Case Overview | Vertical: Privacy, Data & TCPA | Article Type: Roundup | Published: March 2026

Healthcare Data Breaches and TCPA Violations: 3 Class Action Settlements to Know This Spring

Three class action settlements involving healthcare data breaches and unwanted text messages have recently cleared key legal hurdles, with compensation potentially available to affected individuals. From orthopedic patients in New York to eye care patients in Florida to consumers who received unsolicited texts from a precious metals company, these cases reflect the continued wave of privacy and consumer protection litigation working its way through federal courts.

Here's what you need to know about each settlement, including who may qualify and how to file a claim.

1. Excelsior Orthopaedics & Buffalo Surgery Center Data Breach

Settlement Amount: $2.4 million

Who May Qualify: Patients whose personal or medical information was exposed in the data breach

Proof Required: Varies; documentation of out-of-pocket losses may increase award

According to a report from the HIPAA Journal, Excelsior Orthopaedics and Buffalo Surgery Center have agreed to pay $2.4 million to resolve class action litigation stemming from a data breach that allegedly compromised patient information. The lawsuit claimed that affected individuals faced potential exposure of sensitive personal and medical data held by the two New York-based healthcare providers.

The settlement, if approved, would provide compensation to patients whose information was involved in the breach. Settlement class members may be eligible for reimbursement of documented out-of-pocket losses, as well as a base cash payment. The settlement also reportedly includes provisions for credit monitoring services for qualifying claimants.

How to claim: Visit the official settlement administrator's website for claim instructions and deadlines. Check the HIPAA Journal report linked above for the most current filing information.

2. Eye Physicians of Central Florida Data Breach Settlement

Settlement Amount: Not publicly specified; cash payments and credit monitoring available

Who May Qualify: Patients whose personal information was affected by the Eye Physicians of Central Florida data breach

Proof Required: Proof of documented losses may be required for higher-tier claims

The Eye Physicians of Central Florida data breach class action settlement offers eligible individuals a choice between cash compensation or credit monitoring services, according to settlement details reported by Top Class Actions. The lawsuit alleged that a data breach at the Florida-based ophthalmology practice exposed patient information, though the specific nature and scope of the exposed data has not been fully detailed in available public reporting.

Healthcare data breaches involving medical providers can expose particularly sensitive information, including diagnoses, treatment histories, and insurance details, in addition to standard personal identifiers. Affected patients may be eligible to file a claim regardless of whether they experienced direct financial harm, though documented losses could increase the potential compensation amount.

How to claim: Settlement details and claim forms are available through the settlement administrator. Eligible individuals should review the notice they may have received by mail or email for specific instructions.

3. Goldco Robotext TCPA Class Action Settlement

Settlement Amount: $2 million

Who May Qualify: Individuals who received text messages from Goldco via the Call Loop platform after requesting that contact stop, or while listed on the Do Not Call registry

Proof Required: Class membership verification; no purchase necessary

A federal court has granted approval to a $2 million TCPA class action settlement involving Goldco, a precious metals company, according to reporting from TCPAWorld. The lawsuit alleged that Goldco sent text messages to consumers through the Call Loop platform after those individuals had requested that contact cease — and that some recipients were registered on the national Do Not Call list at the time the messages were sent.

The complaint alleged violations of the Telephone Consumer Protection Act, a federal law that restricts unsolicited automated calls and text messages and provides for statutory damages of $500 to $1,500 per violation. The plaintiff claimed to represent a class of similarly situated individuals who received unwanted texts from Goldco under comparable circumstances.

With a $2 million fund and a defined class of recipients, individual payouts will depend on the total number of valid claims submitted. Eligible class members who received qualifying text messages may be eligible for a pro-rata share of the net settlement fund.

How to claim: Class members should monitor communications from the settlement administrator for claim form availability and filing deadlines.

Key Takeaways

• Healthcare organizations remain frequent targets in data breach litigation — two of the three settlements this month involve medical providers, underscoring the sensitivity of patient data and the legal exposure that follows a breach.
• TCPA settlements don't require proof of financial harm — consumers who received unwanted texts or calls may be eligible to participate based on the contact itself, not documented losses.
• Credit monitoring is a common settlement benefit in healthcare data breach cases, even when direct cash payouts are modest — and may be worth claiming even if you haven't experienced identity theft.
• Check your email and mail carefully — settlement administrators send class notices to known addresses, and many eligible individuals miss deadlines simply because they overlook or discard the notification.
• Deadlines vary and can pass quickly — if you believe you may be affected by any of these cases, reviewing claim eligibility sooner rather than later is advisable.

InjuryClaims.com reports on class action lawsuits and settlements as a public news service. Nothing in this article constitutes legal advice. Eligibility for any settlement can only be determined by reviewing the official settlement documents or consulting a licensed attorney.