$14M MHCC Settlement Resolves Class Action Lawsuit Over Data Breaches in 2023, 2024

New to ClassAction.org? Read our Newswire Disclaimer

McLaren Health Care Corporation (MHCC) has agreed to a $14,000,000 settlement to resolve a class action lawsuit alleging that the Michigan-based hospital network failed to protect current and former patients’ sensitive information from a data breach on two different occasion – first between July 28, 2023 and August 23, 2023, then again between July 17, 2024 and August 3, 2024.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The $14 million MHCC class action settlement received preliminary approval from the court on December 15, 2025 and covers all individuals in the United States whose confidential information may have been compromised in the 2023 and 2024 data breaches, including those who received a written notice from MHCC.

Per court documents, approximately 2,800,000 individuals were impacted by the data breaches experienced by MHCC.

The court-approved website for the MHCC class action settlement can be found at MHCCSettlement.com.

According to the website, MHCC settlement class members who file a valid, timely claim form have multiple options for reimbursement.

Class members who submit with their claim form documented proof of out-of-pocket losses incurred due to the data breaches are eligible to receive a one-time cash payment of up to $5,000. Per the settlement agreement, losses must have been incurred on or after July 28, 2023, the start date of the first breach, and class members may not receive payment for losses already reimbursed from another source, including the credit monitoring and identity theft protection product offered by McLaren Health Care as part of the notice.

In lieu of, or in addition to a documented-loss payment, MCHH class members may also file a claim to receive an alternative one-time flat cash payment with no proof required. This cash payment, the agreement outlines, will be pro-rated between the class members who elect to receive it. The final amount of the alternative cash payment will be determined after all claim forms have been submitted.

The agreement relays that MCHH settlement class members can elect to receive their cash payouts via check or electronic payment, and all checks must be cashed within 90 days of issuance.

In addition to one or both cash payments, the site reports that all MCHH class members may file a claim to receive an enrollment code for one free year of one-bureau credit monitoring and identity theft protection services.

Finally, as part of the settlement, McLaren has agreed to implement its data security systems for a period of at least two years, to better protect the sensitive information it stores.

To file a MCHH data breach settlement claim form online, class members can head to this page and enter the unique Notice ID and confirmation code as listed on their received copy of the settlement notice. Alternatively, class members may download a PDF of the claim form from the settlement website to print, fill out and return by mail to the address of the settlement administrator listed on the second page of the document.

All MCHH class action settlement claim forms must be submitted online or by mail by April 29, 2026.

Consumers who believe they may be an MCHH settlement class member but did not receive a notice can contact the settlement administrator to confirm their identity and obtain their login details.

The court will determine whether to grant final approval to the MCHH class action settlement at a hearing on April 21, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The McLaren Health Care Corporation class action lawsuit claimed that the hospital network failed to implement proper cybersecurity measures to protect the private information stored on its systems, which led to two data breaches occurring between July and August of 2023 and 2024. Per court documents, sensitive personal information belonging to current and former MCHH patients that may have been affected by the breaches includes names, Social Security numbers, health insurance information, dates of birth and detailed medical information. 

Check out ClassAction.org’s free legal resources to learn how to start a class action lawsuit.