Sutter Health Class Action Lawsuit
Sutter Health privacy settlement: $21.5 million resolved a lawsuit's claims that its MyHealthOnline login page shared patient data with third parties such as Meta and Google.
What happens next with the Sutter Health settlement
The claim deadline passed on April 24, 2026. New claims for this settlement are no longer being accepted.
Payments come after approval, and after any appeals. Anyone who objected to the settlement can ask a higher court to look at it again — an appeal — and that has to finish first. Eligible payments are sent once approval is final, and the stretch from a claim deadline to money in hand often runs a year or more. It varies from one settlement to the next.
Filed this claim with Chimo? The status of your claim is on the claims page in your account.
Settlements you can still claim in November 2026
Neutrogena (Illinois Only)
$731
Simplilearn
$120
CVS
$10
Sutter Health Class Action Lawsuit
Two Sutter Health patients, suing as Jane Doe I and Jane Doe II, sued Sutter Health in the Superior Court of California for Sacramento County on June 10, 2019, saying that data collected through its MyHealthOnline portal login page was improperly shared. The case—Jane Doe I and Jane Doe II, et al. v. Sutter Health, Case No. 34-2019-00258072-CU-BT-GDS—claims that Sutter’s use of third-party tracking technologies disclosed patients’ personally identifiable information and protected health information without consent. These Sutter Health Privacy lawsuit details center on alleged transmissions of sensitive data to companies such as Meta and Google. Sutter Health denies the claims and says it did nothing wrong, and the court did not decide who was right. The plaintiffs used pseudonyms because the case involves sensitive health information; the court allowed them to proceed under pseudonyms to protect their privacy throughout the litigation.
The lawsuit proceeded through multiple amended complaints, extensive motion practice, and two mediation sessions, in June and September 2024, before the parties accepted a mediator's proposal to settle in September 2024. Class counsel includes attorneys from Kiesel Law LLP and Simmons Hanly Conroy LLP, with the settlement overseen by Judge Lauri A. Damrell in the Superior Court of California for Sacramento County. The operative complaint alleged violations of the California Invasion of Privacy Act and breach of express and implied contract.
Eligible claimants were California residents who logged into their own MyHealthOnline portal account for their own healthcare between June 10, 2015, and March 20, 2020, making them part of the group affected by the alleged Sutter Health Privacy legal claims.
Sutter Health Class Action Settlement - $21,500,000
The settlement agreement sets a $21.5 million settlement fund, an amount reached after two mediation sessions with retired Judge Gail Andler of JAMS, who recommended that figure, and a review of the risks, costs, and potential damages tied to the alleged data disclosures. Inputs that shaped the Sutter Health Privacy lawsuit settlement amount included the size of the class (about 1,628,160 portal users), projected claim rates, and the plaintiffs' expert damage model. The settlement avoids the uncertainty of continued litigation.
The agreement covers California residents who logged into their own MyHealthOnline portal for their own healthcare between June 10, 2015, and March 20, 2020. Each eligible claimant could receive up to $90, depending on the number of valid claims submitted. Sutter Health agreed to fully fund the settlement and to offer electronic payment options like PayPal, Venmo, and Zelle, with a court-supervised claims process.
To meet Sutter Health Privacy settlement eligibility, users had to have logged in during the covered period and to have filed a valid claim by April 28, 2026. New claims can no longer be filed.
Claims closed: April 24, 2026
Sutter Health MyHealthOnline Class Action Payout: Up to $90
The settlement capped each payment at $90. Each approved claim was eligible for a pro rata, meaning equal, share of the net settlement fund, with final amounts determined by how many valid claims were submitted from the roughly 1,628,160 class members. The notice gave no minimum. According to the preliminary approval order, the plaintiffs expected 5% to 10% of the class to claim, and if 9.37% claimed, each share would be about $90, with any higher claim rate lowering every share.
Any leftover funds go to Privacy Rights Clearinghouse and the AHIMA Foundation, split evenly. Privacy Rights Clearinghouse must use its share only for California statewide data privacy advocacy, and the AHIMA Foundation only for its work promoting digital health literacy.
The $21.5 million fund also paid for notice and administration (estimated at $385,000 to $445,000), attorneys' fees (class counsel could request up to $7,095,000), expenses (estimated at $208,990.21), and service awards of up to $10,000 for each class representative. No proof of damages was required—claimants attested that they logged into their own MyHealthOnline account for their own healthcare during the covered period.
Under the settlement agreement, payments to eligible claimants are due 120 days after the final judgment, once any appeals are resolved. The final approval hearing was scheduled for February 27, 2026.
Payments were to be made by check unless the claimant chose PayPal, Venmo, or Zelle, and checks become void 180 days after they are issued.
Sutter Health MyHealthOnline Class Action Eligibility
To confirm eligibility for the Sutter Health Privacy class action, the claim form asked whether you were a California resident and personally logged into your own MyHealthOnline portal for your own healthcare between June 10, 2015, and March 20, 2020. About 1.6 million people were identified as potential class members based on Sutter’s internal login records. These questions helped confirm that claimants matched the group identified in those records.
Claimants confirmed that they logged into their own MyHealthOnline account, not someone else’s, that the login was for their own healthcare, and they provided their contact information and the Unique Claim ID from the notice.
Eligibility depended on this attestation because, according to Sutter, its log files could not show whether a patient or another person logged in, or why. The attestation kept eligibility limited to claimants who met the class definition.
FAQ
The Unique ID was printed on the notice each class member received by postcard or email. Claimants who could not find it could call the administrator at its toll-free number, 1-888-835-0109. Once they had the ID, they entered it when prompted by Chimo.
The settlement relied on Sutter’s internal login records to identify the roughly 1,628,160 class members, and each was sent a notice with a Unique ID. The claim form required that ID, which tied each claim to a person on the class list, and each class member could submit a single claim form.
Court filings show Sutter’s log files could not show whether a login was done by the patient or by someone else, nor the reason for the login. The attestation kept eligibility limited to individuals who met the exact class definition.
They had to have been a California resident who personally logged into their MyHealthOnline portal for their own healthcare between June 10, 2015, and March 20, 2020.
Eligible claimants could receive a pro rata share of the net fund, capped at $90, depending on how many people filed claims and the net funds remaining after court-approved fees.
According to the preliminary approval order, the $90 cap was the subject of extensive negotiation and was chosen to avoid a windfall to any one class member. Sutter argued the cap sits near the upper end of the range of contract damages calculated by the plaintiffs' expert.
The preliminary approval order puts the class at approximately 1,628,160 people.
The plaintiffs expected 5% to 10% of the class to file claims. According to the order, if 9.37% filed, each pro rata share would come to about the $90 cap.
The lawsuit alleges Sutter’s website used the Meta pixel, Google Analytics, and similar tools on certain pages, including the MyHealthOnline login page, which shared information with third parties. The notice says there was no allegation of tracking from inside the portal itself.