Norton Healthcare $11M Data Breach Class Action Lawsuit Settlement, Claim Eligibility, Deadlines, and How to File
The Norton Healthcare data breach settlement provides an $11 million fund to compensate approximately 2.5 million patients and employees affected by a 2023 ransomware attack. As of February 16, 2026, the deadline to file a claim has passed, and the settlement administrator is currently processing payments for eligible class members who submitted valid forms by the November 2025 cutoff.
Main Answer: The Norton Healthcare $11M Settlement Breakdown
This settlement resolves a class-action lawsuit, Berthold v. Norton Healthcare, which alleged the Kentucky-based health system failed to adequately protect sensitive patient and employee data from a cyberattack in May 2023.
What is the Norton Healthcare Settlement?
The settlement stems from a ransomware attack where unauthorized individuals gained access to Norton Healthcare network storage devices between May 7 and May 9, 2023. The compromised information included Social Security numbers, medical identification numbers, birth dates, and financial account information. Norton Healthcare denies any wrongdoing but agreed to the $11 million settlement to avoid the costs of continued litigation.
Who is Eligible for a Payout?
You are considered a “Class Member” if you were among the approximately 2.5 million people who received a data breach notification letter from Norton Healthcare. Eligibility generally includes:
- Nationwide Class: Any person in the United States whose PII (Personally Identifiable Information) or PHI (Protected Health Information) was accessed.
- Kentucky Subclass: Residents of Kentucky whose information was compromised, often eligible for additional protections under state consumer laws.
Compensation and Payout Amounts
The $11 million fund is designed to cover several types of claims:
- Ordinary Out-of-Pocket Expenses: Reimbursement for documented losses like bank fees, communication costs, and credit monitoring expenses.
- Extraordinary Losses: Compensation for documented identity theft or fraud directly linked to the breach, often capped at higher amounts (typically up to $2,500 in similar data breach settlements).
- Pro Rata Cash Payments: A baseline cash payment for all class members who submitted a claim, the amount of which depends on the total number of valid claims filed.
Current Settlement Status (February 2026)
Following the final approval hearing in late 2025, the settlement is now in the distribution phase.
- Claim Deadline: The deadline to submit a claim was November 13, 2024 (with some exceptions for paper forms processed through late 2024).
- Payment Timeline: Eligible claimants who successfully verified their identity and harm are beginning to receive payments via check or digital deposit in the first quarter of 2026.
What You Must Know
Common Filing Mistakes
Many claimants face delays or rejections due to procedural errors. The most common issues include:
- Inadequate Documentation: For “Extraordinary Loss” claims, failing to provide police reports or bank statements linking the fraud to the 2023 breach.
- Mismatched Information: Using a different name or address than the one on file with Norton Healthcare during the May 2023 incident.
The Statute of Limitations Risk
Most sites won’t tell you this, but once a class-action settlement is approved and the “opt-out” deadline passes (which occurred in late 2024 for this case), you lose your right to sue Norton Healthcare individually for any damages related to this specific breach. If you did not file a claim by the deadline, you are likely barred from receiving any portion of the $11 million fund.
Verification Standards
Under Federal Rule of Civil Procedure 23, the court must ensure the settlement is fair. This means the administrator must strictly verify “Proof of Membership.” If you lost your original notice letter, you may have used the official settlement portal to look up your unique ID using your Social Security number or email.
What to Do Next
Check Your Claim Status
If you filed a claim before the 2024 deadline, you should monitor the official settlement website for updates.
- Status Portal: Log in using your Claim ID to see if your payment has been “Approved” or “Issued.”
- Address Updates: If you have moved since filing your claim, contact the Settlement Administrator immediately to ensure your check reaches the correct location.
Official Resources
For the most accurate and up-to-date information, rely only on these official sources:
- Official Settlement Website: nortondataincidentsettlement.com
- Settlement Administrator: Reach out via the contact form on the official site for questions regarding missing payments.
- Court Documents: View the Long-Form Notice or the Settlement Agreement for the exact legal language governing the $11M fund.
FAQs
Am I eligible for the Norton Healthcare settlement?
You are eligible if you received a notice stating your data was exposed in the May 2023 ransomware attack and you submitted a claim form by the November 2024 deadline.
What was the deadline to file a claim?
The primary deadline for the Norton Healthcare settlement was November 13, 2024. New claims are generally no longer accepted in early 2026.
How much compensation will I receive?
Payouts vary. While some may receive a flat pro rata cash payment (estimated between $50–$100), those with documented fraud losses may receive significantly more, depending on the evidence provided.
When will I receive my Norton settlement check?
Distribution began in early 2026. If your claim was approved, you should expect your payment during the first half of this year.
What documents did I need to submit?
For basic cash payments, no documentation was required beyond the claim form. For expense reimbursement, claimants had to provide bank statements, receipts, or police reports.
Is this related to the Norton LifeLock breach?
No. This settlement is specifically for Norton Healthcare, the Kentucky-based hospital system, and is unrelated to the separate credential-stuffing attack on Norton LifeLock (Gen Digital) customers.
Last Updated: January 20, 2026
This article is informational only and does not constitute legal advice.
Stay informed, stay protected. — AllAboutLawyer.com
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah