Henry Ford Health System Data Security Litigation

A settlement has been reached in a class action lawsuit against Henry Ford Health System (“Henry Ford”) arising out of a targeted cybersecurity attack (the “Data Security Incident”) on Henry Ford’s network and computer systems that potentially resulted in unauthorized access to names, genders, dates of birth, ages, lab results, procedure types, diagnoses, dates of service, telephone numbers, medical record numbers and/or internal tracking numbers (“Personal Information”) of Settlement Class Members. The lawsuit alleges that Henry Ford was responsible for the Data Security Incident because it did not take appropriate care to protect Personal Information from unauthorized disclosure. Henry Ford disagrees with and denies the claims, and the Court has not determined that Henry Ford did anything wrong.

Who is Included? All natural persons who are residents of the United States who were mailed written notification by Henry Ford that their Personal Information was accessed, viewed, and/or obtained by an unauthorized party as a result of the Data Security Incident reported to have occurred on or about March 30, 2023.

What does the Settlement Provide? The Settlement establishes a $700,000.00 Settlement Fund to be used to pay for Credit Monitoring and Insurance Services, reimbursement of Documented Losses, and Cash Fund Payments to valid claimants; costs of Notice and administration; Service Awards to the Class Representatives; and the Attorney Fee Award and Costs. Henry Ford has also agreed to continue or undertake certain information security measures. Claimants may select the following forms of Settlement relief: Credit Monitoring and Insurance Services, AND (a) Documented Loss payments, OR (b) a Cash Fund Payment, as described below:

Credit Monitoring and Insurance Services – two years of Credit Monitoring and Insurance Services; AND

  • Documented Loss Payments – reimbursement for certain Documented Losses, i.e., money spent or lost, that is more likely than not related to the Henry Ford Data Security Incident (up to $2,500 per claimant, though this category may not exceed $25,000 in aggregate), not otherwise reimbursable by insurance; OR
  • Cash Fund Payments – a pro rata cash payment, depending on the number of Settlement Class Members that participate in the Settlement.

How To Get Benefits: You must complete and file a Claim Form online or by mail postmarked by October 28, 2024, including required documentation. You can file your claim online through the claims portal on the “File a Claim” Page of this website. You may also print a copy of the pdf of the Claim Form on the “File a Claim” Page of this website or by calling the toll-free number 866-742-4955, and you then submit the paper Claim Form by mail.

Your Other Options. If you do not want to be legally bound by the Settlement, you must exclude yourself by September 28, 2024. If you do not exclude yourself, you will release any claims you may have against Henry Ford or Released Parties (as defined in the Settlement Agreement) related to the Henry Ford Data Security Incident, as more fully described in the Settlement Agreement, available on the Case Documents Page of this website. If you do not exclude yourself, you may object to the Settlement by September 28, 2024.

The Final Approval Hearing. The Court has scheduled a hearing in this case (In Re Henry Ford Health System Data Security Litigation, Case No. 23-cv-11736 (E.D. Mich.)) for October 29, 2024 at 11:00am, to consider: whether to approve the Settlement, Service Awards, attorneys’ fees and expenses, as well as any objections. You or your attorney may attend and ask to appear at the hearing, but you are not required to do so. The hearing may be held remotely and the date and time are subject to change, so please check the settlement website for those details.

For more information, please review the full Long Form Notice or Settlement Agreement available on this website.