MHCC Class Action Settlement: Who Qualifies, Claims, and Payouts

The MHCC class action settlement is a $14 million deal resolving claims against McLaren Health Care Corporation over two ransomware attacks that exposed the personal and medical information of roughly 2.8 million people in 2023 and 2024. If your data was involved, you can file a claim for up to $5,000 in documented losses, a pro rata share of the remaining cash, and one year of credit monitoring. The filing deadline is April 29, 2026, and claims are submitted at MHCCSettlement.com or by mail to the settlement administrator.¹

Who Qualifies

The settlement class covers everyone in the United States whose personally identifying information or protected health information was compromised in either the 2023 McLaren breach or the 2024 McLaren breach. Anyone who received a notification letter from McLaren about the incidents is included.²

The first breach ran from July 28 to August 23, 2023, and affected about 2.2 million patients. The second ran from July 17 to August 3, 2024, and hit another 743,131 patients and employees. Exposed information included names, Social Security numbers, driver’s license numbers, health insurance details, and medical records.³

If you didn’t get a notice but think your data may have been involved, the settlement administrator at MHCCSettlement.com can confirm whether you’re on the class list.⁴

What You Can Claim

Class members can choose from three benefits.

Documented losses up to $5,000. If you spent money or lost money because of the breaches on or after July 28, 2023, you can seek reimbursement with proof. Acceptable documentation includes bank or credit card statements showing unauthorized charges, receipts for identity-theft services, IRS correspondence about fraudulent tax filings, and costs for placing credit freezes. Total documented-loss payouts are capped at 50% of the net settlement fund.²

A pro rata cash payment. If you don’t have documented losses, you can file for a flat cash share of what’s left in the fund. No proof required. The per-person amount depends on how much remains after fees, administrative costs, credit monitoring, and documented-loss payments come out, divided among everyone who files for this option.⁵ With about 2.8 million potential claimants, the per-person figure is expected to be modest and won’t be final until claims are processed.⁶

One year of credit monitoring. Any class member who files a claim can get one year of one-bureau credit monitoring and identity theft protection. Once the settlement is final, an enrollment code goes to the email address on your claim form. If you already have credit monitoring, you can defer enrollment for up to 12 months.¹

If the administrator rejects a documented-loss claim and you don’t fix the problem within 30 days, the claim converts automatically to a pro rata cash claim, so you won’t walk away empty-handed for a paperwork issue.⁵

How to File

File online at MHCCSettlement.com, or mail a completed claim form to MHCC Class Action Settlement, Attn: Claim Forms, 1650 Arch Street, Suite 2210, Philadelphia, PA 19103. Online submissions and postmarks must be dated no later than April 29, 2026.¹

If you got a notice by mail or email, it has a Unique Notice ID you’ll enter when filing online. Every claimant provides contact information and picks a payment method: PayPal, Venmo, Zelle, a virtual prepaid card, or a mailed physical check. Documented-loss claimants also upload their supporting paperwork and sign an attestation under penalty of perjury.¹

Why the Cash Share Will Be Smaller Than $14 Million Suggests

The fund is non-reversionary, so nothing goes back to McLaren.² But several deductions come off the top before class members are paid. Attorney fees can run up to one-third of the fund, plus litigation costs.⁷ The 11 class representatives may each receive service awards of up to $1,500.⁸ Notice and claims-processing costs, taxes, and the price of the credit monitoring benefit all come out of the fund too.

If money is left 120 days after distribution, it gets redistributed pro rata to claimants who cashed their initial checks, provided each additional payment would be at least $3.00. Anything below that threshold goes to the Michigan State Bar Foundation and the Michigan Healthcare Cybersecurity Council.²

What Happens If You Do Nothing

Class members who don’t file a claim get no payment and no credit monitoring, and they still give up the right to sue McLaren over these breaches.⁵ The opt-out and objection deadline was March 16, 2026, and has already passed. Opting out was the only way to keep the right to sue McLaren independently.⁸ Final approval was granted on April 21, 2026.⁹

Confirming the Settlement Is Real

The case, Womack-Devereaux, et al. v. McLaren Health Care Corporation (Case No. 24-121459), was approved by the 7th Judicial Circuit Court for Genesee County, Michigan. It’s administered by Angeion Group LLC. The official website is MHCCSettlement.com, and the administrator’s phone number is 1-844-685-4251.¹⁰ You will never be asked to pay a fee to file, and no legitimate part of the process requires financial information beyond what’s needed to send your payment. Requests for a processing fee or extra sensitive data are not from the real administrator. McLaren has not admitted any wrongdoing as part of the settlement.²

1
Angeion Group. MHCC Settlement Claim Form
2
ClassAction.org. Womack-Devereaux Settlement Agreement
3
Healthcare IT News. McLaren Notifies 743K Patients About Data Breach
4
ClassAction.org. $14M MHCC Settlement Resolves Class Action Lawsuit Over Data Breaches
5
MHCC Settlement. MHCC Class Action Settlement
6
HIPAA Journal. McLaren Health Care Data Breach Settlement
7
ClassAction.org. Womack-Devereaux Notice
8
MHCC Settlement. MHCC Settlement FAQs
9
Shub Lawyers. McLaren Health Data Breach Settlement Final Approval
10
MHCC Settlement. MHCC Settlement Contact Us