Healthcare Services Group Data Breach Settlement: Claims Open Until October 1
624,496 people had personal and financial data copied in a 2024 intrusion at the healthcare support services company. The $3 million settlement is now in its claims phase — and as with most breach settlements, the difference between a token payment and a real one is documentation.
Revisado Editorialmente — Contenido revisado en cuanto a exactitud utilizando investigación legal publicada, datos gubernamentales y registros judiciales verificados. Vea nuestra metodología
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened
Healthcare Services Group, Inc. (HCSG) — a Pennsylvania company providing housekeeping, dining and support services to healthcare facilities nationwide — determined that an unauthorized party accessed and copied files between September 27 and October 3, 2024. The company learned of the intrusion on or about June 3, 2025 and reported it to the Maine Attorney General on August 25, 2025, disclosing 624,496 affected individuals. Compromised data included personal identity information and financial account records. Notification letters began mailing August 25, 2025 — and the first class action was filed two days later.
Case Details
The lawsuits were consolidated as Williamson, et al. v. Healthcare Services Group, Inc. in the U.S. District Court for the Eastern District of Pennsylvania. The court granted preliminary approval of the $3 million settlement on June 3, 2026. Worth noting: nine months passed between the intrusion (fall 2024) and discovery (June 2025) — the affected data was in unknown hands for the better part of a year before anyone was told.
Status as of 24 August 2026
Who Is Covered
The 624,496 people whose information was involved in the incident, per HCSG's filing with the Maine Attorney General. HCSG is a services employer with a large workforce across thousands of healthcare facilities, so much of the class consists of current and former employees and job applicants whose HR-type records — identity and financial account information — sat on the affected systems. If you received a notification letter from HCSG in or after August 2025, you are in the class. If you worked for HCSG and moved since, contact the administrator listed in the notice — mailed notices chase old addresses.
How to Make This Claim Worth Filing
How This Unfolded
- 1
September 27 – October 3, 2024 — the intrusion
An unauthorized party accesses HCSG systems and copies files containing personal identity and financial account information.
- 2
About June 3, 2025 — discovery
HCSG learns of the unauthorized access — roughly nine months after the fact — and investigates.
- 3
August 25, 2025 — disclosure and notification
HCSG reports 624,496 affected individuals to the Maine Attorney General and begins mailing notification letters. The first class action follows within two days.
- 4
June 3, 2026 — preliminary approval
The Eastern District of Pennsylvania grants preliminary approval of the consolidated case's $3 million settlement.
- 5
October 1, 2026 — claim deadline
Valid claim forms must be submitted by this date. Only filed claims receive settlement benefits.
Three Things to Ignore
A six-figure class and an open deadline attract impostors. The patterns are predictable.
Calls about your “HCSG settlement payment”
The administrator communicates through the mailed notice and the official settlement website — not unsolicited calls asking you to confirm your Social Security number or bank details. That call is the scam.
A fee to file or to check your status
Filing is free. Status checks are free. Every legitimate settlement works this way, without exception.
“Guaranteed $5,000 for every class member”
The $5,000 is a cap on documented losses, not a payout everyone receives. A site promising the cap without documentation is bait.
Common Questions
When is the claim deadline?
October 1, 2026. The claim form and filing instructions are in the mailed notice, which also names the official settlement website.
How much can I get?
Documented, breach-related losses are reimbursable up to $5,000 per person — credit monitoring costs, unreimbursed fraud losses, bank fees, communication charges. The strength of your documentation drives the outcome; consult your notice for the full benefit terms.
What data was exposed?
Personal identity information and financial account records, per HCSG's regulatory filing. That combination is what makes bank-account vigilance more relevant here than in medical-records-only breaches.
Why did notification take so long?
The intrusion ran September 27 to October 3, 2024; HCSG says it learned of it around June 3, 2025 and notified in August 2025. A nine-month discovery gap is unfortunately common — and it means any suspicious account activity from late 2024 onward is worth documenting for your claim.
I worked for HCSG years ago. Could I be included?
Yes — former employees' records commonly remain on HR systems. Membership is defined by whose data was on the affected systems, not by current employment. If you moved since leaving, contact the administrator to update your address.
When will payments arrive?
After final approval and the resolution of any appeals — with an October 2026 claim deadline, realistically 2027. Approval authorizes distribution; appeals suspend it.
How do I verify this page?
Against your mailed notice, the official settlement website it names, and the Eastern District of Pennsylvania docket for Williamson v. Healthcare Services Group. Figures here reflect what we could confirm as of 24 August 2026.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.