Murfreesboro Medical Clinic Settlement Ends Class Action Lawsuit Over April 2023 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Murfreesboro Medical Clinic (MMC) has agreed to settle a class action lawsuit over an April 2023 ransomware attack that allegedly compromised private patient and employee information.

Want to stay in the loop on class action lawsuits that matter to you? Sign up for ClassAction.org’s free weekly newsletter.

The MMC class action settlement received preliminary approval from the court on September 16, 2025 and covers all individuals whose private information may have been compromised as a result of the April 2023 Murfreesboro Medical Clinic & Surgicenter data breach, and to whom MMC sent a notice about the incident. Per court documents, the information of approximately 559,000 MMC patients and employees was potentially exposed in the incident.

The court-approved website for the MMC settlement can be found at https://MMCSettlement.com/.

Per the settlement site, MMC settlement class members who submit a valid, timely claim form have multiple options for reimbursement. Class members who submit a valid claim form for reimbursement of documented out-of-pocket expenses are entitled to receive a one-time cash payment of up to $500 to cover losses reasonably incurred as a result of the data breach. The class action settlement agreement details that reimbursable losses covered under this option include those related to identity theft, fees for credit repair services, costs to freeze and/or replace credit cards, and credit monitoring costs.

MMC settlement class members are also eligible to receive reimbursement for lost time spent dealing with the data breach, at a rate of $25 per hour for a maximum of two hours. According to the settlement site, lost-time reimbursement is subject to the $500 cap for the unreimbursed out-of-pocket expense option and may become pro-rated, depending on the number of valid claims submitted.

The settlement agreement adds that class members can elect to receive their payouts via check or electronic payment, and that all checks must be cashed within 120 days after issuance before expiration.

The MMC site notes that, in addition to monetary reimbursement, data breach settlement class members are also eligible to enroll in two free years of three-bureau credit monitoring and identity theft protection services.

As part of the class action settlement, Murfreesboro Medical Clinic has also agreed to implement certain business practice changes related to information and data security, including employing a new information security program, employee training on data security policies, and creating an appropriate protocol for storing and deleting records.

To submit an MMC settlement claim form online, class members can head to this page and enter the class member ID found on their copy of the settlement notice. Consumers who believe they may be a class member but did not receive a settlement notice should contact the settlement administrator to confirm their identity and receive their login information.

Alternatively, class members may download a PDF of the claim form to print, fill out, and return by mail to the address listed near the top of the document.

MMC settlement claim forms must be submitted online or by mail by April 14, 2026.

The court will determine whether to grant final approval to the MMC settlement at a hearing on January 16, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.

The Murfreesboro Medical Clinic & Surgicenter class action lawsuit alleged that the healthcare provider’s systems experienced a “sophisticated criminal cyber-attack” in April 2023 that compromised the private information of approximately 559,000 MMC patients and employees. Per the settlement agreement, the private data affected by the data breach included, but was not limited to, names, dates of birth, contact information, identification numbers, medical histories and Social Security numbers.

Check out ClassAction.org’s lawsuit list for the latest top class action lawsuits.