McLean Mortgage Settlement Ends Data Breach Lawsuit Over 2024 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

McLean Mortgage Corp. has agreed to a settlement to wrap up a class action lawsuit that alleged the mortgage lender failed to safeguard customers’ and employees’ private information from an October 2024 data breach.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The McLean Mortgage class action settlement received preliminary approval from the court on August 12, 2026. Eligible for the settlement are all living United States residents whose personally identifiable information was potentially compromised in the data incident experienced by McLean on or around October 17, 2024, including all who were sent a notice letter regarding the data breach.

Court documents state that the McLean Mortgage data breach potentially exposed the personal information of 30,453 people.

The court-authorized McLean Mortgage class action settlement website can be found at McLeanDataSettlement.com.

Settlement class members who file a timely, valid claim form can receive up to $1,000 for documented “ordinary” losses incurred between October 17, 2024 and December 10, 2026 due to the data breach. This benefit covers costs for credit reports, credit monitoring, freezing/unfreezing credit, replacement IDs, postage, and more.

Class members must submit proof, such as receipts, to receive an “ordinary” documented-loss payment.

Additionally, class members can submit a claim form to receive up to $4,000 for documented “extraordinary” losses incurred during the same time period due to the McLean data incident. This benefit covers losses from identity theft or fraud and that are not already covered by the ordinary-loss benefit.

Class members must submit proof, such as police reports, submitted insurance claims or receipts, to receive an “extraordinary” documented-loss payment.

Class members can also file a claim form to receive reimbursement for up to four hours of lost time spent responding to problems caused by the data breach, at a rate of $25 per hour. This benefit covers activities such as changing passwords, investigating suspicious account activity, and researching the data incident.

Lost-time payouts are subject to the $1,000 cap on “ordinary” documented-loss payments.

In lieu of any other cash payment, class members can submit a claim form to receive a $45 cash payment, with no proof required.

Lastly, class members can elect on their claim form to enroll in three years of CyEx Financial Shield Complete, which includes one-bureau credit monitoring, financial fraud insurance, and monitoring for fraud or identity theft and unauthorized transactions. Enrollment codes will be sent by email to class members who elect to receive CyEx Financial Shield Complete.

To file a McLean Mortgage settlement claim form online, class members can head to this page and enter the login ID and PIN found on their copy of the settlement notice. Alternatively, class members can download a PDF claim form to print, complete, and return by mail to the settlement administrator.

All McLean Mortgage settlement claim forms must be submitted online or postmarked by December 10, 2026.

The court will determine whether to grant final approval to the McLean Mortgage data breach settlement following a hearing on December 10, 2026. Settlement benefits will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The McLean Mortgage class action lawsuit alleged that the Fairfax, Virginia-based mortgage lender failed to implement adequate cybersecurity measures to safeguard current and former employees’ and customers’ confidential information from a targeted cyberattack that occurred on or around October 17, 2024.

Court documents state that private information that was potentially compromised in the data breach included names, Social Security numbers, driver’s license numbers, financial account numbers, passport numbers, health insurance information, and other personally identifiable information.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.