MedStar Health MyChart Lawsuit: The Tracking Case Ended, the Breach Deal Paid Out
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
There is a real MedStar Health lawsuit over patient-portal tracking — and MedStar won it. On March 13, 2026 the Appellate Court of Maryland affirmed judgment for MedStar in a suit alleging its myMedStar portal and website sent patient activity to Facebook and Google. Separately, the $1.35 million MedStar Health data breach settlement over a 2023 email intrusion closed for claims on October 14, 2025. As of October 6, 2026, there is no open MedStar claim form.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Tracking Lawsuit Claimed
MedStar’s patient portal is not called MyChart. MedStar’s own site calls it the MedStar Health Patient Portal; the court papers call it myMedStar.
In John Doe II v. MedStar Health, Inc., six patients sued MedStar Health and MedStar Good Samaritan Hospital in Baltimore. The lawsuit alleged that MedStar “bugged” its web properties with code that shared patients’ information with Facebook and Google. The claims were negligence, invasion of privacy and the Maryland Wiretap Act.
The remaining plaintiff said he logged into myMedStar from April 2018 to April 2022 to see lab and pathology results. According to Bloomberg Law, what reached the tech companies was the fact of a login, a generic URL string, an anonymized IP address and cookie values.
Case Details
Tracking case (state court): Circuit Court for Baltimore City, Case No. 24-C-20-000591. Class certification was denied, and the other plaintiffs dropped out. On June 26, 2024 the court granted MedStar summary judgment on all claims. On March 13, 2026 the Appellate Court of Maryland affirmed in an unreported opinion by Judge Shaw (No. 1033, September Term 2024). Its reasoning: a login and a generic “myMedStar Lab Results” tab address are not the “contents” of a communication under the Wiretap Act. Read the opinion.
Breach case (federal): Riddick v. MedStar Health, Inc., No. 1:24-cv-01335, filed May 7, 2024 in the U.S. District Court for the District of Maryland. Six suits were combined as In re MedStar Health Data Security Incident.
Meta case (MedStar is not a defendant): In re Meta Pixel Healthcare Litigation, No. 3:22-cv-03580-WHO, N.D. Cal., before Judge William H. Orrick. The original complaint was filed June 17, 2022 by a MedStar patient who used myMedStar. It is against Meta only.
Status: Tracking Case Over, Breach Settlement Closed
Tracking: MedStar won. Judgment for MedStar was affirmed on March 13, 2026. Nobody was paid, no class was certified, and there is no settlement, no fund and no claim form. We found no report of a further appeal, but we could not confirm that either way.
Email breach: The $1.35 million settlement got final approval on November 4, 2025. The claim deadline was October 14, 2025 and has passed. Per ClaimDepot, the administrator began paying approved claimants on December 24, 2025.
Meta: The federal case against Meta is still active. The docket shows a joint case management statement filed September 29, 2026. There is no settlement there either.
Were You Affected?
Tracking: If you used myMedStar or medstarhealth.org, the allegations would have covered you. But the case ended without a class or payment, so there is no group to be part of.
MedStar Health data breach: The settlement class was U.S. residents MedStar notified that their information was involved. That was 183,079 patients, plus current and former employees, whose data sat in three employee email accounts accessed between January 25 and October 18, 2023. Letters went out from May 4, 2024. If you got one, keep it. If you filed a claim by October 14, 2025, payment should come from the administrator, Kroll.
Watch the name. “MedStar Mobile Healthcare” is a Fort Worth, Texas ambulance service with its own 2022 breach settlement. Its claim deadline was February 23, 2024. It has nothing to do with MedStar Health in Maryland and D.C.
Our form on this page asks whether you used the website or the portal, what you did there, and when you last used it. That helps us tell you if a new case ever matches your use.
What the MedStar Health Data Breach Settlement Paid
Breach: The $1,350,000 fund first covered attorneys’ fees of up to $450,000, administration of up to $250,000 and $2,500 for each of the six named plaintiffs. Class members could claim up to $5,000 for documented losses or a flat payment estimated at $100, adjusted pro rata. They could also claim a year of medical data monitoring. MedStar denied wrongdoing. The claim window is closed.
For comparison, other hospitals have settled tracking cases. Wellstar’s $4.25 million MyChart pixel settlement covers about 870,000 people, with claims closing November 10. See which MyChart claim forms are open or estimate with the data breach settlement calculator.
How cases like this one end
Our copy of the federal courts’ own case database covers 111,990 other personal injury casesclosed in U.S. federal district courts between 2015 and 2025, 3.6% of them filed as class actions:
- 39.9% ended in a settlement recorded by the court. Another 13.8% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 39.9% and 53.7%.
- 5.7% were decided on a motion before any trial.
- 1 in 106 reached a trial (0.9%), after a median of 23.9 months.
- Median time from filing to the end of the case: 9 months.
- Only 771 of them (0.7%) record a money award at all; the median of those is $500,000.
These are base rates for this type of case (federal other personal injury cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
MedStar Health Lawsuit Timeline
- 1
June 17, 2022 — Meta Sued Over Hospital Pixels
A MedStar patient files the first complaint in what becomes In re Meta Pixel Healthcare Litigation, naming Meta, not MedStar, and citing the myMedStar login page.
- 2
May 2024 — Breach Letters and Lawsuit
MedStar notifies 183,079 patients of the 2023 email intrusion starting May 4. Riddick v. MedStar Health is filed in federal court in Maryland on May 7.
- 3
June 26, 2024 — Baltimore Judge Rules for MedStar
The Circuit Court for Baltimore City grants MedStar summary judgment on all claims in the tracking case, after class certification had been denied.
- 4
June 16, 2025 — Breach Settlement Approved Preliminarily
The $1.35 million settlement of the email breach case gets preliminary approval. Claims are due October 14, 2025.
- 5
November 4, 2025 — Final Approval
The court grants final approval of the breach settlement. Per ClaimDepot, payments begin December 24, 2025.
- 6
March 13, 2026 — Appeals Court Affirms
The Appellate Court of Maryland upholds MedStar’s win in the tracking case. Login data and generic URLs are not wiretap “contents,” it rules.
Three Things to Watch For
With one closed settlement, one lost case and a similarly named Texas company, confusion is easy to exploit:
“Late MedStar claim” offers
The breach claim deadline was October 14, 2025. Anyone offering to file a MedStar claim now, for a fee or for your Social Security number, is not working for the court.
“Your myMedStar tracking payout”
MedStar won the tracking case, so there is no tracking payout. A text or email saying otherwise is phishing. Log in only by typing medstarhealth.org yourself.
MedStar Mobile Healthcare mix-ups
Notices about the Fort Worth ambulance service breach are a different case. Check the case name on any notice before giving out personal details.
MedStar Health Lawsuit — Questions People Actually Ask
Is there a MedStar Health MyChart lawsuit?
There was a tracking lawsuit over MedStar’s portal, which is called myMedStar, not MyChart. MedStar won it: summary judgment on June 26, 2024, affirmed on appeal March 13, 2026. No one was paid.
Is there a MedStar Health data breach settlement?
Yes, for the 2023 email breach: $1.35 million, final approval November 4, 2025. The claim deadline of October 14, 2025 has passed. Payments to approved claimants began December 24, 2025, per ClaimDepot.
I filed a breach claim. How much will I get?
Up to $5,000 for documented losses, or a flat payment estimated at $100 that could move up or down depending on how many valid claims came in. Contact Kroll, the administrator, with your class member ID if you have not been paid.
Why did MedStar win the tracking case?
Maryland’s wiretap law protects the contents of communications. The court found that what was shared — the fact of a login and a generic “myMedStar Lab Results” tab address — was not content. The opinion is unreported, so it is not binding precedent.
Can I join the Meta Pixel case?
There is nothing to join. In re Meta Pixel Healthcare Litigation is against Meta, not MedStar, and no settlement exists. If a class is ever certified or a deal is reached, notice would come from a court-appointed administrator.
Is the MedStar Mobile Healthcare settlement the same thing?
No. That is a Fort Worth, Texas ambulance operator with a 2022 breach of 612,000 people and a claim deadline of February 23, 2024. It is unrelated to MedStar Health.
Has MedStar had other breach lawsuits?
The 2023 email breach is the only MedStar Health data breach settlement we found. If you get a new notice letter, compare the dates and case name with this page before acting.
What should I check now?
Look for a MedStar notice letter from May 2024 and keep it. Review your insurer’s explanation-of-benefits statements for care you never had. If you filed a breach claim and were not paid, contact Kroll.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
MyChart Claim Forms Open Now
Which hospital tracking settlements are taking claims and by when
MyChart Settlement Calculator
Estimate what a hospital tracking settlement pays per person
Data Breach Settlement Calculator
Estimate a payout from documented losses and flat payments
Rush MyChart Lawsuit
Rush patients are also plaintiffs in the Meta Pixel case