$5M Geisinger Health, Nuance Communications Data Breach Settlement—Claim Up To $5,000 By March 18, 2026
Geisinger Health and Nuance Communications have agreed to a $5 million settlement to resolve a class action lawsuit over a November 2023 data breach. The Pennsylvania court approved the settlement in November 2025, with affected individuals having until March 18, 2026 to file claims.
Over 1.3 million patients had their sensitive information compromised when a former Nuance employee accessed Geisinger’s systems just two days after being terminated. Now there’s compensation available—but only if you act before the deadline.
What Happened in the Geisinger Health Data Breach
On November 29, 2023, a former Nuance Communications employee named Andre J. Burk accessed Geisinger Health patient records two days after his termination from Nuance. The breach wasn’t detected by Nuance itself—Geisinger discovered the unauthorized access and alerted its IT vendor.
The compromised information included names, dates of birth, addresses, medical record numbers, Social Security numbers, health insurance information, race, gender, phone numbers, and facility codes. Law enforcement requested that breach notifications be delayed while they investigated, which is why affected individuals weren’t notified until June 2024.
The former employee now faces federal criminal charges and his trial was scheduled for January 2026.
Who Qualifies for the Settlement
You’re eligible if you’re a U.S. resident whose personal or health information was compromised in the November 29, 2023 data incident, including everyone who received a breach notification from Geisinger Health.
If you received a notification letter from Geisinger about this breach, you automatically qualify as a settlement class member. No additional proof is needed to claim benefits.
How Much Money Can You Get
The settlement offers two payment options—you must choose one:
Option 1: Reimbursement for Documented Losses You can claim up to $5,000 for documented out-of-pocket expenses related to the breach. This includes unreimbursed fraud charges, credit monitoring costs, bank fees, identity theft expenses, and communication charges.
You can also claim up to $40 for lost time (two hours at $20 per hour) spent dealing with breach-related issues.
Required documentation includes bank statements, credit card statements, receipts, invoices, or correspondence proving your losses resulted from this specific breach.
Option 2: Pro Rata Cash Payment If you didn’t experience documented losses, you can receive an alternative cash payment distributed equally among all claimants who choose this option. The exact amount depends on how many people file claims and what remains in the settlement fund after administrative costs and attorney fees.
Important: You cannot receive both documented loss reimbursement and the pro rata payment. Choose the option that gives you the most money.
Free Credit Monitoring for Everyone All class members are eligible for one year of free identity theft protection services, including three-bureau credit monitoring, $1 million in identity theft insurance, dark web monitoring, medical records monitoring, and health insurance information monitoring.
How to File Your Claim
Settlement Website: GeisingerDataSettlement.com
You have two ways to submit your claim:
Online Submission: Visit the official settlement website and complete the claim form by March 18, 2026 at 11:59 PM.
Mail Submission: Download the claim form from the settlement website, complete it, and mail to: Settlement Administrator – 83320 c/o Kroll Settlement Administration LLC P.O. Box 5324 New York, NY 10150-5324
Your mailed claim must be postmarked on or before March 18, 2026.
You’ll need information from your breach notification letter to complete the claim form. Keep a copy of your submitted claim for your records.
Critical Deadlines You Can’t Miss
- February 17, 2026: Deadline to opt out or object to the settlement
- March 16, 2026: Final approval hearing at 11:00 AM ET
- March 18, 2026: FINAL DEADLINE to submit claims
The settlement administrator will distribute payments only after the court grants final approval and any appeals are resolved. Expect payments approximately 60-90 days after final approval.
What This Settlement Means
The lawsuit alleged that Geisinger failed to ensure its vendors employed reasonable security measures, Nuance failed to monitor systems for intrusions, and both defendants didn’t comply with HIPAA Rules and industry-standard cybersecurity measures.
Both defendants deny wrongdoing but agreed to settle to avoid litigation costs and uncertainty.
This case highlights a critical vulnerability: insider threats. Under HIPAA’s Security Rule, business associates must immediately revoke employee access rights upon termination. The two-day delay between the employee’s termination and the breach represents exactly the type of security gap that regulators and courts scrutinize.
Similar healthcare data breach settlements have resulted in substantial compensation for victims. The AT&T Class Action Lawsuit Sending $7,500 Settlement Checks After Two Massive Data Breaches Exposed 73 Million Customers’ Most Sensitive Info demonstrates how major corporations are being held accountable. The $4M Numotion Data Breach Data Breach Class Action Settlement Claim Up To $15,000 By March 18, 2026 shares the same deadline and shows healthcare providers face serious consequences when patient data isn’t protected.
Frequently Asked Questions
Can I still file a claim if I didn’t experience financial losses?
Yes. You can choose the pro rata cash payment option, which doesn’t require documentation of losses. All class members are also eligible for free credit monitoring regardless of which payment option they choose.
What if I lost my breach notification letter?
Contact the settlement administrator at the address above or visit the settlement website. Your eligibility is based on whether your information was compromised, not whether you kept the letter.
How long will it take to receive my payment?
Payments will be distributed approximately 60-90 days after the court grants final approval on March 16, 2026, assuming no appeals delay the process. Most class members should receive payments by summer 2026.
What happens if I do nothing?
If you don’t file a claim by March 18, 2026, you forfeit your right to compensation but remain bound by the settlement agreement. You also lose your right to sue Geisinger or Nuance separately over this breach.
Can I receive both types of payments?
No. You must choose either documented loss reimbursement or the pro rata cash payment. The settlement administrator will process whichever option provides you the higher amount if you submit documentation but your reimbursement would be less than the pro rata share.
What proof do I need for documented losses?
Bank statements showing fraudulent charges, receipts for credit monitoring services you purchased, invoices from identity theft resolution services, credit reports showing fraud, and correspondence with financial institutions about breach-related issues.
Is my genetic information at risk?
This breach didn’t involve genetic data. For cases involving DNA information, see the 23andMe $50M Class Action Lawsuit Settlement, How To Claim Your Share Before February 17, 2026 Deadline.
Last Updated: January 22, 2026
Disclaimer: This article provides information only and does not constitute legal advice.
Take action now: Don’t let the March 18, 2026 deadline pass. File your claim today at GeisingerDataSettlement.com to secure your compensation.
Stay informed, stay protected. — AllAboutLawyer.com
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah