Earlier this year, Dr. Brian Cohen announced a large medical and sports complex would be built across the highway from Adena along route 23. The project is estimated to cost more than $250 million and will include general medicine, sports fields, a hotel, and more. GUARDIAN PHOTO | DEREK MYERS

CHILLICOTHE, Ohio — Adena Health System has reached a proposed $17.8 million settlement to resolve a class action lawsuit alleging the hospital unlawfully disclosed patients’ confidential data through tracking pixels on its MyChart online portal, according to court documents filed Tuesday. The deal, pending court approval, targets up to 89,000 patients who logged into the portal between Nov. 1, 2022, and June 3, 2024.

The lawsuit, initially filed in January 2024 accuses Adena, a nonprofit healthcare provider in Chillicothe, of using tracking tools like Meta Pixel and Google Analytics on its MyChart portal and website. These tools allegedly captured and transmitted personally identifiable information (PII) and protected health information (PHI)—including medical conditions, appointment details, and patient communications—to third parties without consent, violating HIPAA, the Electronic Communications Privacy Act (ECPA), Ohio privacy laws, and common law standards.

The case gained traction amid a national wave of privacy lawsuits against healthcare providers, with over 20 similar actions filed since 2022. The Federal Trade Commission and U.S. Department of Health and Human Services have warned of tracking technology risks, with past HIPAA violations costing hospitals millions.

The total settlement proposed is $17.8 million, offering each affected patient a $21 cash payment and a year of CyEx Privacy Shield Global, valued at $179. In addition, Adena would pay $550,000 on attorney fees.

The proposed settlement awaits court approval.

Details on how those affected can claim their check will be released after court approval.

Derek Myers is the editor-in-chief of the Guardian.