People who used Health First’s website, hf.org, may be covered by a proposed class action alleging the Brevard County, Florida health system let Google tracking tools collect their health searches, appointment details and insurance questions. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes a class action complaint. The statements below are unproven allegations. Health First, Inc. has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
Four people who used Health First’s website filed a proposed class action against Health First, Inc. on October 6, 2026 in the U.S. District Court for the Middle District of Florida. The case is B.B. v. Health First, Inc., No. 6:26-cv-02323. The plaintiffs are identified only by their initials.Health First is a nonprofit health system based in Brevard County, Florida, with about 51 locations including hospitals and urgent care centers, according to the complaint. It also sells health insurance, including Medicare Advantage and individual and family plans. The complaint alleges that Google tracking tools embedded on its website, hf.org, intercepted what visitors did on the site and sent it to Google, including details about their medical care and insurance, without their consent.
The case is at the complaint stage. Health First has not responded on the docket, no class has been certified, and there is no settlement, fund or claim form.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What the Complaint Alleges
According to the complaint, Health First installed Google tracking tools, including tracking pixels and cookies, on hf.org so it could use Google’s marketing and analytics services, such as Google Analytics. It says the tools sent Google a record of what visitors did on the site, tied to an identifier Google uses to recognize the same person across devices.The complaint lists the kinds of information it says were sent: that a visitor was a patient, the conditions and treatments they looked up, the specialists, diagnostic tests and locations they searched for, that they scheduled an appointment and what kind, that they requested records or placed a call through the site, and the full text of what they typed into the site’s search bar. It also says searches about Health First’s insurance plans were shared, including plan types, prescription drug coverage and mental health and substance use benefits.
Three of the plaintiffs say they began seeing targeted online advertising related to their medical care after using the site, and the complaint argues Health First configured the tools in a way that let Google use the information for advertising. It characterizes the alleged disclosures as violations of HIPAA, the federal health privacy law. HIPAA itself does not let individuals sue, so the complaint relies on it to support the other claims rather than as a claim of its own. None of these allegations has been tested in court, and Health First has not yet responded.
Who Is in the Proposed Class?
The complaint proposes a nationwide class of all people living in the United States who used the Health First website and whose health information was disclosed or transmitted to Google or another unauthorized third party. It also proposes a Florida subclass made up of Florida residents who meet the same description. Claims for personal injury, wrongful death or property damage, and the judges handling the case and their families, are excluded.The complaint does not set a start date for the class. It says the exact number of people affected can be determined through discovery. The definitions can change as the case proceeds, and they exist only as proposals until a court certifies a class.
The Laws the Case Relies On
The main federal claim is under the Electronic Communications Privacy Act, often called the federal Wiretap Act. The Act generally allows a communication to be recorded when one party to it consents, but not when the interception is for the purpose of committing a criminal or tortious act. The complaint argues that exception applies here because the alleged disclosures violated HIPAA and state law. The Act provides statutory damages of the greater of $100 a day or $10,000.The Florida Security of Communications Act is the state’s wiretap law. It provides liquidated damages of the greater of $100 a day or $1,000, along with punitive damages and fees. The complaint also brings common-law claims for invasion of privacy, negligence, breach of implied contract and, in the alternative, unjust enrichment on behalf of the Florida subclass.
What Happens Next
A summons was issued to Health First on October 7, 2026. Once served, Health First will have to respond to the complaint, typically by answering it or moving to dismiss. The complaint asks the court to certify the class, order Health First to stop the alleged disclosures, and award damages, interest and attorneys’ fees, and it demands a jury trial. It was filed by Almeida Law Group LLC.There is nothing for website users to file. Money would become available only if the case produces a settlement or a judgment for a certified class, which would come with a court-approved notice and its own claim process.
Questions
Is the Health First lawsuit about a data breach?
No. The complaint does not describe a hack or a stolen database. It alleges that tracking code Health First itself placed on its public website sent information about visitors’ activity to Google as they used the site. Health First has not announced a data breach connected to these claims.
Does the Health First case cover website visitors who live outside Florida?
The complaint proposes a nationwide class of U.S. residents who used hf.org and whose health information was allegedly sent to Google or another third party, plus a Florida subclass. The federal Wiretap Act claim is brought for the nationwide class; the Florida law, invasion of privacy, negligence, implied contract and unjust enrichment claims are brought for the Florida subclass. No class has been certified.
What information does the complaint say Health First’s website shared?
According to the complaint, the information included that a visitor was a patient, the conditions and treatments they looked up, the specialists, tests and locations they searched for, appointment scheduling and appointment types, records requests, calls placed through the site, the full text of site searches, and searches about health insurance plans and benefits. These are allegations Health First has not yet answered.
What damages does the Health First complaint seek?
The complaint seeks statutory damages under the federal Wiretap Act, which provides the greater of $100 a day or $10,000, and liquidated damages under the Florida Security of Communications Act, along with actual, punitive and nominal damages, an order stopping the alleged disclosures, and attorneys’ fees. Any amount would depend on how the court rules; nothing has been awarded.
Can Health First website users file a claim?
There is nothing to file. The case is at the complaint stage, no class has been certified, and there is no settlement, fund or claim form. If the case later produces a settlement or judgment, class members would receive a court-approved notice explaining any claim process.
Sources
- CourtListener docket — B.B. v. Health First, Inc., No. 6:26-cv-02323 (M.D. Fla.)
- Class action complaint — filed October 6, 2026 (80 pages)
