LOUISVILLE, Ky. (WDRB) — A settlement was reached in the Norton Healthcare lawsuit after patients and employees had their personal information leaked on the dark web.

A hacker group called BlackCat claimed responsibility for the attack and leaked files as proof in 2023.

WDRB Investigates found employees' names, social security numbers and birth dates — along with patients' personal information, credit card numbers and medical history — were leaked on the dark web.

A federal class action lawsuit was filed July 21, 2023, against Norton Healthcare on behalf of employees and patients whose personal information was stolen from Norton's servers. Despite having knowledge of what Norton calls a "cyber event" May 9, the lawsuit accused the network of failing to notify the people affected or the state attorneys general offices in the affected areas.

Under the preliminary settlement, class action lawsuit members can get a cash payment of no less than $5 and up to $80 for lost time spent on the data incident, three years of medical monitoring services and up to $2,500 in out-of-pocket losses. The total settlement amount is $11 million.

"This settlement brings resolution for those potentially affected. The Court granted the plaintiffs' request for preliminary approval of the settlement, and we look forward to moving toward final approval according to the Court's schedule," Renee Murphy, senior vice president and chief marketing and communication officer for Norton, said in a written statement Monday. "At this time, we expect that will happen in May."

A final approval hearing for the settlement will be held in May in Jefferson County Circuit Court. 

For more information, click here.

Related Stories:

Norton Healthcare says 2.5 million people 'potentially' impacted by ransomware attack

After 6 months and little explanation, Norton Healthcare patients, employees still feeling effects of cyber attack

Federal class action lawsuit filed on behalf of victims affected by Norton Healthcare data breach

Norton Healthcare cyber attack highlights record year for data breaches nationwide

After 2-month wait for mammogram results, Louisville woman says Norton patients are 'due an explanation'

Norton Healthcare employee, patient information exposed in hack

Copyright 2026 WDRB Media. All Rights Reserved.

Â