UPMC MyChart Lawsuit: No Open Tracking Case, No Settlement
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
If you are searching for a UPMC lawsuit over Facebook or Google tracking because other hospitals are paying out, here is the short answer as of October 6, 2026: the one pixel suit against UPMC was sent to private arbitration in November 2022. There is no UPMC tracking settlement, no fund and no claim form. Separately, 687 UPMC patients were told in 2026 that their records were pulled through a national health network.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the 2022 Pixel Lawsuit Said
On August 25, 2022 a patient sued UPMC and Meta in Smidga v. Meta Platforms, Inc., No. 2:22-cv-01231, in federal court in the Western District of Pennsylvania. The 39-page complaint alleges that the Meta Pixel on UPMC’s appointment scheduling page sent Meta what patients typed there — per the suit, potentially medical conditions, prescriptions, appointments, test results, diagnoses and reasons for the visit — along with the visitor’s IP address.
The claims ran under the federal Wiretap Act and the Pennsylvania Wiretapping and Electronic Surveillance Control Act. These are allegations; no court ever ruled on whether they were true. Note what the suit was about: the public UPMC website, not the logged-in patient portal.
Case Details
In November 2022 a federal judge granted UPMC’s motion to move the case out of court and into arbitration, and STAT reported that the case was “now closed pending the results of the arbitration.” Arbitration is private and individual: it does not produce a class, a fund or a public result. We could not find any reported outcome.
Other UPMC court cases you may see in search results are different matters: Ross v. University of Pittsburgh Medical Center, No. 1:24-cv-00016 (W.D. Pa.), is an antitrust class action by health care workers about wages and job mobility, not patient privacy. And Epic Systems Corporation v. Health Gorilla, Inc., No. 2:26-cv-00321 (C.D. Cal.), was filed by Epic and several health systems — not by patients and not against UPMC.
Status: Reference Only, Nothing to Claim
The newest UPMC data breach notice is a different kind of event. On January 13, 2026, Epic told UPMC that participants of a health information network called Health Gorilla had requested patient records under the pretext of treating shared UPMC patients. UPMC posted a notice dated March 13, 2026 and reported the incident to federal regulators as affecting 687 individuals. Attorneys advertising on ClassAction.org opened an inquiry and have since marked it “Investigation Complete.” We found no lawsuit by patients over it.
Could Your UPMC Data Have Been Shared?
Website tracking: the 2022 complaint was about people who used the appointment scheduling page on UPMC’s website. Because that case went to arbitration, there is no class to belong to.
The portal: UPMC’s portal is called MyUPMC, and UPMC says it is now “powered by MyChart.” The old UPMC Patient Portal was renamed MyUPMC and MyCHP was folded into it. Messages from before October 3, 2026 now appear read-only. None of this is a privacy incident; it is a software change.
Health Gorilla: if you were one of the 687, UPMC sent you a letter. The letter is your proof. UPMC’s line for questions is 1-855-460-8762.
Our form on this page asks whether you used the UPMC website or MyUPMC, what you did there and when you last did it. That helps us track whether a new case matches you — it is not a claim.
What a UPMC Case Has Paid Before
UPMC itself has settled two earlier breach cases, both closed. In 2022 it made $450,000 available over a breach at its outside law firm Charles J. Hilton PC that hit about 36,000 patients: $250 for documented expenses, up to $2,500 for fraud losses, $30 for time, and 12 months of monitoring. Claims were due September 3, 2022. In 2021 a court approved $2.65 million for about 66,000 employees whose payroll data was stolen in 2013 and 2014. To estimate a future breach payout, use the data breach settlement calculator.
How cases like this one end
Our copy of the federal courts’ own case database covers 123,245 other contract casesclosed in U.S. federal district courts between 2015 and 2025, 5.8% of them filed as class actions:
- 30.9% ended in a settlement recorded by the court. Another 20.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 30.9% and 51.1%.
- 7.6% were decided on a motion before any trial.
- 1 in 71 reached a trial (1.4%), after a median of 29.3 months.
- Median time from filing to the end of the case: 7.6 months.
- Only 7,369 of them (6%) record a money award at all; the median of those is $402,000.
These are base rates for this type of case (federal other contract cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
UPMC Privacy Cases Timeline
- 1
2013–2014 — Employee Payroll Data Stolen
An intruder takes employee records used to file false tax returns. The Pennsylvania Supreme Court later holds that an employer owes a duty of reasonable care over employee data.
- 2
2021 — $2.65 Million Employee Settlement
A court approves $2.65 million for about 66,000 employees. The case is closed.
- 3
2022 — $450,000 Law-Firm Breach Settlement
UPMC settles over the breach at Charles J. Hilton PC affecting about 36,000 patients. Claims were due September 3, 2022.
- 4
August 25, 2022 — Meta Pixel Suit Filed
Smidga v. Meta Platforms, No. 2:22-cv-01231, alleges UPMC’s appointment page sent patient entries to Meta. In November 2022 the court sends it to arbitration.
- 5
January 13, 2026 — Health Gorilla Access Flagged
Epic notifies UPMC and the same day sues Health Gorilla in federal court in California. UPMC reports 687 affected individuals and mails letters.
- 6
October 6, 2026 — No Tracking Case, Nothing to Claim
MyUPMC now runs on MyChart. We found no pending UPMC tracking suit, no settlement and no claim form.
Three Things to Watch For
Large MyChart payouts at other hospitals make UPMC patients an easy audience:
“Claim your UPMC MyChart settlement” ads
There is no UPMC tracking settlement. A page asking for your MyUPMC login, date of birth or insurance ID to “check eligibility” is collecting data, not filing a claim.
Calls about the Health Gorilla letter
UPMC’s published number for this incident is 1-855-460-8762. A caller who phones you, mentions the letter and wants payment or your Social Security number is not UPMC — the notice says no Social Security numbers were involved.
Fake MyUPMC switchover emails
The move to MyChart is real, which makes “re-verify your MyUPMC account” messages convincing. Log in by typing the address yourself; UPMC’s support line is 1-833-298-7320.
UPMC Lawsuit — Questions People Actually Ask
Is there a UPMC MyChart lawsuit?
Not an open one. The only tracking suit we found, Smidga v. Meta Platforms (No. 2:22-cv-01231), targeted the Meta Pixel on UPMC’s appointment scheduling page, and in November 2022 it was sent to individual arbitration. As of October 6, 2026 there is no settlement and no claim form.
What is MyUPMC, and is it MyChart?
MyUPMC is UPMC’s patient portal. UPMC says it is “powered by MyChart,” the Epic portal software, and you can reach your MyUPMC account through the MyChart app. The UPMC Patient Portal and MyCHP were merged into it.
Was UPMC part of the MOVEit breach?
We found no record of that. The 2023 vendor incident tied to UPMC was different: billing contractor Intellihartx, hit through the GoAnywhere file-transfer tool, said it would contact about 25,000 UPMC patients. We found no settlement for UPMC patients from it.
What happened with Health Gorilla?
On January 13, 2026 Epic told UPMC that participants of the Health Gorilla network had requested records under the pretext of treatment. UPMC says names, dates of birth, clinical notes, diagnoses and medical history could be involved, but no Social Security numbers. It reported 687 affected individuals. Health Gorilla denies wrongdoing.
Can I join Epic’s lawsuit against Health Gorilla?
No. Epic Systems Corporation v. Health Gorilla, Inc., No. 2:26-cv-00321, was brought by Epic, OCHIN and health systems including Trinity Health. It is not a class action and pays nothing to patients. Epic alleges that nearly 300,000 patient records across multiple Epic-using health systems were improperly accessed.
Did UPMC ever pay a data breach settlement?
Yes, twice, and both are closed: $450,000 in 2022 for a breach at its outside law firm (claims due September 3, 2022), and $2.65 million approved in 2021 for about 66,000 employees whose payroll data was stolen.
How much have other hospitals paid for MyChart tracking?
Wellstar agreed to $4.25 million and Duke to $3.74 million. See our MyChart claim form guide for which hospital settlements are open and the MyChart settlement calculator for per-person ranges.
What should a UPMC patient do now?
Keep any UPMC or Intellihartx letter. Read your insurer’s explanation-of-benefits statements for care you never received. If you think the UPMC website shared your data, tell us via the form on this page what you used and when; we update this page if a new case is filed.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
MyChart Class Action Claim Form
Which hospital pixel settlements are open and how to file
MyChart Settlement Calculator
What hospital tracking settlements have paid per person
Data Breach Settlement Calculator
Estimate a payout if a breach case ever settles
Open Class Action Settlements
Settlements currently accepting claims, with deadlines