Wellstar Health System has agreed to establish a $4.25 million fund to settle a proposed class-action lawsuit alleging that online tracking tools disclosed patients’ personal and health-related information to companies including Meta and Google.

The settlement covers approximately 870,000 people. On July 28, 2026, US District Judge J.P. Boulee granted preliminary approval, allowing the notification and claims process to move forward. The agreement is not an admission that Wellstar violated privacy laws, and the court has not made a final finding of wrongdoing.

Wellstar Lawsuit

Why Was Wellstar Sued?

Four anonymous plaintiffs filed the case in April 2024 in the US District Court for the Northern District of Georgia. The lawsuit is titled Doe v. Wellstar Health System, Inc., with case number 1:24-cv-01748.

The plaintiffs said they used Wellstar’s public website and its MyChart patient portal to obtain healthcare services, schedule appointments, review records and communicate about medical matters.

According to the complaint, Wellstar placed tracking technologies operated by Meta and Google on those online services. The plaintiffs alleged that these tools collected information about patients’ activities and transmitted it to outside companies without adequate knowledge or consent.

What Information Was Allegedly Shared?

The lawsuit alleged that tracking tools could collect technical identifiers such as IP addresses, device identifiers, Facebook IDs, cookies and account information.

The plaintiffs also claimed the technologies could reveal more detailed information, including pages viewed, buttons clicked, medical search terms, appointment activity and information entered into registration or appointment forms.

They alleged that the data could show when someone logged into MyChart, searched for a particular condition, viewed test results, requested a referral or scheduled an appointment. According to the complaint, Meta and Google could use some of this information to support advertising and online analytics.

These remain allegations. The settlement does not establish that every class member had the same information disclosed or that third parties used the information to identify a particular medical condition.

What Legal Claims Survived?

The plaintiffs originally brought several claims, including invasion of privacy, negligence, breach of fiduciary duty, breach of contract, unjust enrichment and violation of the Electronic Communications Privacy Act, also known as the federal Wiretap Act.

In August 2025, Judge Boulee dismissed most of the claims. The court found, among other things, that the plaintiffs had not adequately alleged certain forms of legally recognised damage under Georgia law.

However, the judge allowed the unjust-enrichment and Electronic Communications Privacy Act claims to continue. The ruling did not decide that Wellstar was liable. It only concluded that those allegations were legally sufficient to proceed beyond the dismissal stage.

How Was the Settlement Reached?

The parties participated in a day-long mediation on June 17, 2026. They reached an initial agreement and later negotiated the final proposed settlement amount of $4.25 million.

The fund will cover payments to eligible class members as well as court-approved legal fees, settlement administration costs and other authorised expenses.

No guaranteed payment amount has been announced for each patient. The final amount will depend on the number of valid claims and the deductions approved by the court. Dividing the entire fund equally among approximately 870,000 people would produce less than $5 per person, but actual payments cannot be calculated that way because not everyone will necessarily file a valid claim and settlement expenses must first be deducted.

Who May Be Included in the Settlement?

The proposed class generally covers people in the United States whose personal or health-related information was allegedly disclosed through Wellstar’s online properties during the period from February 19, 2020, through July 22, 2026.

Eligible individuals are expected to receive notice through email or regular mail. The settlement administrator will also establish a website, telephone number and postal address for claims and questions.

Class members will have 75 days from the beginning of the official notice process to submit a claim. People should wait for the court-approved notice before relying on unofficial websites or messages requesting personal or financial information.

How Has Wellstar Responded?

Wellstar denies wrongdoing. The health system said it agreed to resolve the matter because of the uncertainty and expense involved in continuing the litigation.

The company also stated that it remains committed to protecting patient privacy and maintaining patients’ trust. Meta and Google are not defendants in this particular settlement, and the agreement does not require either company to compensate Wellstar patients.

What Happens Next?

Preliminary approval does not make the settlement final. Class members must receive notice and be given opportunities to file claims, object to the agreement or exclude themselves.

The judge will later hold a final approval hearing to decide whether the settlement is fair, reasonable and adequate. Payments can begin only after final approval and the resolution of any appeals.

For now, affected Wellstar patients do not need to prove that they suffered identity theft or financial loss. They should monitor the official notice process and submit the required claim form before the deadline if they meet the final eligibility conditions.

One thought on “Wellstar Lawsuit: What the $4.25 Million Patient Privacy Settlement Means”

Leave a Reply

Your email address will not be published. Required fields are marked *