Health Gorilla, Inc., et al.

This docket consolidates claims arising from a data security breach involving Health Gorilla, a health-information-exchange network that connects healthcare providers, laboratories, and other participants to share patient records, alleging unauthorized access to personal and health information flowing through its network. Centralized in the Southern District of Florida in August 2026, this is one of the youngest active dockets in the data-breach category, with 10 actions filed and pending so far.

For a funder, this docket is squarely in its earliest formation phase: there is no bellwether or settlement track record to benchmark against, and even the ultimate scope of the affected population — which depends on how many healthcare organizations participate in the Health Gorilla network and were implicated in the breach — is still becoming clear. Health-information-exchange breaches raise a network-level diligence question distinct even from a typical single-vendor breach, since data may have flowed through multiple participating organizations before or after the point of compromise.

As a healthcare data-exposure matter, medical-lien considerations in the traditional sense do not apply. For a claimant group or firm building an early inventory of claims tied to this breach, Criterica Capital's commercial litigation finance line is the applicable structure, though terms should reflect the significant uncertainty inherent in a docket this early in its development. A structural brief tracking this docket's formation is available through Criterica Intelligence.

Pre-settlement funding is a non-recourse purchase of a portion of the proceeds of a pending legal claim — not a loan. If the case does not result in a recovery, nothing is owed. Rates, fees, and repayment terms are disclosed in full in the funding agreement, which the applicant’s attorney reviews before signing. Availability and terms vary by state.