Kaiser Permanente data breach settlement
Yes. The Kaiser Permanente data breach settlement is real: a $47.5 million class action settlement in federal court, Northern District of California, run by Strategic Claims Services. The claim deadline, 12 March 2026, has passed and the judge approved the settlement on 14 July 2026. Payments have not been sent yet.
The court granted final approval on July 14, 2026 and entered final judgment on July 22, 2026; the administrator's status says claims are being processed.
Is it real?
Yes. The case is John Doe, et al. v. Kaiser Foundation Health Plan, Inc., et al., case number 3:23-cv-02865-EMC, in the US District Court for the Northern District of California. The court appointed Strategic Claims Services to run it, and its only official site is kaiserprivacysettlement.com.
How the real notice reached people. From January 3 to January 16, 2026, Strategic Claims Services emailed the Short Form Notice to 12,943,035 class members and mailed a postcard to 191,272 without email; about 454,693 more postcards went to people whose emails bounced. The email opens by saying it is from Strategic Claims Services, the Settlement Administrator, and shows 'Your Class Member ID Number'. The Class Member Unique ID is at the top of the email or the bottom of the postcard, and was required to file online. The FAQ says the administrator is court-appointed and not affiliated with Kaiser. No scam warning or sending address is published.
To tell a real message from a scam:
- The only official site is kaiserprivacysettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your Kaiser Permanente password, your online banking login or a code texted to you. Payment details go only into the claim form on kaiserprivacysettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on 1-855-783-3816, the number on kaiserprivacysettlement.com, not one in the message.
- Claims have closed.The deadline was 12 March 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on kaiserprivacysettlement.com instead.
Who qualifies
Current and former Kaiser Foundation Health Plan enrollees in California, Colorado, Georgia, Hawaii, Maryland, Oregon, Virginia, Washington or DC who accessed the logged-in pages of the Kaiser Permanente websites or mobile apps from November 2017 to May 2024 (excluding members who chose arbitration and certain others).
Size: approximately 13.1 million people (13,134,307 class member records).
It covers people in the United States only (Kaiser members in California, Colorado, Georgia, Hawaii, Maryland, Oregon, Virginia, Washington and the District of Columbia). If you live elsewhere, you are not part of it, whatever a message says.
How much
The total settlement is $47.5 million (gross; set at the $47,500,000.00 maximum once opt-outs were finalized; notice said $46 million with up to $47.5 million). What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Cash payment | pro rata share of the Net Settlement Fund | Notice estimated $20 to $40; the final approval order says each claiming class member will get about $40. |
| Non-cash relief | removal of third-party code and consent banners | Described in the final approval order as already obtained. |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
- Final approval granted: .
Payout. The administrator has not published a payment date; the notice says payments go out after any objections and appeals are resolved.
The administrator: “Status Update – Claims are being processed.”
Filing and payment
- Claims closed on March 12, 2026 (online, or mailed and postmarked by that date).
- Online claims at www.kaiserprivacysettlement.com required the Class Member Unique ID from the email (top) or postcard (bottom); paper forms went to Strategic Claims Services, P.O. Box 230, Media, PA 19063.
- Questions: 1-855-783-3816 or [email protected].
Official site: kaiserprivacysettlement.com. Phone: 1-855-783-3816. Mail: Kaiser Privacy Breach Settlement, c/o Strategic Claims Services, Inc., P.O. Box 230, 600 N. Jackson Street, Suite 205, Media, PA 19063.
The breach, and what to do today
The lawsuit alleged that third-party tracking code on Kaiser Permanente's websites and mobile apps, including the secure member portal, sent members' information to outside companies as they used the sites from November 2017 to May 2024. Kaiser denies wrongdoing. It is a tracking-technology privacy case, not a hack.
What was exposed: alleged: patient status, identifying information, medical topics researched, choices made, information shared and communications with medical providers (as alleged in the complaint, quoted in the final approval order).
A settlement pays for what already happened. The data is still out there, so do these now:
- Read your health insurance statements.Check each Explanation of Benefits for care you never had, and tell your insurer if you find any. Medical records can’t be changed like a password.
- Distrust messages about Kaiser Permanente and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- How much each person’s cash payment will be. It depends on how many people claim.
- When payments will be sent.
Questions
Is the Kaiser Permanente data breach settlement legit?
Yes. It is John Doe, et al. v. Kaiser Foundation Health Plan, Inc., et al., case 3:23-cv-02865-EMC, in the US District Court for the Northern District of California. Strategic Claims Services runs it for the court, and the only official site is kaiserprivacysettlement.com.
Who qualifies for the Kaiser Permanente settlement?
Current and former Kaiser Foundation Health Plan enrollees in California, Colorado, Georgia, Hawaii, Maryland, Oregon, Virginia, Washington or DC who accessed the logged-in pages of the Kaiser Permanente websites or mobile apps from November 2017 to May 2024 (excluding members who chose arbitration and certain others).
How much will I get from the Kaiser Permanente settlement?
The total settlement is $47.5 million (gross; set at the $47,500,000.00 maximum once opt-outs were finalized; notice said $46 million with up to $47.5 million). The administrator has not published a per-person amount; it depends on how many valid claims there are.
What is the deadline for the Kaiser Permanente settlement?
The claim deadline was 12 March 2026. It has passed.
When will the Kaiser Permanente settlement pay out?
The administrator has not published a payment date; the notice says payments go out after any objections and appeals are resolved.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- Kaiser Privacy Breach Settlement: home, Strategic Claims Services, read 7 Nov 2026: status update, class, fund, deadlines, administrator contacts.
- Kaiser Privacy Breach Settlement: FAQ, Strategic Claims Services, read 7 Nov 2026: where the Unique ID is, how to file, administrator independent of Kaiser.
- Kaiser Privacy Breach Settlement: important documents, Strategic Claims Services, read 7 Nov 2026: court filings through July 22, 2026.
- Order granting final approval (Dkt. 454), US District Court, N.D. California (via settlement site), read 7 Nov 2026: dated July 14, 2026; $47.5 million gross; about 13.1 million people; 755,551 claims (about 5.7%); about $40 per claimant.
- Final Order and Judgment (Dkt. 459), US District Court, N.D. California (via settlement site), read 7 Nov 2026: filed 07/22/26; continued hearing held July 2, 2026.
- Third Supplemental Declaration of Paul Mulholland (Dkt. 424), Strategic Claims Services, filed in N.D. California, read 7 Nov 2026: email and postcard notice program, copy of the email notice, Unique ID anti-fraud step.
- Long Form Notice, Strategic Claims Services (court-authorized notice), read 7 Nov 2026: $20 to $40 estimate; payment after objections and appeals resolved.