Norton Healthcare Data Breach Settlement, $11M, Eligibility & How to File
A class action settlement against Norton Healthcare, Inc. and Norton Hospitals, Inc. valued at $11 million received preliminary court approval on January 13, 2026, resolving allegations the company failed to adequately protect the personal information of approximately 2.5 million current and former patients and employees in a May 2023 data breach. The claim deadline is May 18, 2026. Current and former patients and employees who received a notification letter from Norton Healthcare about the breach may be eligible to file a claim for cash compensation, expense reimbursement, and medical identity monitoring.
Quick Facts
- Lawsuit type: Data breach class action
- Defendant: Norton Healthcare, Inc. and Norton Hospitals, Inc.
- Current status: Preliminary settlement approval granted January 13, 2026; final approval hearing May 15, 2026
- Who may be affected: Current and former patients and employees who received a letter from Norton Healthcare stating their personal information may have been exposed in the May 2023 data incident
- Settlement amount: $11,000,000
- Claim deadline: May 18, 2026
- Official settlement website: nortondataincidentsettlement.com
- Administrator: Kroll Settlement Administration
Settlement Details
Norton Healthcare and Norton Hospitals agreed to a total settlement fund of $11,000,000. The settlement provides three separate forms of compensation to eligible class members.
Out-of-pocket loss reimbursement: Class members who submit documented proof of unreimbursed expenses can claim up to $2,500. Covered losses include credit report and monitoring fees, identity theft insurance costs, bank fees related to fraud, and similar expenses incurred between May 9, 2023 and May 18, 2026. Claims require supporting documentation such as bank statements, receipts, or invoices.
Lost time compensation: Class members can claim $20 per hour for up to four hours (maximum $80) for time spent dealing with the breach. Covered activities include acquiring credit freezes, remedying actual fraud, monitoring financial statements, and changing passwords.
Pro rata cash payment: All eligible class members — regardless of whether they file for expense reimbursement or lost time — can submit a claim for a cash payment of at least $5 from the remaining settlement fund. The final amount depends on total claims filed and funds remaining after other expenses are paid.
Medical identity monitoring: Class members can also submit a claim for three years of complimentary CyEx Medical Shield Pro medical identity monitoring services at no cost.
Class counsel is eligible to receive up to one-third of the settlement fund, approximately $3.6 million, in attorney’s fees, subject to court approval.
How to File a Claim
Class members can submit a claim form online at nortondataincidentsettlement.com or mail a paper claim form to the settlement administrator. Online filers need their Class Member ID, which appeared on the notification letter. Paper claim forms can be requested by calling the settlement administrator at (833) 319-9294. All claims must be submitted online or postmarked by May 18, 2026.
Mail claims to: Berthold v. Norton Healthcare c/o Kroll Settlement Administration P.O. Box 5324 New York, NY 10150-5324
Current Status
The Jefferson Circuit Court, Division Two in Louisville, Kentucky granted preliminary approval to the settlement on January 13, 2026. The court has scheduled a Final Approval Hearing for May 15, 2026 at 10:00 a.m. ET at the Jefferson Circuit Court, 700 W. Jefferson Street, Louisville, Kentucky 40202.
Class members who wish to opt out of the settlement must mail their opt-out request postmarked no later than April 20, 2026. Opting out preserves the right to file a separate lawsuit but forfeits any settlement benefits. Class members who wish to object to the settlement must also do so by April 20, 2026. Settlement payments will be distributed after final approval and the resolution of any appeals. The settlement administrator estimates payments will be issued approximately 76 days after the court grants final approval.
What the Lawsuit Alleges
The class action, Abby Berthold, et al. v. Norton Healthcare, Inc., et al., Case No. 23-CI-003349, alleges that Norton Healthcare and Norton Hospitals failed to implement and maintain adequate security measures to protect the sensitive personal and health information stored on their systems.
On or around May 9, 2023, Norton Healthcare discovered that threat actors gained unauthorized access to its network storage devices. The ransomware group Alphv/BlackCat claimed responsibility and allegedly exfiltrated approximately 4.7 terabytes of data. The breach affected approximately 2,487,683 current and former patients and employees.
The complaint alleges the compromised data included names, addresses, dates of birth, Social Security numbers, marital status, employer information, insurance policy information, driver’s license or state ID numbers, medical history and diagnoses, banking and credit card information, and other sensitive data. Plaintiffs alleged causes of action including negligence, breach of implied contract, unjust enrichment, and invasion of privacy. Norton Healthcare denies all allegations of wrongdoing but agreed to settle to avoid the costs and uncertainty of continued litigation.
Who Could Be Included
The settlement class covers all individuals who received a letter from Norton Healthcare, Inc. or Norton Hospitals, Inc. notifying them that their personal information may have been compromised in the data incident occurring on or around May 9, 2023. Court documents estimate approximately 2,487,683 current and former patients and employees fall within the class definition.
Eligible class members are primarily current and former patients and employees of Norton Healthcare’s network, which operates nine hospitals and approximately 480 other care facilities in Kentucky and Indiana. If you are uncertain whether you received a notification letter or whether you qualify, the official settlement website provides eligibility information and FAQs, or you can contact Kroll Settlement Administration directly at (833) 319-9294.
FAQs
Is this a class action lawsuit?
Yes. Berthold v. Norton Healthcare, Inc., et al., Case No. 23-CI-003349, is a class action filed in Jefferson Circuit Court, Division Two, in Louisville, Kentucky, on behalf of approximately 2.5 million current and former patients and employees affected by the May 2023 data breach.
Has a settlement been approved?
The court granted preliminary approval on January 13, 2026. The Final Approval Hearing is scheduled for May 15, 2026. The settlement is not yet final; final approval and any appeals must be resolved before payments are issued.
Who may be eligible to file a claim?
Current and former Norton Healthcare patients and employees who received a letter notifying them that their personal information may have been compromised in the May 9, 2023 data incident are eligible to submit a claim.
Is there a claim form, and where do I file it?
Yes. Class members can submit a claim form online at nortondataincidentsettlement.com or mail a paper form to Kroll Settlement Administration. The deadline to file is May 18, 2026.
Where is the official settlement website?
The court-authorized official settlement website is nortondataincidentsettlement.com, administered by Kroll Settlement Administration. This is the only official website for this settlement.
What happens if I do nothing?
If you take no action, you will not receive any settlement benefits and you will give up your right to sue Norton Healthcare separately over claims resolved by this settlement.
Last Updated: February 28, 2026
This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah