Healthcare Services Group Agrees to $3 Million Settlement Over 2024 Data Breach
The Pennsylvania-based provider will resolve a class action lawsuit after a cybersecurity incident exposed the data of over 624,000 individuals.
Healthcare Services Group (HSG) has reached a $3 million settlement to resolve a cybersecurity class action lawsuit following a significant data breach. The agreement addresses the exposure of sensitive information belonging to more than 624,000 people.
The U.S. District Court for the Eastern District of Pennsylvania granted preliminary approval for the settlement on June 3, 2026. According to court documents and reports from the Shub Law Firm and The Daily Hodl, the breach occurred between September 27 and October 3, 2024. The incident impacted approximately 624,496 to 624,500 individuals. The legal action, captioned Richards, et al., v. Healthcare Services Group, Inc. (Case No. 2:25-cv-04908-JDW), was originally filed in August 2025.
Background of the Litigation
The lawsuit alleged that HSG, a provider specializing in nutrition, dining, and housekeeping services, failed to implement adequate safeguards for the sensitive personal and protected data it managed. Plaintiffs argued that this negligence allowed an external actor to gain unauthorized access to the company's systems. The breach was identified by the company around October 7, 2024, shortly after the unauthorized access took place.
Industry Implications
This settlement underscores the escalating financial and legal liabilities facing healthcare service providers. While HSG does not provide direct clinical care, its role in managing facility services often involves handling protected health information (PHI) and consumer data. The case reflects a broader trend of consolidated class actions in the healthcare sector, where failures in data stewardship lead to multi-million dollar payouts.
For the wider industry, the case serves as a warning that third-party vendors are increasingly targeted by cyber attackers and held to the same rigorous security standards as primary healthcare providers. The financial cost of the settlement is often secondary to the long-term reputational damage and the cost of mandatory security overhauls required after such a failure.
Next Steps for Claimants
Impacted individuals must act quickly to participate in the settlement. The deadline for filing claims is October 1, 2026. Before the final distribution of funds, the court has scheduled a final approval hearing for September 24, 2026. Those affected by the 2024 breach are encouraged to monitor official notices to ensure their eligibility for the settlement funds.