A federal court in Pennsylvania has given preliminary approval to a $3,000,000 settlement resolving a class action tied to a 2024 cyberattack on Healthcare Services Group, Inc., a company that supplies housekeeping, laundry, dining and nutrition staff to nursing homes and senior-living communities nationwide. The deal compensates people whose personal information the company determined was exposed in the intrusion, offering either reimbursement for documented losses or a share of the settlement fund, plus three years of credit monitoring. Claims must be filed by October 1, 2026, and the case still needs a federal judge’s final sign-off before any benefits go out.
A $3 Million Fund Tied to HCSG’s September 2024 Network Breach
According to the settlement notice, HCSG’s network was first compromised on or around September 27, 2024, with suspicious activity discovered roughly ten days later, on October 7. HCSG is a Bensalem, Pennsylvania-based company that supplies environmental, dietary and nutrition staff to more than 3,000 healthcare facilities across 48 states, and the intrusion is reported to have affected the protected information of roughly 624,500 people. A review of the incident found that the exposed data included names, Social Security numbers, driver’s license or state identification numbers, financial account details, login credentials, and medical or health insurance information.
HCSG has denied any wrongdoing, but notification letters to affected individuals began going out in August 2025, and the first lawsuit followed within days; multiple suits were later consolidated into a single case, Williamson, et al. v. Healthcare Services Group, Inc., in the U.S. District Court for the Eastern District of Pennsylvania. Under the proposed deal, HCSG would pay $3,000,000 into a settlement fund covering claims administration costs, court-approved attorneys’ fees, service awards, and the benefits paid to class members, according to the court-authorized settlement website. A federal judge in Philadelphia has not yet granted final approval.
Free retirement updates: A quiet rule change can shrink your Social Security or Medicare check, and no one warns you. The free Retirement Shield newsletter catches these early and tells you what to do. Get it free.
Frontline Workers at HCSG-Staffed Facilities Make Up the Settlement Class
The settlement class includes every living person in the United States who received a notice from HCSG about the incident, or whom the company otherwise determined to have had private information potentially exposed. Because HCSG’s business, built over roughly 50 years, is supplying environmental, dietary and nutrition staff to nursing homes, assisted-living communities and hospitals, according to the company’s own site, the exposed records are concentrated among frontline healthcare-facility employees rather than the residents those employees serve.
That distinction matters for anyone who worked in housekeeping, laundry, dietary or nutrition roles at a facility HCSG staffed around the time of the breach, including retirees who held those jobs before leaving the workforce. Receiving a notice from HCSG, or confirming inclusion through the settlement administrator, is what determines eligibility, not where a person lives today.
Six Legal Claims HCSG Settled Without Admitting Wrongdoing
The consolidated complaint accused HCSG of negligence, breach of implied contract, breach of fiduciary duty, unjust enrichment, and violations of state consumer-protection laws in New Jersey and Washington, along with claims for declaratory and injunctive relief. HCSG disputes every count and admits no liability, but both sides concluded that further litigation would likely be expensive and drawn out, and that settling avoided the uncertainty of a trial, according to a summary of the case published after the deal was reached.
Up to $5,000 for Documented Losses, or a Pro Rata Share of What’s Left
Class members can request reimbursement of up to $5,000 for documented, unreimbursed monetary losses tied to the breach, submitted with supporting records. Separately, the settlement also allows for a pro rata cash payment, funded from whatever remains in the $3,000,000 pool after documented-loss payments, credit monitoring costs, attorneys’ fees, service awards and administrative expenses are covered. Because that remainder is split among however many valid claims are filed, the settlement’s own FAQ page does not state a fixed pro rata amount, and none can be promised in advance.
Every class member who submits a timely, valid claim is also eligible for three years of single-bureau credit monitoring, which the settlement pairs with identity theft insurance and identity theft recovery services. The settlement website states plainly that filing a claim form is the only way to receive any benefit from the case — there is no automatic payment for simply having received a breach notice.
October 1 Claim Deadline Arrives Before the September 24 Fairness Hearing
The claims deadline is October 1, 2026, whether a class member files online or mails a paper claim form postmarked by that date. Two earlier deadlines have already closed: the window to opt out of the settlement and the window to object to it both ran through September 4, 2026, so those choices are no longer available to class members who did not act by then.
A Final Fairness Hearing is scheduled for September 24, 2026, at 10 a.m. Eastern, before the judge overseeing the case in the Eastern District of Pennsylvania, though the settlement administrator notes the date could still move. Case documents, including the full settlement agreement and claim form, are posted on the administrator’s documents page. The site, run by Kroll Settlement Administration LLC, states it is the only website authorized by the court to accept claims in the case, a detail worth noting given how often breach-settlement claim periods attract copycat sites promising the same money.
This article was produced with the assistance of AI and reviewed by The Financial Wire editorial team.
More Financial Reading
- How many CDs can you park at 1 bank? FDIC rules you must know
- The ideal retirement withdrawal rate so your savings actually last
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
