Murfreesboro Medical Clinic Data Breach Settlement 2026 - File a Claim by April 14

What happened

Class period: The ransomware attack occurred in or about April 2023. The class covers all persons who received a data breach notice from MMC as a result of that event.

In April 2023, Murfreesboro Medical Clinic (MMC), a physician-owned ambulatory clinic in Murfreesboro, Tennessee, discovered it had been hit by a ransomware attack carried out by third-party criminals. The attackers gained access to computer systems containing the private information and personally identifiable health information of MMC patients and employees.

MMC notified affected individuals after discovering the breach and offered complimentary credit monitoring and identity theft protection services for a period of time. Multiple class action lawsuits were subsequently filed, alleging that MMC's negligence and failure to meet statutory and common law duties contributed to the breach. Those cases were consolidated into a single lawsuit.

MMC denies all allegations and denies any wrongdoing. No court has found MMC liable. The parties agreed to settle to avoid the costs and uncertainty of continued litigation.

What you can get

Key dates

Who may qualify

• You are a patient or employee of Murfreesboro Medical Clinic whose private information may have been compromised in the April 2023 ransomware attack
• You received a data breach notification from MMC, whether or not you actually received or read it
• You have not excluded yourself from the Settlement Class

How to file

1. Go to the official settlement website at https://mmcsettlement.com/ and click Submit Claim to file online by April 14, 2026
2. Or mail a completed, personally signed Claim Form postmarked by April 14, 2026 to: Settlement Administrator - 83284 c/o Kroll Settlement Administration PO Box 225391 New York, NY 10150-5391
3. Your Claim Form must be signed under penalty of perjury and include supporting documentation for any out-of-pocket expenses claimed. Lost time claims require a detailed description of how and why the time was spent and on what dates.

Proof required

• Documentation showing that out-of-pocket expenses were actually incurred, were not reimbursed from any other source, were not reasonably avoidable, and plausibly arose from the data breach (receipts, invoices, billing statements, etc.)
• For lost time claims: a detailed written description of how and why the time was spent and on what dates after the breach
• Self-prepared documents like handwritten receipts are not sufficient on their own, but may support other documentation
• Claims without required documentation will be denied

Payment timing

Valid claimants will receive a check for their monetary benefits. Checks that remain uncashed 120 days after issue will become void and the uncashed amount will be donated to The MMC Foundation. Payment is expected to be completed during or before the second quarter of 2026, assuming no appeal delays.

Important links

• Official website
• Claim form
• Important dates
• FAQs
• Documents

Contact

Extra details

This is not an automatic payment. You must submit a signed Claim Form to receive any money or enroll in credit monitoring.

Each Settlement Class Member may submit only one Claim Form.

Attorney fees (up to $350,000) and class representative service awards (up to $3,000 each) are paid separately by MMC and do not reduce the amount available to class members.

As part of the settlement, MMC has agreed to implement and maintain data security improvements for at least three years, including a written information security program, employee training, firewall protocols, data deletion policies, and a data security event response plan.

The opt-out and objection deadlines have passed. The final approval hearing took place on January 16, 2026. The claims deadline of April 14, 2026 remains open.

The only authorized settlement website is https://mmcsettlement.com/

FAQ