VITAS Hospice Data Breach: 319,177 People, Lawsuits Settled Out of Public View
Active Litigation
The VITAS Hospice Services data breach lawsuit is not one case but a cluster: at least seven suits were filed in Miami federal court within about six weeks of the breach notice. All of them were later closed. VITAS’s parent company, Chemed, told investors in April 2026 that the remaining cases had been consolidated and that it had agreed to settle them. As of October 18, 2026 we found no court-approved notice, no administrator, no claim form and no deadline.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened in the VITAS Breach
VITAS is the largest for-profit hospice chain in the United States, owned by Chemed Corporation. According to VITAS, an unauthorized person compromised an account belonging to one of its vendors and used it to get into VITAS systems. The access ran from September 21, 2025 to October 27, 2025; VITAS identified it on October 24, 2025.
Chemed’s annual report adds that on October 29, 2025 VITAS received a message from a threat actor claiming to have taken significant amounts of data. No known ransomware group publicly took credit.
The exposed records may include names, addresses, phone numbers, dates of birth, Social Security numbers, driver’s license numbers, diagnoses, medications, lab results, treatment and health insurance information — and next-of-kin contact details (name, phone, email). The lawsuits allege VITAS failed to secure this data and waited too long to notify people.
Case details
CourtListener’s docket index shows seven suits against VITAS entities in the U.S. District Court for the Southern District of Florida, filed between November 24 and December 29, 2025:
— Miakos v. VITAS Hospice Services, L.L.C., No. 1:25-cv-25490 (filed November 24, 2025)
— Fleitas v. Vitas Hospice Services, LLC, No. 1:25-cv-25549
— Vaughn v. Vitas Hospice Services L.L.C., No. 1:25-cv-25535
— Wright v. Vitas Healthcare Corporation, No. 1:25-cv-25627
— Farrington v. Vitas Hospice Services, LLC, No. 1:25-cv-25818
— Martinez v. VITAS Hospice Services, LLC, No. 1:25-cv-25935
— Hartmann v. Vitas Hospice Services, LLC, No. 1:25-cv-26125 (filed December 29, 2025)
The complaints plead negligence, breach of implied contract, invasion of privacy, unjust enrichment and related claims. Miakos and Wright were voluntarily dismissed without prejudice on January 26, 2026; the last federal case, Vaughn, was dismissed without prejudice on April 3, 2026. We could not locate the court where the consolidated case was settled.
Status: Settlement Agreed, Nothing to Claim Yet
As of October 18, 2026 we found no settlement website, no named administrator, no preliminary approval order, no claim form and no claim deadline. The amount has not been disclosed. A class settlement must be approved by a judge before anyone is paid, and class members are notified directly when that happens.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is Likely Covered
The HHS Office for Civil Rights breach portal lists 319,177 individuals. Texas alone was told of 5,633 affected residents; VITAS operates in 15 states. The Miakos complaint also says employee data was exposed, not only patient data.
Your notice letter is the test. VITAS posted its notice online on November 21, 2025 and notified affected people. The letter may reach you as next of kin, since next-of-kin contact details were among the exposed data. Keep it: it shows which data was involved and is the easiest proof of class membership if a claim process opens.
What the Settlement Might Pay
Healthcare breach settlements commonly offer reimbursement of documented losses, a smaller flat payment and credit monitoring, but no terms have been published here. Our data breach settlement calculator shows how fund size and claim rates shape per-person payouts. Separately, the 24 months of credit monitoring VITAS offered in its notice letter is available now — that offer does not depend on the lawsuit.
VITAS Breach and Lawsuit Timeline
September 21 – October 27, 2025 — The Intrusion
An unauthorized party uses a compromised vendor account to access VITAS systems and view and download patient data.
October 24, 2025 — VITAS Detects It
VITAS identifies the intrusion. On October 29 a threat actor claims to have taken significant amounts of data.
November 21–24, 2025 — Notice, Then First Suit
VITAS posts its breach notice on November 21. Miakos v. VITAS (1:25-cv-25490) is filed in Miami federal court on November 24.
December 2025 — Seven Federal Suits, 319,177 Affected
More suits follow through December 29. The HHS breach portal lists 319,177 individuals, as reported on December 9, 2025.
January – April 2026 — Federal Cases Closed
The federal suits are closed between January 23 and April 3, 2026; Miakos and Wright were voluntarily dismissed without prejudice on January 26, and Vaughn was dismissed without prejudice on April 3.
April 28, 2026 — Settlement Disclosed
Chemed reports the cases were consolidated and an agreement to settle was reached. As of October 2026, no claim process is public.
Three Things to Watch For
A settlement that has been announced but not yet opened, with next-of-kin data in the leak, invites specific tricks:
“Claim your VITAS settlement now” sites
As of October 18, 2026 there is no official claim form. A page asking for your Social Security number to “reserve” a VITAS payment is not a court-approved administrator.
Calls to grieving families
The leaked records include next-of-kin names, phones and emails. A caller who knows your late parent was a VITAS patient is not proof of anything — hang up and contact VITAS through the number in your letter.
Fake credit-monitoring enrollment
The real 24-month monitoring offer comes through your notice letter. An email asking you to pay or re-enter your SSN to “activate” it is phishing.
VITAS Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
What is the lawsuit against VITAS hospice?
The suits in the news are data breach class actions over the September–October 2025 intrusion. Seven were filed in the Southern District of Florida; all were closed by April 3, 2026. Chemed says the remaining cases were consolidated and settled. VITAS also entered an older, unrelated Corporate Integrity Agreement with HHS’s Inspector General on October 30, 2017, which the OIG confirmed was concluded on June 22, 2023 — that is a Medicare compliance matter, not this breach.
What are the complaints against VITAS Hospice Services?
In the breach cases, plaintiffs allege negligence, breach of implied contract and of confidence, invasion of privacy, breach of fiduciary duty and unjust enrichment. They say VITAS did not secure patient and employee data and was slow to notify people. These are allegations; no court ruled on them.
How many people were affected by the VITAS Hospice Services data breach?
319,177 individuals, according to the HHS Office for Civil Rights breach portal. VITAS told the Texas attorney general that 5,633 Texans were affected.
What data was exposed?
Depending on the person: name, address, phone, date of birth, Social Security number, driver’s license number, next-of-kin contact details, diagnoses, medications, lab results, treatment and health insurance information.
Is there a VITAS settlement I can file a claim for?
Not yet. Chemed disclosed an agreement to settle in April 2026, but as of October 18, 2026 there is no public settlement website, administrator, claim form or deadline. When a judge preliminarily approves it, class members should receive a notice.
What is the typical payout per person?
For this case, unknown — the amount has not been disclosed. Chemed describes it only as non-material and insurance-covered. Per-person amounts depend on the fund size and how many people file.
My relative was a VITAS patient and has died. Does this affect me?
Possibly in two ways. Next-of-kin contact details were among the exposed data, so your own name, phone and email may be in the records. And if a settlement opens, an estate may be able to claim for the patient — the official notice will say how. Keep any letter you received.
What should I do right now?
Enroll in the free 24-month monitoring from your notice letter, freeze your credit, and check insurance statements for care that was never provided. For a deceased relative, ask the credit bureaus to flag the file as deceased. Ignore anyone asking for money to join the settlement.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.