Geisinger Health and Nuance Data Breach Class Action – Preliminary Approval of $5 million Settlement Granted

Parties in the Geisinger Health (“Geisinger”) and Nuance Communications, Inc. (“Nuance”) data breach case have reached a settlement in the cybersecurity class action. The Court has approved Plaintiff’s motion for preliminary approval of the $5 million settlement, allowing impacted patients to file a claim through mid-March 2026.

The case is captioned In re: Geisinger Health Data Security Incident Litigation, Case No. 4:24-cv-01071. This case was filed in the United States District Court for the Middle District of Pennsylvania. The Data Breach Settlement website is currently unavailable. Class Members can start to expect more information about the settlement in December 2025.

Data Breach at Geisinger Health & Nuance Communications

On or around November 29, 2023, Geisinger Health, a central Pennsylvania-based health organization serving over a million persons across urban and rural communities, discovered that an unauthorized actor had gained access to Geisinger patient information. The unauthorized party responsible for the breach – a former employee of a Geisinger vendor, Nuance – is now facing federal criminal charges.

Following the breach Geisinger engaged in an investigation to determine what information had been exposed in the data breach. The company discovered that approximately 1.2 million former and current patients were impacted by the breach, with the unauthorized party gaining access to sensitive information such as patients’:

  • full names
  • dates of birth
  • Social Security numbers
  • health insurance information
  • medical information

Preliminary Approval of the Geisinger and Nuance Settlement

On June 28, 2024, Shub Johns & Holbrook LLP filed a putative class action lawsuit against Geisinger and Nuance in federal court in Williamsport on behalf of persons impacted by the data breach. Judge Matthew W. Brann, the Chief Judge of the Middle District of Pennsylvania, issued an order in July of 2024 that consolidated multiple related cases concerning the breach that had been filed, and appointed SJH partner Ben Johns as interim-co lead counsel for the Plaintiffs.

The parties then participated in a mediation with Hon. Diane M. Welsh (Ret.) on June 30, 2025, and reached an agreement to settle the case for a $5 million non-reversionary common fund. Under the terms of the settlement, participating Class Members will have the option to select one of two payment options: (1) reimbursement of actual out of pocket losses that are more likely than not attributable to the Data Incident, up to $5,000 per Claimant or (2) an Alternative Cash Payment distributed on a pro rata basis. In addition to these monetary benefits, all Settlement Class Members may also elect to receive a code to enroll in one year of Credit/Medical Monitoring and Identity Theft Protection Services.

On November 18, 2025, the Pennsylvania Court granted preliminary approval of the $5 million class action settlement for the affected class. Individuals impacted by the breach will soon be notified and then have the chance to submit a claim through the claims deadline on March 18, 2026 for participation in the class action settlement. The Court has scheduled a final approval hearing for March 16, 2026. Additional details regarding the Proposed Settlement are still to come.

The case is captioned In re: Geisinger Health Data Security Incident Litigation,No. 4:24-cv-1071. You can read the Preliminary Approval Order here.

Share this
Send this to a friend