People notified that their information was involved in the Healthcare Services Group data breach may qualify to claim a pro rata share of a $3 million fund, or up to $5,000 in documented losses, from the class action settlement. The claim deadline was October 1, 2026, and three years of credit monitoring was offered alongside the cash.
Current Status
The Court granted final approval of the settlement on September 25, 2026, the day after a final approval hearing held in open court on September 24, 2026. The claim deadline was October 1, 2026, for online and mailed claims alike, and the deadlines to opt out or to object passed on September 4, 2026. No payment date had been announced as of October 20, 2026.What Changed Recently?
On September 25, 2026, Judge Joshua D. Wolson granted final approval of the settlement, awarded Class Counsel $1,000,000 in attorneys' fees plus $15,612.23 in litigation costs and expenses from the Settlement Fund, and approved four $2,500 service awards. The claim deadline passed on October 1, 2026.Healthcare Services Group, Inc. agreed to pay $3,000,000 into a Settlement Fund to resolve Williamson, et al. v. Healthcare Services Group, Inc., Case No. 2:25-cv-04908-JDW, in the United States District Court for the Eastern District of Pennsylvania. The Court granted preliminary approval, notice has gone out to the class, and the claim portal, the notice and the settlement documents are live on the official settlement website. Kroll Settlement Administration is administering the settlement.
HCSG denies the allegations and has not admitted wrongdoing, and no court has found that it did anything wrong. Settling a case is not the same as losing one; both sides agreed to resolve the litigation rather than carry its costs and risks further.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What the Case Is About
Healthcare Services Group is a Pennsylvania-based contractor that provides housekeeping, laundry, linen and dining and nutrition services to nursing homes, long-term care facilities and hospitals across the country. Companies in that position hold a great deal of personal information about the people who work in those buildings, which is why an incident at a services contractor can reach hundreds of thousands of people who never had a direct relationship with the company's customers.According to the settlement's published materials, HCSG became aware on or around October 7, 2024 of potential unauthorized access to certain Private Information on its computer systems. Beginning on August 25, 2025, the company started sending notice about the incident to the individuals it identified. Reporting in the healthcare compliance press has put the number of people involved at 624,496.
The lawsuit alleged that HCSG failed to adequately protect that information. Those are allegations. The Court has made no finding that the company did anything wrong, and HCSG denies it.
Who Qualifies?
The Settlement Class is all living persons in the United States who were sent a notice from HCSG regarding potential impact from the Data Incident, or who were otherwise determined to have potentially had their Private Information impacted by it.Two things about that definition are worth reading closely. The class is nationwide rather than Pennsylvania-only, even though the company and the court are both in Pennsylvania. And it does not turn on having worked for HCSG — it turns on whether your information was caught up in the incident, which is why the notice you were sent is the practical marker of membership.
Excluded are HCSG itself, any entity in which it has a controlling interest, and the company's officers, directors, legal representatives, successors, subsidiaries and assigns.
How Much Can You Get?
The $3,000,000 Settlement Fund pays three kinds of benefit:- Reimbursement of up to $5,000 for unreimbursed Documented Monetary Losses reasonably related to the incident. Reasonable Documentation is required. The published materials give out-of-pocket credit monitoring costs, unreimbursed losses from actual fraud or identity theft, and unreimbursed bank fees, long-distance phone charges, postage and mileage as examples of what this covers.
- A Pro Rata Cash Payment, which carries no documentation requirement of its own.
- Three years of credit monitoring services.
The pro rata structure is the part most worth understanding before you file, because it is the reason no dollar figure is attached to the cash tier anywhere in the settlement summaries. A pro rata payment is a share, not an amount: what remains of the $3,000,000 after documented losses, credit monitoring, notice and administration costs, attorneys' fees and any service awards are paid gets divided among everyone who validly claimed cash. The more people who file, the smaller each share. Any specific per-person cash figure quoted elsewhere is an estimate rather than something the documents promise.
That also means the arithmetic runs differently here than on a settlement with a flat cash tier. Someone with genuine, documentable out-of-pocket costs from this incident is likely to do better filing under the documented tier, where the $5,000 ceiling is fixed, than relying on a share of whatever is left.
What Proof or Notice ID Is Required?
For the up-to-$5,000 documented tier, the answer is unambiguous: Reasonable Documentation is required, and it has to connect the loss to this incident. Receipts, bank or card statements showing the fee or the fraudulent charge, invoices for a credit monitoring service you paid for yourself, and records of what you spent replacing identification are the sort of thing that satisfies it. An expense a bank, insurer or employer has already reimbursed cannot be claimed again.For the pro rata cash payment, no documentation of loss is required. What the published summaries do not spell out is whether the online form also requires the unique identifier printed on the notice HCSG sent you. Administrator-run portals of this kind usually do, and an identifier of that sort counts as proof in its own right for our purposes, because a class member who never received the notice cannot supply it. The practical advice is the same either way: find the notice before you sit down to file. If you cannot locate it, use the contact route on the official settlement website to reach the Claims Administrator, and do it well before October 1 rather than in the last few days.
What Is the Deadline?
Claims must be submitted online no later than October 1, 2026, or mailed so that they are postmarked no later than October 1, 2026. The published materials give the date without specifying a cut-off time or a timezone, so treat the date itself as the deadline and do not leave an online submission to the last hours of it.The deadline to exclude yourself from the class or to object to the settlement is earlier — September 4, 2026. Those are different decisions from filing a claim. Excluding yourself means giving up any payment here in order to keep the right to sue HCSG separately over this incident. Doing nothing at all means you stay in the class, receive nothing, and are still bound by the release if the settlement is approved.
How Do You Take Action?
File on the official settlement website, Healthcare Services Group Settlement, which is the only court-authorized site for this case. Have the notice you were sent in front of you, decide between the documented tier and the cash payment before you start, and enroll in the credit monitoring in the same sitting rather than coming back to it.If you are claiming documented losses, upload the supporting records with the form. A documented claim submitted without documentation is the most common reason this kind of claim gets reduced to nothing.
What Happens Next?
The Court held the final approval hearing on September 24, 2026 and entered its Final Approval Order on September 25, 2026, approving the settlement and ruling on the requests for attorneys' fees and service awards.Approval does not mean money has been released. No payment date had been announced as of October 20, 2026. We will update this page if a distribution date is published.
Sources and Verification
- Official settlement website — Healthcare Services Group Settlement, including the court-approved Notice, the FAQ and the Claim Form.
- Shub Johns & Holbrook LLP — announcement of preliminary approval (class counsel).
- CourtListener docket — Williamson v. Healthcare Services Group, Inc., No. 2:25-cv-04908 (E.D. Pa.).
- The HIPAA Journal — reporting on the $3 million settlement and the number of individuals involved.
Questions
Can I claim the pro rata cash payment and documented losses together?
The published settlement materials describe the Settlement Fund as providing reimbursement of up to $5,000 of Documented Monetary Loss, Pro Rata Cash Payments, and three years of Credit Monitoring services, and they do not present the cash payment and the documented tier as alternatives to one another the way many data breach settlements do. That wording points toward the two being separate benefits rather than a choice, but the Claim Form is the document that controls, and it is the one place the stacking rule is stated in binding terms. Read the election language on the form itself before you submit, because the choice cannot be undone after the deadline.
Why is the cash payment described as pro rata, and what does that do to the amount?
Pro rata means the cash tier has no fixed dollar figure attached to it. What is left of the $3,000,000 fund after documented losses, credit monitoring, notice and administration costs, attorneys' fees and any service awards are paid is divided among everyone who validly claimed the cash payment. The more people who file, the smaller each share. That is why no dollar estimate for this tier appears in the settlement summaries and why any figure you see quoted elsewhere as a per-person cash amount is a guess rather than something the settlement documents state.
I never got a notice. Can I still be a class member?
Possibly. The Settlement Class is defined as all living persons in the United States who were sent a notice from HCSG about the Data Incident, or who were otherwise determined to have potentially had their Private Information impacted by it. The second half of that definition is what covers someone whose notice went to an old address or was thrown out. As a practical matter, though, the online claim process is built around the notice, so anyone in that position should use the contact route on the official settlement website to reach the Claims Administrator well before the deadline rather than waiting.
Has the settlement been approved, and when would payments go out?
Yes. The Court held the final approval hearing in open court on September 24, 2026 and entered its Final Approval Order on September 25, 2026. Approval is not the same as payments being released. No payment date had been announced as of October 20, 2026. In settlements of this shape, money moves only after final approval and after any appeals are resolved, and there is no way to know in advance whether an appeal will be filed.
What is Healthcare Services Group, and why would it hold my information?
Healthcare Services Group, Inc. is a Pennsylvania-based contractor that provides housekeeping, laundry, linen and dining and nutrition services to nursing homes, long-term care facilities and hospitals across the United States. Most people whose information a company like that holds are its own current and former employees, but the class definition is not limited to employees. It reaches anyone the company determined may have had Private Information involved in the incident, which is why the notice you were sent is the practical marker of membership rather than your job history.
