Montefiore MyChart Lawsuit: No Tracking Case Found as of October 2026
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
As of October 6, 2026, we found no Montefiore MyChart lawsuit and no settlement over Meta Pixel, Google or other tracking on Montefiore’s websites or its Epic MyChart portal. The Montefiore data breach most people have read about is an insider theft from 2013 that ended in a $4.75 million federal HIPAA penalty in February 2024. That money went to the government. There is no fund, no claim form and no deadline for patients.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Is Actually on the Record
Tracking. Hospitals elsewhere have been sued for sending website and portal activity to Meta or Google. In June 2022, The Markup tested Newsweek’s top 100 hospitals and found the Meta Pixel on 33 of them. We found no lawsuit, settlement or regulator action naming Montefiore over tracking. Montefiore’s web privacy policy (revised September 2024) says it and its service providers may use cookies, but that it “does not use cookies to store your PII or health information.”
The insider theft. Between January 1 and June 30, 2013, a Montefiore employee accessed the records of 12,517 patients and sold them to an identity theft ring. The data included names, addresses, Social Security numbers, next of kin and health insurance information. The New York Police Department alerted Montefiore in May 2015. The employee was terminated and prosecuted, according to a Montefiore spokesperson.
Later insider incidents. In a billing scheme with a vendor, an employee accessed about 4,000 patients’ records between January 2018 and July 2020. Another employee looked at records of 943 people between January 2020 and February 2021.
Case Details
There is no court case to report. We found no Montefiore lawsuit in state or federal court over tracking, and no class action tied to the insider incidents. The one completed proceeding is administrative: on February 6, 2024 the HHS Office for Civil Rights announced that Montefiore Medical Center would pay $4,750,000 to resolve potential HIPAA Security Rule violations. OCR found that Montefiore had failed to do an accurate risk analysis, review system activity and keep audit controls. Montefiore did not admit liability and agreed to a corrective action plan with two years of OCR monitoring. HIPAA Journal’s summary sets out the dates.
Status: Reference Only, Nothing to Claim
The $4.75 million HHS settlement is a government penalty, not a class settlement. Patients were never able to file a claim for any of it. One caveat: the court databases we use were not reachable when we checked, so this finding relies on news coverage, regulator summaries and Montefiore’s own pages.
Could You Be Affected?
Nobody is in a class, because no Montefiore class exists. If one is ever filed over tracking, people would typically be grouped by what they did online. Did they book appointments or search for doctors on Montefiore websites, or log in to Montefiore MyChart (mychart.montefiore.org)? And when? The form on this page asks the same three things: website or MyChart, what you did there, and when you last did it.
For the insider incidents, Montefiore notified affected patients by mail. If you got a letter, keep it. For the December 2020 notice, Montefiore said Social Security numbers and financial accounts were not accessed.
What Other Hospital Tracking Cases Paid
Montefiore Data Breach and Penalty Timeline
- 1
January–June 2013 — Records Stolen
An employee accesses the records of 12,517 patients over six months and sells them to an identity theft ring.
- 2
May–July 2015 — Police Alert, Report to HHS
The NYPD alerts Montefiore in May 2015. Montefiore reports the breach to OCR on July 22, 2015, and OCR opens an investigation on November 23, 2015.
- 3
December 1, 2020 — Billing-Scheme Notice
Montefiore notifies patients that a former employee and a vendor submitted false invoices. Names, medical record numbers and surgery dates were accessed.
- 4
April 2021 — Another Employee Fired
Monitoring software flags an employee who viewed records of 943 people between January 2020 and February 2021. The employee is fired.
- 5
February 6, 2024 — $4.75 Million HHS Settlement
OCR announces the HIPAA settlement over the 2013 theft: $4,750,000, a corrective action plan and two years of monitoring. No money goes to patients.
- 6
October 6, 2026 — No Tracking Case Found
We find no lawsuit or settlement over tracking on Montefiore websites or MyChart, and no open claim of any kind.
Three Things to Watch For
A well-known penalty, a large patient portal and no actual claim process leave room for confusion and scams:
“$4.75M Montefiore settlement — file your claim”
Some listing sites label the HHS penalty a “data breach settlement.” It was paid to the government. Any page that asks for your Social Security number to “claim your share” is collecting data, not filing a claim.
Texts with a MyChart link about a “settlement”
Montefiore MyChart does send real links by text and email, and they expire quickly. Montefiore MyChart does not run lawsuit claims. Don’t log in through a link that mentions money. Go to mychart.montefiore.org yourself or call 855-226-3070.
“Join the Montefiore MyChart class action” ads
There is no Montefiore class action to join. An ad like this is usually a law firm looking for clients. If you sign anything, read it as a retainer agreement, not a registration form.
Montefiore Lawsuit — Questions People Actually Ask
Is there a Montefiore MyChart lawsuit?
Not that we could find as of October 6, 2026. We found no lawsuit or settlement over Meta Pixel, Google or other tracking on Montefiore websites or Montefiore MyChart.
What is Montefiore’s patient portal called?
Montefiore MyChart, built on Epic, at mychart.montefiore.org. You can use it to send messages, see results, book appointments, request refills and pay bills. The support line is 1-855-226-3070.
What was the Montefiore data breach with the HHS fine?
Between January and June 2013, an employee stole the records of 12,517 patients and sold them to an identity theft ring. On February 6, 2024, HHS announced that Montefiore would pay $4.75 million and follow a two-year corrective action plan. Montefiore did not admit liability.
Can I get money from the $4.75 million Montefiore settlement?
No. It was a HIPAA penalty paid to the HHS Office for Civil Rights, not a class settlement. There was never a claim form for patients.
Is there a Montefiore lawsuit over the other insider incidents?
We found none. Those incidents are the 2018–2020 billing scheme involving about 4,000 patients and the 2020–2021 incident involving 943 people. Montefiore notified affected patients. In the billing scheme, Montefiore said the employee died during the investigation; in the other incident the employee was fired and the matter was referred to law enforcement.
Did Montefiore share my data with Meta or Google?
We could not confirm that either way. Montefiore’s web privacy policy says cookies may be used by Montefiore and its service providers, but that it does not use cookies to store personal or health information. No lawsuit or regulator has made a public finding about Montefiore and tracking.
What should I keep in case a case is filed later?
Note whether you used Montefiore websites or Montefiore MyChart, what you did there (booked an appointment, searched for a doctor or condition, sent a message) and roughly when. Keep any breach letter you received from Montefiore.
How did similar hospital tracking cases end?
Several settled. Christ Hospital in Ohio set up a $7,000,000 fund for more than 323,000 people, and Loyola Medicine settled for $2.67 million. Both are closed. These results do not predict anything for Montefiore.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
MyChart Class Action Claim Forms
Which hospital tracking settlements took claims and how they ended
MyChart Settlement Calculator
Rough per-person range if a tracking case ever settles
Data Breach Settlement Calculator
What breach settlements have paid for documented losses
Open Class Action Settlements
Settlements taking claims right now, with deadlines