Healthcare Services Group $3M Data Breach Settlement
Data Breach · Claims Open

Healthcare Services Group Data Breach Settlement — $3 Million Fund, Pro Rata Cash, or Up to $5,000 in Documented Losses

Published August 26, 2026

This settlement resolves claims over the 2024 data incident at Healthcare Services Group, Inc. — the contractor that supplies housekeeping, laundry and dining services to nursing homes and hospitals nationwide. If you were sent a notice, a $3,000,000 fund pays a pro rata cash payment or up to $5,000 in documented losses, and three years of credit monitoring on top.

Housekeeping cart in a care facility corridor — Healthcare Services Group data breach class action settlement

Current Status

Claims are open. The deadline to file is October 1, 2026, whether you submit online or mail a paper form, and a mailed form has to be postmarked by that date. The deadlines to opt out or to object come earlier, on September 4, 2026. The Court has scheduled a Final Fairness Hearing for September 24, 2026 at 10:00 a.m. Eastern Time, and the settlement has not been approved yet. No payment date has been announced. If a notice reached you, keep it — the claim process is built around it.

Status Claims Open final fairness hearing September 24, 2026 · not yet approved
Claim Deadline October 1, 2026 online or postmarked · opting out and objecting close earlier, on September 4
Estimated Payout Pro rata cash, or up to $5,000 $3,000,000 fund · the cash tier has no fixed figure · three years of credit monitoring alongside it
Proof Required Yes Reasonable Documentation for the $5,000 tier · have the notice you were sent in front of you when you file

What Changed Recently?

The settlement is newly open to claims. Healthcare Services Group, Inc. has agreed to pay $3,000,000 into a Settlement Fund to resolve Williamson, et al. v. Healthcare Services Group, Inc., Case No. 2:25-cv-04908-JDW, in the United States District Court for the Eastern District of Pennsylvania. The Court granted preliminary approval, notice has gone out to the class, and the claim portal, the notice and the settlement documents are live on the official settlement website. Kroll Settlement Administration is administering the settlement.

HCSG denies the allegations and has not admitted wrongdoing, and no court has found that it did anything wrong. Settling a case is not the same as losing one; both sides agreed to resolve the litigation rather than carry its costs and risks further.

What the Case Is About

Healthcare Services Group is a Pennsylvania-based contractor that provides housekeeping, laundry, linen and dining and nutrition services to nursing homes, long-term care facilities and hospitals across the country. Companies in that position hold a great deal of personal information about the people who work in those buildings, which is why an incident at a services contractor can reach hundreds of thousands of people who never had a direct relationship with the company's customers.

According to the settlement's published materials, HCSG became aware on or around October 7, 2024 of potential unauthorized access to certain Private Information on its computer systems. Beginning on August 25, 2025, the company started sending notice about the incident to the individuals it identified. Reporting in the healthcare compliance press has put the number of people involved at 624,496.

The lawsuit alleged that HCSG failed to adequately protect that information. Those are allegations. The Court has made no finding that the company did anything wrong, and HCSG denies it.

Who Qualifies?

The Settlement Class is all living persons in the United States who were sent a notice from HCSG regarding potential impact from the Data Incident, or who were otherwise determined to have potentially had their Private Information impacted by it.

Two things about that definition are worth reading closely. The class is nationwide rather than Pennsylvania-only, even though the company and the court are both in Pennsylvania. And it does not turn on having worked for HCSG — it turns on whether your information was caught up in the incident, which is why the notice you were sent is the practical marker of membership.

Excluded are HCSG itself, any entity in which it has a controlling interest, and the company's officers, directors, legal representatives, successors, subsidiaries and assigns.

How Much Can You Get?

The $3,000,000 Settlement Fund pays three kinds of benefit:



The pro rata structure is the part most worth understanding before you file, because it is the reason no dollar figure is attached to the cash tier anywhere in the settlement summaries. A pro rata payment is a share, not an amount: what remains of the $3,000,000 after documented losses, credit monitoring, notice and administration costs, attorneys' fees and any service awards are paid gets divided among everyone who validly claimed cash. The more people who file, the smaller each share. Any specific per-person cash figure quoted elsewhere is an estimate rather than something the documents promise.

That also means the arithmetic runs differently here than on a settlement with a flat cash tier. Someone with genuine, documentable out-of-pocket costs from this incident is likely to do better filing under the documented tier, where the $5,000 ceiling is fixed, than relying on a share of whatever is left.

What Proof or Notice ID Is Required?

For the up-to-$5,000 documented tier, the answer is unambiguous: Reasonable Documentation is required, and it has to connect the loss to this incident. Receipts, bank or card statements showing the fee or the fraudulent charge, invoices for a credit monitoring service you paid for yourself, and records of what you spent replacing identification are the sort of thing that satisfies it. An expense a bank, insurer or employer has already reimbursed cannot be claimed again.

For the pro rata cash payment, no documentation of loss is required. What the published summaries do not spell out is whether the online form also requires the unique identifier printed on the notice HCSG sent you. Administrator-run portals of this kind usually do, and an identifier of that sort counts as proof in its own right for our purposes, because a class member who never received the notice cannot supply it. The practical advice is the same either way: find the notice before you sit down to file. If you cannot locate it, use the contact route on the official settlement website to reach the Claims Administrator, and do it well before October 1 rather than in the last few days.

What Is the Deadline?

Claims must be submitted online no later than October 1, 2026, or mailed so that they are postmarked no later than October 1, 2026. The published materials give the date without specifying a cut-off time or a timezone, so treat the date itself as the deadline and do not leave an online submission to the last hours of it.

The deadline to exclude yourself from the class or to object to the settlement is earlier — September 4, 2026. Those are different decisions from filing a claim. Excluding yourself means giving up any payment here in order to keep the right to sue HCSG separately over this incident. Doing nothing at all means you stay in the class, receive nothing, and are still bound by the release if the settlement is approved.

How Do You Take Action?

File on the official settlement website, Healthcare Services Group Settlement, which is the only court-authorized site for this case. Have the notice you were sent in front of you, decide between the documented tier and the cash payment before you start, and enroll in the credit monitoring in the same sitting rather than coming back to it.

If you are claiming documented losses, upload the supporting records with the form. A documented claim submitted without documentation is the most common reason this kind of claim gets reduced to nothing.

What Happens Next?

The next scheduled milestone is the Final Fairness Hearing on September 24, 2026 at 10:00 a.m. Eastern Time, where the Court will consider whether to grant final approval and rule on the requests for attorneys' fees and any service awards. Hearing dates in class settlements can move without further notice being mailed.

A hearing taking place does not mean approval was granted, and approval does not mean money has been released. No payment date has been announced. We will update this page when the Court rules and again if a distribution date is published.

Sources and Verification



Questions

Can I claim the pro rata cash payment and documented losses together?

The published settlement materials describe the Settlement Fund as providing reimbursement of up to $5,000 of Documented Monetary Loss, Pro Rata Cash Payments, and three years of Credit Monitoring services, and they do not present the cash payment and the documented tier as alternatives to one another the way many data breach settlements do. That wording points toward the two being separate benefits rather than a choice, but the Claim Form is the document that controls, and it is the one place the stacking rule is stated in binding terms. Read the election language on the form itself before you submit, because the choice cannot be undone after the deadline.

Why is the cash payment described as pro rata, and what does that do to the amount?

Pro rata means the cash tier has no fixed dollar figure attached to it. What is left of the $3,000,000 fund after documented losses, credit monitoring, notice and administration costs, attorneys' fees and any service awards are paid is divided among everyone who validly claimed the cash payment. The more people who file, the smaller each share. That is why no dollar estimate for this tier appears in the settlement summaries and why any figure you see quoted elsewhere as a per-person cash amount is a guess rather than something the settlement documents state.

I never got a notice. Can I still be a class member?

Possibly. The Settlement Class is defined as all living persons in the United States who were sent a notice from HCSG about the Data Incident, or who were otherwise determined to have potentially had their Private Information impacted by it. The second half of that definition is what covers someone whose notice went to an old address or was thrown out. As a practical matter, though, the online claim process is built around the notice, so anyone in that position should use the contact route on the official settlement website to reach the Claims Administrator well before the deadline rather than waiting.

Has the settlement been approved, and when would payments go out?

It has not been approved. The Court has set a Final Fairness Hearing for September 24, 2026 at 10:00 a.m. Eastern Time in the Eastern District of Pennsylvania. A hearing being held is not the same as approval being granted, and approval is not the same as payments being released. No payment date has been announced. In settlements of this shape, money moves only after the Court grants final approval and after any appeals are resolved, and there is no way to know in advance whether an appeal will be filed.

What is Healthcare Services Group, and why would it hold my information?

Healthcare Services Group, Inc. is a Pennsylvania-based contractor that provides housekeeping, laundry, linen and dining and nutrition services to nursing homes, long-term care facilities and hospitals across the United States. Most people whose information a company like that holds are its own current and former employees, but the class definition is not limited to employees. It reaches anyone the company determined may have had Private Information involved in the incident, which is why the notice you were sent is the practical marker of membership rather than your job history.



For more class actions keep scrolling below.
Settlement Amount $3,000,000 non-reversionary Settlement Fund
Case Title Williamson, et al. v. Healthcare Services Group, Inc.
Case Number 2:25-cv-04908-JDW
Court U.S. District Court, Eastern District of Pennsylvania
Final Approval Hearing September 24, 2026 at 10:00 AM Eastern date and time may change without further notice
Administrator Kroll Settlement Administration

More Open Data Breach Settlements