$9.5 Million, $15 a Person, and a PIN You Probably Deleted: Four More Hospital Pixel Settlements Close in September

Two days ago we mapped five patient-portal settlements with claim deadlines between August 14 and September 5 — St. Joseph in Nashua, Duke Health, MemorialCare, Call-On-Doc and Banner Health. Three of those are already past or days away. The searches behind them have not stopped, so here is the next set, each one checked today against its own court-authorized administrator site rather than against an aggregator.

September 11 — Concord Hospital (New Hampshire). $800,000, pro rata, no proof required.
September 16 — Penn Medicine / UPHS. Up to $15 per person, Pennsylvania addresses only.
September 28 — Atrium Health (North Carolina). $1.8 million split across two groups.
September 29 — LifeStance Health. $3,027,874.44, split across two subclasses.

These are four separate lawsuits, in four different courts, against four different defendants. Being covered by one says nothing about the others — the class definitions do not overlap, and none of them is a data breach. Nobody was hacked. The allegation in each case is that tracking and analytics code on a healthcare website or patient portal passed information to third parties.

The biggest number in this group belongs to Mohr, et al. v. The Trustees of the University of Pennsylvania as Owner and Operator of the University of Pennsylvania Health System (d/b/a Penn Medicine), Case No. 230102149, pending in the Court of Common Pleas of Philadelphia County. Several aggregator write-ups call it a $9.25 million settlement. The administrator's own FAQ puts it differently: "Defendant has agreed to pay up to a total of $9,500,000" — and that total covers notice, administration, approved attorneys' fees and costs, and incentive awards, not just class payments.

What a class member gets is stated plainly and separately: "Each Settlement Class Member who files a valid Claim will receive a cash payment of up to $15." Class Counsel may seek no more than $3,700,000 of that ceiling. Eleven class representatives may seek incentive awards of up to $5,000 each and two more up to $2,500 each.

The class is narrower than "Penn Medicine patients": all persons who between January 23, 2021 and January 23, 2023 accessed the myPennMedicine patient portal and had a Pennsylvania address on file at the time of access. A Philadelphia hospital visit does not qualify you; a portal login from a New Jersey address does not either.

Then there is the part that will stop most people: the claim form asks for the unique Notice ID and PIN from the notice you received by e-mail. If that email is gone, the FAQ's answer is to call 1-877-327-7567 to verify your identity and get filing instructions — not to file without it. Claims are due by 11:59 p.m. ET on September 16, 2026, or postmarked by that date. The exclusion deadline is earlier: September 1, 2026. The fairness hearing is November 12, 2026, via Zoom, and payment comes 90 days after final approval and after any appeals are complete — checks expire 180 days after they are issued, with PayPal, Venmo, Zelle, ACH and eMasterCard offered as alternatives.

The settlement also carries non-cash terms: Penn Medicine states it is not currently using the Meta pixel on pennmedicine.org, its Web Governance Committee will assess how analytics and advertising technologies are implemented, and — while continuing to deny liability — it agrees not to use such technologies on the site for two years unless that committee finds their use consistent with applicable law.

The smallest fund has the friendliest claim process. Branson v. Concord Hospital Inc. et al., No. 217-2024-CV-00295, puts $800,000 into a settlement fund, paid pro rata, with no proof required and no per-person cap written into the FAQ.

Two details set it apart from the rest of the wave. First, the third parties named are Google Analytics and Geonetric — not Meta. Most of the portal cases that drove this litigation wave were Meta-pixel cases; this one is about a web analytics tool and a healthcare website vendor.

Second, the class window is extraordinarily current. It covers people whose telecommunications were allegedly intercepted, and people whose protected health information may have been disclosed, while using Concord's web properties between May 9, 2021 and June 12, 2026 — the date the court preliminarily approved the deal, per classaction.org. Where the other settlements here close their class periods in 2023 or 2024, a Concord Hospital website visit from ten weeks ago is inside this class.

All three deadlines land on the same day — claims, opt-outs and objections are all due September 11, 2026. The final approval hearing is set for 9:00 a.m. on November 3, 2026, at Hillsborough Superior Court, 300 Chestnut Street, Manchester, New Hampshire. The administrator can be reached at (833) 421-7303.

Two of these settlements do not pay everyone from the same pot, which is the single most consequential thing to understand before filing.

Atrium Health — Julie Roberts, et al. v. The Charlotte-Mecklenburg Hospital Authority, No. 25CV057073-590, Superior Court of Mecklenburg County, North Carolina, administered by Kroll — divides $1,800,000 in two. Group 1 is U.S. residents who had a patient portal account between January 1, 2015 and July 31, 2019; they share $1,500,000 pro rata after fees, expenses and service awards. Group 2 is everyone with a portal account in the wider January 1, 2015 to April 10, 2024 window who did not access it during the Group 1 period; they receive up to $10 from a separate $300,000 pool. Five times as much money is reserved for the earlier, smaller group. Claims are due September 28, 2026; opt-outs and objections closed earlier, on August 31, 2026; the final approval hearing is September 30, 2026, at 2:30 p.m.

LifeStance Health — Montana Strong, et al. v. LifeStance Health Group Incorporated, No. CV-23-00682-PHX-KML, U.S. District Court for the District of Arizona, administered by Angeion — funds a non-reversionary settlement of $3,027,874.44, meaning no unclaimed money returns to the company. It is split into a Subclass 1 Fund of $1,203,405.00 and a Subclass 2 Fund of $1,824,469.44. Subclass 1 is patients who booked at least one session through LifeStance's online booking tool on lifestance.com between March 1, 2020 and April 30, 2023. Subclass 2 is every other LifeStance patient in that same window. Because Subclass 1 is the far smaller group and still holds nearly $1.2 million, the per-person math for people who actually booked through the tool should run well ahead of the general patient population — the notice does not publish an estimate, and the payment is pro rata either way.

LifeStance is also the one behavioral-health case in this group: the complaint alleges patient information reached third parties including Meta and Google. Alongside the money, LifeStance agreed to discontinue third-party tracking pixels other than HIPAA-compliant ones. Claims are due September 29, 2026; exclusions and objections closed August 31, 2026; the fairness hearing is October 16, 2026, at 10:30 a.m. Mountain Time. Class Counsel may request up to 33% of the fund in fees, plus costs, and up to $2,500 per class representative.

Put these four side by side and the pattern is obvious: the size of the fund tells you almost nothing about the size of your check. What decides it is the fund divided by the number of people in the class, after fees. Penn Medicine has by far the biggest ceiling in this group and pays the smallest fixed amount, because its class is everyone who logged into myPennMedicine from a Pennsylvania address across a two-year window, and because up to $3.7 million of that ceiling is earmarked for fees. Concord Hospital has the smallest fund and the loosest requirements. Atrium reserves five-sixths of its money for a four-and-a-half-year slice of its portal history.

Three practical notes before September:

The opt-out dates are already gone. For Atrium and LifeStance the exclusion and objection window closed on August 31, 2026, and for Penn Medicine it closes September 1 — all of them before their claim deadlines. If you stay in and do nothing, you release the claims anyway and get nothing. Only Concord Hospital lets you decide everything on the same day, September 11.

Final approval hearings are not payment dates. They run from September 30 through November 12, and money moves months later. Penn Medicine spells it out: payment 90 days after final approval, and only once any appeals are finished.

Epic is still not the defendant. The state-by-state "MyChart lawsuit" searches that keep driving this coverage are looking for a case against the software vendor that does not exist — the defendants are individual hospitals and health systems. We laid out how that works, and the five August deadlines, in our August 9 breakdown, and we keep the running case list on the MyChart settlement tracker.

Filing on any of these is free, takes minutes, and happens only on the administrator's own site. Nobody legitimate will call to collect a fee for doing it for you.