Cerner HealtheLife Lawsuit: Tracking Case Dismissed, Breach Case Open, No Settlement
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
HealtheLife is the patient portal Cerner — now Oracle Health — provides to hospitals, so if you use it to see test results or message your doctor, your hospital chose it. Three different things get mixed up under this name: lawsuits accusing Cerner of sending portal activity to Google (the latest was dismissed on April 13, 2026), the 2025 breach of old Cerner servers (still in court), and tracking settlements against individual hospitals. As of September 30, 2026, there is no HealtheLife settlement and no claim form.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Tracking Lawsuits Say
The complaints allege that Cerner placed Google Analytics code on the patient portals it hosts, so that when patients logged in, checked results or messaged a doctor, identifiers and details of that activity went to Google without their consent. In the most recent case, Whitby v. Cerner Corporation, one plaintiff used University of Missouri Health Care's “HEALTHConnect” portal and the other Memorial Hermann's “Everyday Well” portal, both described in the complaint as Cerner-hosted. The complaint alleges Cerner's portals are in use at more than 100 hospitals and seeks a nationwide class of “All patients in the United States who logged into Patient Portals provided by Cerner where Google Analytics was deployed.”
Cerner's account is different. It told the court it used Google Analytics with its portals only before May 18, 2023, for internal purposes such as improving the portal; that it began truncating IP addresses in 2017; and that it “did not configure its HealtheLife patient portals to support the use of Google marketing tools like Google Ads and DoubleClick.” Until June 12, 2023, Cerner said, hospitals could add their own Google Analytics code to their portals, and it had no control over those accounts. No court has decided whose account is true.
Case Details
Tracking, Missouri: Whitby v. Cerner Corporation, No. 2:25-cv-04087-BP, U.S. District Court for the Western District of Missouri, before Judge Beth Phillips, filed April 29, 2025 (docket).
Tracking, Maryland: Doe I v. MedStar Health, Inc., No. 1:23-cv-01198, U.S. District Court for the District of Maryland, filed May 5, 2023 against both Cerner and MedStar Health. It proposed a nationwide “Cerner Patient Class.” It followed an earlier state case, brought by the same lawyers against MedStar alone, Doe v. MedStar Health, Inc., No. 24-C-20-000591, filed in the Circuit Court for Baltimore City on January 31, 2020, in which the plaintiffs asserted that MedStar used Cerner information technology services.
Data breach: In re: Cerner/Oracle Data Breach Litigation, lead case Blount v. Oracle Health, Inc., No. 4:25-cv-00259-BP, also in the Western District of Missouri before Judge Phillips. Our Oracle Health data breach page covers that case in full.
Status: Tracking Claims Dismissed, Breach Case Open
MedStar — the patients lost in state court. Class certification was denied on March 10, 2023, and MedStar won summary judgment on June 26, 2024. On March 13, 2026, the Appellate Court of Maryland affirmed in an unreported opinion, holding that sharing “detailed URLs”, IP addresses, cookie values and “the fact of a login” is not “contents” under Maryland's wiretap law. The federal case naming Cerner was stayed on October 11, 2023; the parties were still filing joint status reports in May 2026.
Oracle Health breach — active. Negligence claims against Cerner and the hospitals survived a June 22, 2026 ruling, and new motions to dismiss were being filed as late as September 29, 2026. No settlement, fund or claim form exists in any of these cases.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Does Any of This Cover Me?
Using HealtheLife does not by itself put you in any case. Each lawsuit draws its own line.
Tracking claims against Cerner: the proposed nationwide classes were never certified, and the Missouri case is dismissed. There is nothing to join.
The Oracle Health breach: the test is a letter from your hospital naming Cerner as its records vendor. The breach hit old Cerner servers holding hospital data; the notices, court filings and reports we reviewed do not say HealtheLife accounts or passwords were accessed. The hospital list is on our Oracle Health breach page.
Hospital tracking settlements: these name the hospital, not the portal maker, and cover its own website or portal for set dates. One example: Atrium Health, sued as The Charlotte-Mecklenburg Hospital Authority, agreed to pay up to $1.8 million over tracking on its MyAtriumHealth (formerly MyCarolinas) portal (official site); claims closed September 28, 2026. The same authority is also a defendant in the Cerner breach case — two separate cases with two separate classes. Look up your own hospital on our hospital portal settlement tracker; the portal brand does not decide who qualifies.
Is There Money? Not From HealtheLife
Two things can still be worth something. If your hospital sent a Cerner breach letter, the letters we reviewed offered free credit monitoring with an enrollment deadline printed in the letter. And if your hospital itself settled a tracking case, that settlement pays through its own administrator, on its own terms and by its own deadline. Check open class action settlements before a window closes.
HealtheLife and Cerner Litigation Timeline
- 1
January 31, 2020 — First Suit in This Line
A patient sues MedStar Health in Baltimore City over tracking on its websites, including the myMedStar portal. Class certification is denied on March 10, 2023.
- 2
May 5, 2023 — Cerner Itself Is Sued
A federal suit in Maryland names Cerner and MedStar and proposes a nationwide class of Cerner portal users. It is stayed on October 11, 2023. Cerner says it stopped using Google Analytics with its portals before May 18, 2023.
- 3
April 2025 — Two Missouri Cases
The Oracle Health breach lead case, Blount v. Oracle Health, is filed on April 11, 2025. On April 29, 2025, patients file Whitby v. Cerner over Google Analytics on Cerner-hosted portals.
- 4
March 13, 2026 — MedStar Wins on Appeal
The Appellate Court of Maryland affirms summary judgment for MedStar: URLs, IP addresses, cookie values and the fact of a login are not wiretap “contents.”
- 5
April 13, 2026 — Tracking Case Against Cerner Dismissed
Judge Beth Phillips finds the Whitby plaintiffs lack standing for their statutory claims and dismisses two common-law claims with prejudice.
- 6
June 22, 2026 to Now — Breach Case Continues
Negligence claims in the Oracle Health breach case survive a motion to dismiss. As of September 30, 2026, no case over HealtheLife or Cerner's portals has a settlement.
Three Things to Watch For
A familiar portal name, a real breach and a string of hospital settlements make easy cover for imposters:
“HealtheLife settlement” claim pages
No HealtheLife or Cerner portal settlement exists, so there is no claims site. A page asking for your Social Security number, your portal login or a fee to “register” is collecting data, not filing anything.
“Reset your HealtheLife password” messages
Breach headlines make a security alert look plausible, but the sources we reviewed do not say portal accounts were accessed. Open the portal by typing your hospital's address or using its app — never through a link in an unexpected email or text.
Late-claim offers for closed settlements
Atrium Health's portal settlement stopped taking claims on September 28, 2026, and every hospital window closes on a fixed date. Anyone offering to file a late claim or “recover” your payment for a fee is not the court-appointed administrator.
HealtheLife — Questions Patients Ask
What is HealtheLife?
HealtheLife is the patient portal Cerner provides to hospitals and clinics for test results, appointments, messages and bills. Oracle acquired Cerner in June 2022 and runs it as Oracle Health. Some hospitals give the portal their own name — in one lawsuit, patients knew Cerner-hosted portals as “HEALTHConnect” and “Everyday Well” — so you may not see the words Cerner HealtheLife at all.
Is there a HealtheLife class action lawsuit?
None with a settlement or a certified class. The latest tracking case against Cerner, Whitby v. Cerner Corporation (No. 2:25-cv-04087-BP, W.D. Mo.), was dismissed on April 13, 2026. An earlier federal case in Maryland naming Cerner has been stayed since October 11, 2023. Neither has produced a settlement.
Did HealtheLife send my health information to Google?
That is what the lawsuits allege, and Cerner disputes it. Cerner told the court it used Google Analytics only to improve its portals, stopped before May 18, 2023, and did not set up its portals for Google's advertising tools. The Missouri judge did not decide who was right: she dismissed the case mainly because the patients lacked standing, not because tracking was proven or disproven.
Was HealtheLife hacked in the Oracle Health data breach?
The 2025 breach hit legacy Cerner servers holding hospital data that had not yet moved to Oracle Cloud. The notices, filings and reports we reviewed do not say HealtheLife accounts or passwords were accessed. Whether your records were involved is answered by a letter from your hospital naming Cerner. Details and the hospital list are on our Oracle Health breach page.
My hospital uses HealtheLife. Can I still be in a pixel settlement?
Possibly, but through your hospital, not the portal. Tracking settlements name a hospital and cover its own website or portal for set dates. Atrium Health's $1.8 million MyAtriumHealth settlement is one example of a hospital settlement, though no source we reviewed says which company's software runs that portal; its claim deadline was September 28, 2026. Look up your hospital on our portal settlement tracker and in our September settlement roundup.
Is there a case against Meta over hospital portals?
Yes. In re Meta Pixel Healthcare Litigation, No. 3:22-cv-03580-WHO (N.D. Cal.), sues Meta, not hospitals or Cerner. One proposed class covers Facebook users whose patient-portal clicks Meta allegedly received from listed healthcare providers since June 17, 2018. Class certification was argued on June 12, 2026; in the docket entries we reviewed, through September 23, 2026, no class-certification ruling or settlement appears.
Why does the MedStar case matter to HealtheLife users?
It is the longest-running test of these claims, and the plaintiffs there said MedStar used Cerner technology. After four and a half years, the Maryland courts held that URLs, IP addresses, cookie values and the fact of a login are not wiretap “contents,” and the appeals court affirmed on March 13, 2026. The opinion is unreported, so it is not binding precedent.
What should I do now?
Keep any breach letter from your hospital and enroll in the free monitoring it offers before its deadline. If your Social Security number was listed, freeze your credit at Equifax, Experian and TransUnion — free and reversible. Log in to HealtheLife only through your hospital's own site or app. And check whether your hospital has a tracking settlement with an open deadline; you do not need a lawyer to file a claim.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Oracle Health Data Breach
Legacy Cerner servers hacked, hospital letters, no settlement
Hospital Portal Settlements
Pixel-tracking cases hospital by hospital, open deadlines
Open Class Action Settlements
Claim deadlines you can still meet
Data Breach Settlement Calculator
What breach settlements typically pay