Deadline: April 29, 2026
Last updated: March 20, 2026

McLaren Health Care Data Breach Settlement 2026 - File a Claim by April 29

McLaren Health Care Corporation is paying $14 million to settle a class action lawsuit stemming from not one but two separate data breaches in 2023 and 2024 that exposed the private information of patients. If your data was compromised in either breach, you may be entitled to up to $5,000 for documented losses, a flat pro rata cash payment requiring no paperwork, and one year of free credit monitoring. Getting hit twice turns out to cost more than getting hit once.

Deadline: April 29, 2026
File Your Claim →
Applies to Nationwide
Main deadline April 29, 2026
Benefit Up to $5,000 for documented losses, a pro rata flat cash payment with no documentation required, and one year of free credit monitoring with $1 million in identity theft insurance

What happened

Class period: First breach: July 28, 2023 through August 23, 2023. Second breach: July 17, 2024 through August 3, 2024. Documented losses must have been incurred on or after July 28, 2023.

McLaren Health Care Corporation, a Michigan-based health care system, suffered two separate data breaches at the hands of cybercriminals. The first occurred between July 28 and August 23, 2023. The second occurred between July 17 and August 3, 2024. In both incidents, unauthorized third parties gained access to McLaren's network and exfiltrated the personally identifying information and protected health information of current and former patients.

McLaren sent breach notification letters to affected individuals following each incident. Multiple class action lawsuits were filed alleging that McLaren failed to adequately protect patient data. Those cases were consolidated into a single action.

McLaren denies all allegations and denies any wrongdoing. No court has made any finding of liability. The parties agreed to a $14,000,000 settlement to resolve the litigation and avoid the costs and uncertainty of continued proceedings.

What you can get

Documented Loss Payment

Up to $5,000

For unreimbursed out-of-pocket losses traceable to either data breach, incurred on or after July 28, 2023; requires supporting documentation such as bank statements, credit card statements, invoices, receipts, or screenshots; personal certifications or affidavits alone are not sufficient

Pro Rata Cash Fund Payment

Amount varies

Flat equal-share cash payment requiring no documentation; amount depends on remaining settlement funds after documented loss payments and fees are deducted; incomplete documented loss claims are automatically treated as cash fund claims

Credit Monitoring

1 year, free

One-bureau credit monitoring provided by IDX Identity Protection Services, including CyberScan Dark Web Monitoring, $1 million reimbursement insurance, fully managed identity restoration, member advisory services, and lost wallet assistance; can be delayed up to one year if you previously accepted McLaren's credit monitoring offer

Key dates

Action Date What it means
Claim deadline April 29, 2026 Last day to file a claim
Opt out March 16, 2026 (passed) Keep your right to sue separately
Object March 16, 2026 (passed) Tell the court you disagree
Final hearing April 21, 2026 Judge decides whether to approve

Who may qualify

  • Your private information was compromised in either the 2023 or 2024 McLaren Health Care data breaches
  • You were sent a breach notification letter from McLaren following one or both incidents
  • You have not excluded yourself from the settlement class

How to file

  1. Submit a Claim Form online at https://www.mhccsettlement.com/submit-claim by April 29, 2026
  2. Or mail a completed Claim Form postmarked by April 29, 2026 to: MHCC Class Action Settlement 1650 Arch Street, Suite 2210 Philadelphia, PA 19103
  3. If you received a mailed notice with a tear-off Claim Form and you are only claiming the flat cash payment, you may return that tear-off directly
  4. To request a paper Claim Form, call 1-844-685-4251 or email Info@MHCCSettlement.com

Proof required

  • For the Documented Loss Payment (up to $5,000): supporting documentation such as bank statements, credit card statements, invoices, telephone records, screenshots, or receipts showing unreimbursed losses traceable to either breach; personal certifications or affidavits alone are not sufficient
  • For the Pro Rata Cash Fund Payment: no documentation required at all
  • For Credit Monitoring: no documentation required; just submit a valid Claim Form

Payment timing

Settlement benefits will be distributed after the court approves the settlement and it becomes final. Payment method details are not specified in the settlement documents; check the settlement website for updates on payment options.

Important links

Contact

Phone: 1-844-685-4251
Email: Info@MHCCSettlement.com
Mail: MHCC Class Action Settlement 1650 Arch Street, Suite 2210 Philadelphia, PA 19103

Extra details

This settlement covers two separate data breaches, not one. The 2023 breach ran July 28 to August 23, 2023. The second breach ran July 17 to August 3, 2024. If you received a notice from McLaren about either incident, you are likely a class member.

The opt-out and objection deadlines (March 16, 2026) have both passed. The claims deadline of April 29, 2026 remains open.

If you previously accepted McLaren's complimentary credit monitoring after one of the breaches, you can still claim the settlement credit monitoring and delay the start date by up to one year to avoid overlap.

If you submit a documented loss claim and it is rejected or found incomplete, the administrator will automatically treat it as a cash fund claim rather than denying it outright.

McLaren has agreed to implement and maintain enhanced cybersecurity measures as part of the settlement, paid separately from the settlement fund.

The only authorized settlement website is https://www.mhccsettlement.com/


FAQ

Who is McLaren Health Care?
McLaren Health Care Corporation is a Michigan-based health care system operating hospitals and medical facilities. In 2023 and again in 2024, cybercriminals breached McLaren's network and exfiltrated the personally identifying information and protected health information of patients. The company denies any wrongdoing and maintains it was the victim of criminal acts, but agreed to settle the resulting class action lawsuits for $14 million.
Do I qualify if I was only affected by one of the two breaches?
Yes. The settlement covers all persons whose private information was compromised in either the 2023 breach (July 28 to August 23, 2023) or the 2024 breach (July 17 to August 3, 2024), or both. If McLaren sent you a breach notification letter at any point after either incident, you are likely a class member.
What is the difference between the documented loss payment and the cash fund payment?
The documented loss payment is for people who have actual receipts or records showing money spent or losses incurred because of the breaches, up to $5,000. It requires documentation. The cash fund payment is a flat pro rata share for everyone else, no paperwork needed. You can claim both if you have documented losses, but you may not claim both for the same expense.
What does the credit monitoring include?
One year of one-bureau credit monitoring from IDX Identity Protection Services, including dark web monitoring, $1 million in reimbursement insurance, fully managed identity restoration, member advisory services, and lost wallet assistance. If you already accepted McLaren's previous credit monitoring offer, you can delay the start date for this benefit by up to one year.
What if I do not have receipts to support a documented loss claim?
File for the flat cash fund payment instead. It requires no documentation at all. Alternatively, if you file a documented loss claim and it turns out to be deficient, the settlement administrator will automatically convert it to a cash fund claim rather than rejecting it outright.
Can I still opt out?
No. The opt-out deadline was March 16, 2026 and has passed. You are bound by the settlement once it receives final court approval.
What happens if I do nothing?
You will receive no benefits and release your claims against McLaren related to both data breaches. Since the flat cash payment requires no documentation, there is no downside to filing a claim before April 29, 2026.

Use the official website Always confirm details on the official site. If something feels off, stop and verify before sharing personal info.

Info only. Verify details on the official site. Not legal, financial, or tax advice. Legal

Share this: