Adair v. Cigna Corporate Services, LLC

Published by Crandall Consulting · Informational litigation intelligence · Last substantive update: August 23, 2026

Docket / citation: CIVIL ACTION NO. 25-2384

Summary

A federal district court in Adair v. Cigna granted in part a motion to dismiss, concluding that plaintiffs' ECPA, WESCA, and invasion-of-privacy claims were defeated by consent in Cigna's Privacy Notice and Terms of Use, while finding plaintiffs had pleaded Article III standing. The court dismissed unjust enrichment without prejudice and left other merits issues for later proceedings.

Litigation Status

Status, direction, and weight describe how tracked public sources characterize this matter as of our last review — they are informational classifications, not legal assessments.

Procedural Posture

Decision on defendants' motion to dismiss in a putative class action alleging tracking of health-related activity via embedded third-party tools on Cigna's public and authenticated portals.

Reported Holding

Chief Judge Wendy Beetlestone dismissed the plaintiffs' ECPA, WESCA, and invasion-of-privacy (intrusion upon seclusion) claims based on the court's conclusion that the plaintiffs had consented to Cigna's Privacy Notice and Terms of Use, which expressly permitted use of third-party tracking technologies. The court nevertheless held that the plaintiffs adequately pleaded Article III standing for those claims. The court dismissed the unjust enrichment claim without prejudice and left other merits issues (including breach of fiduciary duty) for further proceedings.

What the Court Decided

The court granted in part and denied in part defendants' motion to dismiss: it concluded consent in Cigna's privacy notice and terms was dispositive as to the ECPA, WESCA, and invasion-of-privacy claims and dismissed those claims; it found plaintiffs had alleged a concrete injury sufficient for Article III standing; it dismissed unjust enrichment without prejudice and left merits questions (e.g., fiduciary duty) unresolved.

What the Court Did Not Decide

The court did not finally decide the merits of breach of fiduciary duty or other claims beyond the pleading-stage rulings; it did not resolve damages or injunctive-relief merits beyond finding plaintiffs had standing to seek injunctions; the opinion did not resolve factual questions about the scope or operation of the tracking technologies.

Significance

Generally viewed as defense-favorable. Characterizations of significance describe how the matter has generally been discussed in tracked public sources; individual holdings are often narrow, procedural, or fact-specific, and this page does not state or imply broader holdings than the sources support.

What This Page Does and Does Not Say

This page reports what our tracked public sources say about this matter — including, where identified, the procedural posture (for example, a ruling on a motion to dismiss is not a final merits decision). It does not report legal conclusions beyond those sources, does not predict outcomes, and does not constitute legal advice.

Technologies at Issue

• tracking pixels
• session replay code
• web cookies/online tracking technologies
• Adobe smetrics (Adobe analytics/session-replay)
• third-party tracking tools
• website/member portal tracking
• pixels
• embedded third-party tracking technologies

Statutes Invoked

• 18 U.S.C. § 2510 et seq. (ECPA); 18 Pa. C.S.A. § 5701 et seq. (WESCA); 42 U.S.C. § 1320d et seq. (HIPAA); 45 C.F.R. § 164.508 — one-party consent · private right of action
• Electronic Communications Privacy Act (ECPA); Pennsylvania Wiretapping and Electronic Surveillance Control Act (WESCA) — all-party consent · private right of action

Claims Asserted

Claims identified in tracked public sources; pleadings may include additional or amended claims.

• Electronic Communications Privacy Act (ECPA)
• Pennsylvania Wiretapping and Electronic Surveillance Control Act (WESCA)
• invasion of privacy (intrusion upon seclusion)
• breach of fiduciary duty
• unjust enrichment
• request for injunctive relief

What This Matter May Mean for Website Operators

Federal Wiretap Act (ECPA Title I) is a one-party consent statute with a private right of action; Pennsylvania Wiretapping and Electronic Surveillance Control Act (WESCA) is an all-party consent statute with a private right of action. Consent standard and private enforceability are the structural features that most shape where website tracking claims are filed and how they are valued.

For operators using similar technologies, the recurring factual questions in matters like this one are when session recording begins relative to consent and whether input masking covers every field; whether advertising pixels transmit page URLs or hashed form data before a consent choice; what page URLs and query strings analytics tools share with third parties. Our scanner tests these behaviors empirically.

The reported outcome direction at the pleading stage reflects how tracked sources characterize the ruling; such rulings are often narrow, posture-specific, and fact-bound rather than broad statements of law.

Detection of a similar technology on a website is an informational risk indicator, not a legal conclusion, and nothing in this section is legal advice.

Related Intelligence

Sources

• Pennsylvania Federal Court Dismisses Wiretapping Claims Against Health Insurer — Lexology (Covington & Burling LLP) · Tier A (Primary authority) · 2026-02-10
• Adair v. Cigna Corporate Services, LLC — Opinion (E.D. Pa., Feb. 4, 2026) — govinfo (U.S. District Court for the Eastern District of Pennsylvania) · Tier B (Authoritative secondary) · 2026-02-04
• CONSENT IS (STILL) KING: Court Dismisses ECPA, WESCA, and Invasion of Privacy Claims Against Cigna, Finding Consent in Privacy Notice Dispositive — CIPAWorld · Tier C (Professional analysis) · 2026-02-06

About This Page

Publisher: Inspection-Ready Institute, Inc. (DBA Crandall Consulting), an independent website compliance and risk consultancy. We are not a law firm and nothing on this page is legal advice.

How this content is produced: Facts are extracted from publicly available sources — court and government materials, recognized legal press, professional analysis, and industry reports — by our litigation intelligence engine, stored with full source provenance, and rendered from the database. Risk guidelines are computed by a deterministic formula, never by an AI model directly. See the full methodology.

Limitations: Counts labeled "Tracked" reflect matters identified in our source set and are not official court statistics. We report what courts decided and did not decide; we do not predict outcomes.

Corrections: If you believe anything on this page is inaccurate, contact us via the contact page and we will review the underlying sources promptly.