 2026, a search of our federal court database (new filings from all U.S. district courts) shows no case naming Healthcare Highways, and none of the press coverage reports a complaint. What exists are law-firm investigations: attorneys are asking affected people to come forward while they “investigate whether a class action lawsuit can be filed.” We could not check state courts or every federal docket directly, so a very recent filing cannot be ruled out. If a healthcare highways data breach lawsuit is filed, it will carry a court and case number — that is the detail to look for in any report.
Status: Breach Under Review, No Case Filed
The company’s own review was still running when it posted its notice: it said it will notify potentially affected individuals “once the review is finalized.” As of October 13, 2026, HIPAA Journal reported that Healthcare Highways had not disclosed how many people are affected, and we could not read a number from the Texas Attorney General’s breach portal. Individual letters are the next step to watch for.
Who Could Be Affected
Healthcare Highways builds and manages provider networks and offers benefit plan administration and pharmacy benefit management for employer plans. The exposed fields — dates of service, procedure codes, diagnoses, claim information — are the kind of records a plan administrator holds about members who used their health benefits.
The practical test is a letter. The company says it will mail notices once its review ends. Keep that letter and its envelope: it states which fields applied to you, and it is how you would show membership in any future class. If your employer plan uses a Healthcare Highways network and you have not had a letter yet, that proves nothing either way.
Is There Money?
If a case is filed and later settles, healthcare-breach settlements involving Social Security numbers and medical data have usually combined reimbursement of documented losses, a smaller flat payment, and credit monitoring. Our data breach settlement calculator shows what comparable cases paid. Any receipts for losses or time spent dealing with fraud are worth keeping from today.
Healthcare Highways Breach Timeline
July 22–27, 2026 — Data Copied
Per the company’s notice, an unauthorized user accesses and copies information on its network during these six days.
August 4, 2026 — Activity Detected, Group Claims Attack
Healthcare Highways identifies suspicious activity. The same day, the Chaos ransomware group claims it took 235 GB and threatens to publish it within 24 hours.
October 2, 2026 — Public Notice
The company posts a Notice of Data Event listing Social Security numbers, diagnoses, claims and payment data among the possible fields.
October 6, 2026 — Texas Attorney General Report
A report filed with the Texas Attorney General adds driver’s license numbers and financial information.
October 13, 2026 — Count Still Not Disclosed
HIPAA Journal reports the company has not disclosed the total number of affected individuals.
October 17, 2026 — No Lawsuit Found
Law firms are investigating; no complaint, settlement, claim form or deadline exists.
Three Things to Watch For
A breach with diagnoses and Social Security numbers, a public extortion claim and no official count is easy to exploit:
“Submit your Healthcare Highways claim” forms
Some sites already say “submit a claim.” These are intake forms for law firms, not a settlement claim — there is no settlement. Do not enter your Social Security number to “secure” a payment that does not exist.
Calls that quote your diagnosis or claims
The copied data includes procedure codes, diagnoses and claim details, so a caller may sound like your plan. Hang up and call the number on your insurance card, or the company line in the notice, (866) 945-2292.
“Pay us or your records get published”
The attacker group publicly threatened to leak the data. Messages demanding payment from you personally to keep your records offline are extortion; report them to the FBI’s IC3 and do not pay.
Healthcare Highways Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Healthcare Highways data breach lawsuit?
As of October 17, 2026, we found no filed lawsuit. Law firms are investigating whether to file. There is no settlement, no claim form and no deadline.
What data was exposed in the Healthcare Highways data breach?
Per the company: names, addresses, dates of birth, Social Security numbers, dates of service, patient ID numbers, procedure codes and costs, provider information, diagnoses, health insurance and claim information, and payment information. The Texas Attorney General report adds driver’s license numbers and financial information.
How many people were affected?
Not disclosed. As of October 13, 2026, HIPAA Journal reported that the company had not published a total, and its review of the data was still ongoing.
How do I find if my data was breached?
Wait for a letter: Healthcare Highways says it will notify potentially affected individuals once its review is finalized. You can also ask the company directly at compliance@healthcarehighways.com, at (866) 945-2292, or at One Cowboys Way, Suite 290, Frisco, Texas 75034.
Is there compensation for data breach?
Only through a settlement or judgment, and here neither exists. Nothing is payable for this breach. If a case is filed and resolved, a court-appointed administrator would notify class members directly.
Is there a class action lawsuit related to the Change Healthcare breach?
Yes, but it is a separate case against a different company. Healthcare Highways is not part of it. See our Change Healthcare data breach lawsuit page for that case.
Did the hackers publish the data?
The Chaos group claimed on August 4, 2026 that it held 235 GB of data and would publish it within 24 hours. We have not verified any publication, and the company has not confirmed who was behind the attack.
What is worth doing right now?
Freeze your credit at Equifax, Experian and TransUnion — under federal law it costs nothing to place or lift. Pull your free reports at annualcreditreport.com or 1-877-322-8228. Read your plan’s explanation-of-benefits statements for care you never received.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Change Healthcare Data Breach LawsuitA different health-data breach, already in federal MDL
- Open Class Action SettlementsSettlements currently accepting claims, with deadlines
- Settlement Payout CalculatorEstimate a per-person share of a settlement fund