$520K Mystic Valley Elder Services Settlement Resolves Class Action Suit Over April 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Mystic Valley Elder Services has agreed to a $520,000 settlement to resolve a class action lawsuit that alleged the Massachusetts-based eldercare provider failed to protect sensitive consumer information from an April 2024 cybersecurity attack.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The Mystic Valley Elder Services class action settlement received preliminary approval from the court on October 10, 2025 and covers all living individuals whose personal information was compromised as a result of the April 2024 data breach, including everyone who received a notice letter about the incident.

The court-approved website for the Mystic Valley Elder Services (MVES) data breach settlement can be found at https://www.MVESdatasettlement.com/.

According to the website, MVES settlement class members who submit a valid, timely claim form have multiple options for reimbursement. Those who submit with their claim form documented proof of out-of-pocket expenses are eligible to receive a one-time cash payment of up to $5,000, the site says. Per the settlement agreement, data breach-related expenses covered under this reimbursement option must be fairly traceable to the April 2024 incident and include costs related to bank fees, data charges, credit monitoring, fraud and identity theft.

In lieu of a payment for documented out-of-pocket losses, settlement class members with valid claims are eligible to receive a one-time, pro-rated cash payment of approximately $75, the settlement website says.

The settlement site outlines that payouts will be issued to class members via check, which must be cashed within 90 days after issuance before expiration.

In addition to either monetary reimbursement, all Mystic Valley Elder Services settlement class members are eligible to enroll in two free years of one-bureau credit monitoring. The settlement agreement relays that activation codes will be distributed to class members who elect to receive the service via email or mailed to their listed address.

The amount of any monetary compensation from the class action settlement may be increased or decreased on a pro-rated basis, depending on the total number of approved claim forms that are filed, the settlement site says.

Finally, as part of the settlement, MVES has agreed to certain business practice changes to better safeguard its systems and prevent future data breaches.

To submit a Mystic Valley Elder Services settlement claim form online, class members can head to this page and enter their name and the class member ID found on their copy of the settlement notice. Consumers who believe they may be a settlement class member but did not receive a notice should contact the settlement administrator to confirm their identity and receive their login information.

All MVES settlement claim forms must be submitted online by February 9, 2026.

The court will determine whether to grant final approval to the MVES data breach settlement at a hearing on February 17, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Mystic Valley Elder Services class action lawsuit claimed that the eldercare provider failed to implement proper security measures to safeguard the personal information stored in its systems, which led to a targeted data breach in April 2024. According to court documents, the consumer data potentially compromised as a result of the data breach included, but was not limited to, names, dates of birth, passport numbers, taxpayer information, financial account numbers, online credentials, Social Security numbers, health insurance information and medical histories. 

Learn all about the legal process: What is a class action lawsuit?