Mayo Clinic Lawsuit: Three Cases, No Settlement, No Claim Form
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
If you searched for a Mayo Clinic lawsuit, you probably saw one of three things: a letter about a data breach at a Mayo vendor called Xsolis, news of a July 2026 federal suit by a former research director over AI and patient privacy, or a class action by Mayo employees over their health plan. As of October 8, 2026, none of them has a settlement, a fund, a claim form or a deadline for patients.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Each Case Is About
1. The Mayo Clinic data breach (vendor). Xsolis, Inc., a Franklin, Tennessee company that handles case and utilization management for Mayo Clinic and other providers, reported that a phishing attack launched on January 20, 2026 gave an unauthorized actor access to files. Xsolis became aware of it on January 22. Depending on the person, the files may include names, addresses, dates of birth, health insurance information, Social Security numbers and medical treatment information. Mayo says it learned of the incident on April 23, 2026 and that it “was not specific to Mayo Clinic.” Lawsuits over this breach are filed against Xsolis, not Mayo; we cover them on our Xsolis data breach lawsuit page.
2. The AI whistleblower suit. A former Mayo Director of Research Operations filed a federal lawsuit against Mayo Clinic alleging retaliation, disability discrimination and family-leave violations. The complaint alleges she raised concerns about patient data de-identification, research review and AI studies, and that her position was eliminated on September 2, 2025 and her employment ended December 1, 2025. Mayo says it is committed to responsible AI and does not comment on pending litigation.
3. The employee health-plan class action. A Mayo Clinic employee sued Mayo and its plan administrator Medica on April 2, 2024, alleging underpaid claims, “deceptive, misleading, arbitrary” pricing methods and an inaccurate in-network directory, in violation of ERISA.
Case Details
The AI retaliation suit was filed on July 6, 2026 in the U.S. District Court for the District of Minnesota, according to local reporting; we could not confirm its case number. The health-plan case is Orrison v. Mayo Clinic et al., No. 0:24-cv-01124, also in the District of Minnesota. In September 2025, Judge Jeffrey M. Bryan dismissed the racketeering, benefits and mental health parity counts but let the claims over network adequacy, fiduciary duty and a full and fair review go forward. Data breach suits over Xsolis are against the vendor, not Mayo Clinic.
Status: No Settlement in Any Mayo Clinic Case
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is Affected
Patients who got an Xsolis letter are affected by the Mayo Clinic data breach. Xsolis says it notified affected patients directly, and Mayo has not said how many of its patients were involved. Keep the letter: it lists which of your data was in the files.
Mayo employees in the Mayo health plan may fall within the proposed class in Orrison, if a class is ever certified. Nothing has to be filed now.
Everyone else has nothing to join. The AI suit seeks back pay, front pay and damages for one person.
Is There Any Money?
How cases like this one end
Our copy of the federal courts’ own case database covers 62,689 erisa casesclosed in U.S. federal district courts between 2015 and 2025, 1.8% of them filed as class actions:
- 42.8% ended in a settlement recorded by the court. Another 23% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 42.8% and 65.8%.
- 6.3% were decided on a motion before any trial.
- 1 in 297 reached a trial (0.3%), after a median of 21.8 months.
- Median time from filing to the end of the case: 6.2 months.
- Only 4,861 of them (7.8%) record a money award at all; the median of those is $100,000.
These are base rates for this type of case (federal erisa cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Mayo Clinic Lawsuit Timeline
- 1
April 2, 2024 — Health-Plan Class Action Filed
A Mayo employee sues Mayo Clinic and Medica in federal court in Minnesota under ERISA (No. 0:24-cv-01124).
- 2
September 2025 — Health-Plan Case Partly Survives
Judge Jeffrey M. Bryan dismisses some counts but keeps the fiduciary duty, network adequacy and full-and-fair-review claims.
- 3
January 20, 2026 — Phishing Attack at Xsolis
An attack on the Mayo vendor begins. Xsolis becomes aware of it on January 22.
- 4
April 23, 2026 — Mayo Learns of the Breach
Mayo Clinic says it learned that some patients' information may have been affected. Xsolis says it notified affected patients directly.
- 5
July 6, 2026 — AI Retaliation Suit Filed
A former research director sues Mayo in federal court in Minnesota. The complaint alleges retaliation for raising AI and privacy concerns.
- 6
October 2026 — No Settlement Anywhere
As of October 8, 2026 none of the cases has a settlement, a claim form or a deadline.
Three Things to Watch For
A famous name plus a real breach letter is an easy hook. Watch for:
“Claim your Mayo Clinic settlement” sites
No Mayo Clinic settlement exists, so there is no Mayo claim form. A page asking for your Social Security number to “register” is collecting data, not filing anything.
Calls posing as Xsolis or Mayo
The breached files hold names, addresses and insurance details, so a caller can sound informed. Xsolis's real line is the number printed in your letter. Call that number yourself instead of trusting an incoming call.
Ads that mix up the three cases
Ads that put the AI lawsuit, the health-plan case and the breach together as one “Mayo Clinic class action” are misleading. The AI suit is one person's employment case and pays patients nothing.
Mayo Clinic Lawsuit — Questions People Actually Ask
Is there a Mayo Clinic lawsuit settlement?
No. As of October 8, 2026 there is no settlement, no fund, no claim form and no deadline in any lawsuit against Mayo Clinic that we found.
Was there a Mayo Clinic data breach?
Mayo patient data was involved in a breach at its vendor Xsolis. The phishing attack began January 20, 2026, and Mayo learned of it on April 23, 2026. Mayo's own systems were not named as the source.
I got a letter from Xsolis. Is it real?
Xsolis did mail letters to patients of Mayo Clinic and other providers. The real call line reported for the letters is (844) 403-4585. Check the number on your letter against it before you call.
Can I sue Mayo Clinic over the data breach?
The breach lawsuits we found are against Xsolis, the vendor, not Mayo. See our Xsolis lawsuit page for where they stand.
What is the Mayo Clinic AI lawsuit?
It is a single former employee's federal lawsuit, filed July 6, 2026 in Minnesota. It alleges retaliation over concerns about AI research and patient privacy. It is not a class action, and patients cannot join it.
Is there a lawsuit against Mayo Clinic by employees?
Yes. Orrison v. Mayo Clinic et al., No. 0:24-cv-01124, is a proposed ERISA class action over the employee health plan administered by Medica. Part of it survived a motion to dismiss in September 2025.
Is there a Mayo Clinic pixel or MyChart tracking lawsuit?
We found none. Other hospital systems face those suits, for example the Cleveland Clinic MyChart lawsuit.
What should I do now?
If you got an Xsolis letter, keep it, sign up for the identity protection it offers, and consider a free credit freeze. Do not pay anyone to “join” a Mayo Clinic lawsuit.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Xsolis Data Breach Lawsuit
The vendor breach behind the Mayo Clinic patient letters
Cleveland Clinic MyChart Lawsuit
A tracking case against another major clinic system
Open Class Action Settlements
Settlements currently accepting claims, with deadlines
Data Breach Settlement Calculator
Estimate what comparable breach settlements have paid