$775K MRA Management Association Settlement Ends Class Action Lawsuit Over 2023, 2024 Data Breaches

New to ClassAction.org? Read our Newswire Disclaimer

The Management Association (MRA) has agreed to a $775,000 settlement to resolve a class action lawsuit that alleged the human resources management company failed to safeguard confidential information in its care from targeted cyberattacks discovered in July 2023 and January 2024.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The $775,000 Management Association class action settlement received preliminary approval from the court on April 10, 2026. The agreement covers all United States residents whose personal information may have been compromised in the data breaches, including all who received notice of the cyber incidents.

Court documents state that an estimated 36,434 people are covered by the class action settlement. 

The court-approved website for the Management Association class action settlement can be found at MRADataSettlement.com.

Management Association class members do not need to do anything to automatically receive a pro rata cash payment.

Cash payouts will be distributed via check to each class member’s last address on file with The Management Association.

Class members who want to update their current address or select an electronic payment method (PayPal, Venmo, Zelle) can head to this page and enter their unique ID and PIN.

All address updates and requests for electronic payment must be submitted online no later than October 7, 2026.

The court will determine whether to grant the Management Association settlement final approval following a hearing on August 21, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The MRA Management Association class action lawsuit alleged that the human resources management provider failed to implement reasonable cybersecurity measures to prevent two targeted cyberattacks, allegedly leading to separate data breaches discovered in July 2023 and January 2024.

Per court documents, private information that may have been compromised in the breaches included full names, dates of birth, Social Security numbers, credit and/or debit card numbers, medical histories, health benefits and enrollment information, financial account numbers with passwords or routing numbers, and tax ID numbers.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.