There is no MC2 Data breach claim form available to fill out. As of 2026, the litigation over the MC2 Data leak is still in its early stages, no court has approved a settlement, and no claims portal or filing deadline has been set. The useful steps right now are protecting yourself from identity theft and building the paper trail you would need the moment a form becomes available.
Why No Claim Form Exists Yet
MC2 Data operated several background-check websites that collected personal information on a massive scale. In 2024, researchers found an unsecured database that exposed billions of records. The National Public Data breach, closely linked to MC2 Data, compromised full names, Social Security numbers, mailing addresses, and information about relatives.1IBM. National Public Data Breach Publishes Private Data of 2.9B US Citizens Most people whose data was exposed never directly interacted with either company, which scraped public records and resold the information.
A class action lawsuit, Hofmann v. National Public Data, was filed in the U.S. District Court for the Southern District of Florida in 2024. National Public Data’s Chapter 11 bankruptcy filing in October 2024 complicated things. That bankruptcy case was later dismissed, but no settlement has been announced, no claims process has been created, and attorneys are still investigating whether additional class actions against MC2 Data specifically can move forward. Until a judge approves a settlement, there is nothing legitimate to file.
Beware of Fake Claim Sites
If you find a website claiming to accept MC2 Data breach claims right now, treat it with extreme caution. Scammers often set up fake settlement portals after high-profile breaches to harvest the exact information — Social Security numbers, addresses, bank details — that was already compromised. Do not enter sensitive data anywhere unless the settlement administrator is identified in an official court order posted on the court’s docket and referenced by the law firms involved in the litigation. A real claim form will arrive through a notice mailed or emailed to you by a court-appointed administrator, not through a search ad or social media post.
Protect Your Identity Right Now
Because the exposed data includes Social Security numbers and addresses, the risk of identity theft is real and ongoing. You don’t need to wait for a settlement to act. The FTC recommends a specific sequence after a breach of this kind.2Federal Trade Commission. How to Recover From Identity Theft
- Freeze your credit with each of the three major bureaus: Equifax (800-685-1111), Experian (888-397-3742), and TransUnion (888-909-8872). A freeze is free and prevents anyone from opening new credit accounts in your name. You can lift it temporarily when you need to apply for credit yourself.3Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report
- Place a fraud alert. Contact any one of the three bureaus and it will notify the other two. A standard alert lasts one year and can be renewed, and it requires businesses to verify your identity before opening new accounts.2Federal Trade Commission. How to Recover From Identity Theft
- Check your credit reports weekly for free at AnnualCreditReport.com. Look for accounts you don’t recognize, addresses you’ve never lived at, or inquiries you didn’t authorize.
- If you spot fraud, file a report at IdentityTheft.gov. The site generates a personalized recovery plan and the paperwork you may need to dispute fraudulent accounts.
These steps cost nothing and create documentation that would strengthen a future claim.
Start Documenting Your Expenses Now
When a settlement is eventually reached, the claim form will almost certainly ask for evidence of expenses you incurred because of the breach. The sooner you start tracking those costs, the easier the filing will be. Keep records of:
- Credit monitoring costs. Save receipts or billing statements for any monitoring service you purchased after learning about the breach.
- Bank and credit card statements showing fraudulent transactions, unauthorized charges, or fees your bank charged to investigate fraud. Request these sooner rather than later, since banks sometimes charge for retrieving older statements and some retain records for only a limited period.
- Professional fees. Hold onto invoices from accountants, attorneys, or identity-theft resolution services you hired because of the breach.
- Time spent. Keep a simple log of hours you spent on breach-related tasks: calling banks, disputing charges, monitoring accounts, filing police reports. Note the date, what you did, and how long it took. Data breach settlements commonly reimburse this time at a flat hourly rate.
For every expense, make sure you can show the date, the dollar amount, and a clear connection to the breach. Vague or undocumented claims are the most common reason settlement administrators reject reimbursement requests.
What the Claim Form Will Likely Ask For
Data breach settlements follow a fairly standard structure, so you can prepare for what will probably appear on an MC2 Data form.
Expect a contact information section with your name, mailing address, phone number, and email. Many forms include a unique ID printed on the mailed notice, which links your claim to the settlement database. If you move after the breach, keep your old addresses on record. The administrator may use them to match you against the compromised data.
Expect a benefits section where you choose between credit monitoring (often two to four years) and a smaller cash payment. Some settlements allow both; others require you to pick one. Cash payments often come from a fixed fund, so the per-person amount can shrink as more people file.
Expect a section for out-of-pocket expenses, where you list each cost individually with the amount, a short description, the date, and supporting documents. Settlements that reimburse lost time usually cap it at a set number of hours, commonly three to five, at a flat rate around $25 per hour, with a brief description of what you did.
Finally, expect an attestation. You sign, electronically or on paper, confirming under penalty of perjury that everything you submitted is true. This is a legal declaration, not a formality, and false information can get your claim denied and expose you to legal consequences.
Submission will almost certainly be available online through the administrator’s portal or by mail. Online filing is faster and gives you an instant confirmation number. If you mail the form, use certified mail so you have proof of the postmark date. Missing a court-ordered deadline by a single day makes you ineligible.
How You’ll Know When to File
If a settlement is reached, the court will require the administrator to notify class members, usually by email, physical mail, or both. To make sure you get that notice, keep your contact information current with any law firm you have registered with regarding the breach. You can also monitor the federal court docket for the Southern District of Florida, where Hofmann v. National Public Data was filed, for new filings.
Taxes on a Future Payment
Cash payments from a data breach settlement are generally considered taxable income. Starting January 1, 2026, settlement administrators must issue a Form 1099-MISC to any claimant who receives $2,000 or more in a calendar year. Even below that threshold, the income is technically reportable on your tax return. Credit monitoring provided through a settlement is not typically treated as taxable income because it is a service rather than a cash payment. If you do receive a payment, set aside a portion for taxes or consult a tax professional before filing season.