McLean Mortgage Data Breach Settlement, Check If You Qualify — In re McLean Data Breach Litigation, No. 3:25-cv-00461
If McLean Mortgage sent you a data breach letter about its October 2024 cyberattack, you’re likely included. There’s a flat $45 payment with no proof, up to $4,000 if identity theft cost you money, and a December 10, 2026 deadline. This is In re McLean Data Breach Litigation, No. 3:25-cv-00461, in the Eastern District of Virginia.
McLean Mortgage Data Breach Settlement — Key Facts
| Item | Details |
| Settlement Amount | UNVERIFIED — no total settlement fund is stated on the administrator’s pages |
| Claim Deadline | December 10, 2026 (online, or postmarked if mailed) |
| Who Qualifies | All living persons residing in the United States whose private information was potentially compromised in the October 17, 2024 incident, including all persons sent a notice letter |
| Estimated Payout | Flat $45.00; or up to $1,000.00 for documented losses (lost time of up to $100.00 counts inside that cap); or up to $4,000.00 for extraordinary losses. Plus three years of credit monitoring |
| Proof Required | Yes for documented and extraordinary losses. No for the $45.00 payment |
| Settlement Status | Court-authorized notice mailed September 11, 2026. Final approval pending, hearing December 10, 2026 |
| Court & Case Number | U.S. District Court, Eastern District of Virginia, Richmond Division — No. 3:25-cv-00461 |
| Law Alleged | UNVERIFIED — the administrator’s pages don’t name the laws; complaint not reviewed |
| Administrator | Simpluris |
| Official Claim Site | mcleandatasettlement.com/form/claim |
| Last Updated | October 3, 2026 |
Who Is McLean Mortgage and Why Are They Being Sued for a Data Breach?
McLean Mortgage Corporation is a Fairfax, Virginia company that its Maine Attorney General filing classifies as financial services. Companies like that hold Social Security numbers, bank account numbers and ID details because the paperwork demands them, and the settlement website lists Social Security numbers, driver’s license numbers, financial account numbers, passport numbers and health insurance information among what may have been accessed. You can’t reset a Social Security number.
What Happened at McLean Mortgage Between October 17, 2024 and June 11, 2025?
Here’s the timeline. A targeted cyberattack hit McLean’s computer systems on or around October 17, 2024, and the lawsuit says files holding private information were potentially accessed. According to McLean’s filing with the Maine Attorney General, it began mailing notice letters on June 11, 2025, about eight months later.
McLean denies it did anything wrong. The settlement website says “the Court has not decided who is right,” which is how settlements usually read. But if a letter from McLean landed in your mailbox, your information is what’s in question.
The website says the files may have held names, Social Security numbers, driver’s license numbers, financial account numbers, passport numbers and health insurance information. McLean told Maine regulators 30,453 people were affected. The settlement pages don’t name the laws behind the claims, so I won’t guess.
Documented costs sit at the center of settlements like this, and the Pediatric Home Service data breach settlement we covered pairs them with credit monitoring too. Did a letter reach you? If so, you’re likely one of the 30,453 people McLean reported to Maine regulators.
Who Qualifies for the McLean Mortgage Data Breach Settlement?
If you’re asking “do I qualify for the McLean settlement,” here’s exactly how to know.
Who is included:
- People living in the United States whose private information was potentially compromised in the October 17, 2024 incident
- Anyone who was sent a notice letter about the incident
- Those who received a settlement notice carrying a LoginID and PIN
Living persons only. The class definition says so directly.
Who is not included:
- McLean’s officers, directors and entities it controls
- McLean’s affiliates, legal representatives, attorneys, successors, heirs and assigns
- The judge on the case, plus the judge’s family and staff
- Anyone who files a valid, timely opt-out
You have 38 days from today to opt out or object and 68 days to file, and the online form won’t open without the LoginID and PIN printed on your notice. Lost the letter? Email [email protected] with your full name and mailing address to request them.
Related article: Family Sues Twin Peaks and Jeremiah Matkins Over Fatal 2024 Huntsville Shooting of Ray’Shun Markelle Bates

McLean Mortgage Data Breach Victims Outside Virginia — Are You Still Covered?
Yes. This is a federal case, and the class covers all living persons residing in the United States. McLean is based in Fairfax, Virginia, but you don’t need a Virginia address.
Not sure if you qualify for the McLean Mortgage data breach settlement? A free legal consultation with a data privacy attorney can help before the December 10, 2026 deadline.
How Much Can McLean Mortgage Data Breach Settlement Class Members Get? Up to $4,000 by Category
How much will I get from the McLean settlement? Everyone can claim credit monitoring, and data breach compensation comes in four cash options: documented losses, lost time, extraordinary losses, or a flat $45. Choose carefully.
McLean Mortgage Payout With Proof — Up to $1,000 or $4,000
Keep every receipt. Ordinary documented losses are reimbursable up to $1,000.00 if they happened between October 17, 2024 and December 10, 2026, including fees for credit reports, credit monitoring, freezing and unfreezing your credit, replacement IDs and postage to banks. Notes you wrote yourself can support other proof, but they don’t count alone.
Lost time counts too. You can claim up to four hours at $25.00 an hour, for $100.00 at most, but that sits inside the $1,000.00 ordinary cap and you have to sign a statement under penalty of perjury. Password resets and account checks qualify.
Extraordinary losses go up to $4,000.00. You must show the loss came from the incident, that ordinary expenses don’t already cover it, and that you tried to stop it or get your money back, such as through insurance you already have or your bank’s dispute process. Proof means police reports, submitted insurance claims or receipts.
McLean Mortgage Payout Without Proof — $45
No receipts? Take the flat $45.00 Alternative Cash Payment, a one-time payment you claim instead of any other cash option, with no proof or explanation required. The administrator’s pages list it as a fixed amount, with no mention of pro rata reductions.
McLean Mortgage Credit Monitoring — Three Years
Every class member can claim three years of CyEx Financial Shield Complete one-bureau credit monitoring, with $1 million of insurance coverage and a resolution agent if anything looks suspicious. Codes arrive by email. That’s triple the 12 months of IDX monitoring McLean first offered, per its Maine filing.
Sound familiar? The Akeela Inc. data breach settlement we covered used CyEx Financial Shield monitoring too, if you want to compare how another deal handled it.
How and When McLean Payments Arrive
Payments go out only after final approval and any appeals, and the pages don’t say how they’ll be sent. Don’t expect it soon. The hearing is December 10, 2026, the same day as the claim deadline, and the administrator says it doesn’t know how long any appeals would take.
Taxes matter here. Payments over $600 may appear on a 1099, so check with a tax professional before you file your return.
What the McLean Settlement Pages Don’t Say
The pages list no total settlement fund. McLean pays Class Counsel’s $250,000.00 fee request and three $2,500.00 service awards separately, according to the FAQ. By my math, using the 30,453 people McLean reported to Maine, that fee request works out to about $8.21 per person, while a flat $45.00 for all of them would top out near $1,370,385.00.
That part reads fine on its face. But the pages don’t say whether McLean’s total payout has a cap, so I can’t promise every claim pays in full.
How to File Your McLean Mortgage Data Breach Settlement Claim — Step by Step
- Find your notice. The LoginID and PIN are printed on it.
- Go to mcleandatasettlement.com/form/claim and log in.
- Claim your credit monitoring and pick your cash option: documented losses, lost time, extraordinary losses, or the $45.00 payment.
- Upload proof if you’re claiming losses, such as receipts, police reports or submitted insurance claims.
- If you’re claiming lost time, sign the statement under penalty of perjury. Then submit and save any confirmation you get.
- Prefer mail? Download the claim form and postmark it, with your supporting documents, by December 10, 2026 to: McLean Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799.
Missing your LoginID or PIN? Email [email protected] or call (833) 200-6767. If you’re claiming losses, pull your statements before you log in.
Should McLean Mortgage Class Members Opt Out or Object Before November 10, 2026?
What Opting Out of the McLean Settlement Actually Means
Opting out means no payment. You keep any right to sue McLean yourself, and most people shouldn’t opt out without legal advice. Your request must be postmarked by November 10, 2026 and include the litigation name and case number (they’re in the table above), your full name, mailing address, telephone number, email address if any, your wet signature, and the words “Request for Exclusion” or a clear similar statement.
McLean Data Breach Settlement ATTN: Exclusion Request P.O. Box 25226 Santa Ana, CA 92799-9958
You can only exclude yourself, not anyone else.
How to Object to the McLean Settlement
Objecting keeps you in the class. You can’t object if you’ve opted out, but you can still file a claim if you do object. File your complete objection with the Clerk of Court by November 10, 2026, mail a copy to the administrator postmarked by that date, and meet all nine requirements listed in FAQ 16.
Clerk of Court, U.S. District Court for the Eastern District of Virginia, Richmond Division 701 East Broad Street, Richmond, VA 23219
McLean Data Breach Settlement ATTN: Objections P.O. Box 25226 Santa Ana, CA 92799-9958
Talk to a class action lawsuit attorney before November 10, 2026 if you’re considering either option. If identity theft has already cost you money, ask whether an identity theft lawsuit of your own makes sense.
McLean Mortgage Data Breach Settlement — Key Dates, 2026
| Milestone | Date |
| Cyberattack on McLean’s systems | On or around October 17, 2024 |
| McLean’s Notice Letters Began | June 11, 2025 |
| Settlement Proposed | UNVERIFIED — not listed on the administrator’s pages |
| Settlement Notice Mailing | September 11, 2026 |
| Claims Period Opens | UNVERIFIED — start date not stated (the online form is live) |
| Opt-Out Deadline | November 10, 2026 (postmarked) |
| Objection Deadline | November 10, 2026 (filed with the court and postmarked to the administrator) |
| Claim Filing Deadline | December 10, 2026 |
| Final Approval Hearing | December 10, 2026, 11:00 a.m. ET, Room 6100 in Richmond, or by Zoom at the court’s discretion |
| Expected Payment Date | UNVERIFIED — follows final approval and any appeals; no date given |
One catch. FAQ 7 says an extraordinary-loss claim needs the theft to be “directly caused” by the incident, but the claim login page says “more likely than not caused.” Those are different standards, so if you’re going for the $4,000, build your file to meet the stricter one.
What Should McLean Mortgage Data Breach Class Members Do Before December 10, 2026?
You have 38 days before the opt-out and objection deadline and 68 days before the claim deadline, so there’s no reason to wait. Most people should simply file.
McLean Mortgage Data Breach — Frequently Asked Questions, No. 3:25-cv-00461
Do I need a lawyer to file a McLean Mortgage data breach settlement claim?
No. File online with the LoginID and PIN from your notice, or mail the claim form to the administrator in Santa Ana, California. The court appointed David K. Lietz of Milberg, PLLC and A. Brooke Murphy of Murphy Law Firm as Class Counsel, and you aren’t charged for their services.
Is the McLean Mortgage data breach settlement legitimate?
Yes. The Eastern District of Virginia authorized the notice, and the court still has to decide whether to grant final approval at a hearing on December 10, 2026 at 11:00 a.m. ET in Richmond. Send questions to the administrator at (833) 200-6767, not the court.
When will McLean Mortgage settlement payments be sent?
Only after the court grants final approval and any appeals are resolved. The hearing is December 10, 2026, and the administrator says it doesn’t know whether appeals will be filed or how long they’d take. No payment date has been published.
What if I missed the McLean Mortgage claim deadline?
The only way to receive benefits is a valid, timely claim form, due online or postmarked by December 10, 2026. Do nothing and you get no benefits and give up the right to sue McLean over the released claims. Check the website, since hearing dates can change.
Will my McLean Mortgage settlement payment go on a 1099?
The settlement pages don’t address taxes. Payments over $600 may appear on a 1099, and extraordinary-loss claims can reach $4,000.00. Ask a tax professional about your own situation before you file your return.
How much will I get from the McLean Mortgage data breach settlement?
A flat $45.00, or up to $1,000.00 for documented losses and up to $4,000.00 for extraordinary losses, plus three years of credit monitoring. The pages list fixed amounts and no total fund. Lost time of up to $100.00 counts inside the $1,000.00 cap.
Can I claim the $45 payment and a loss payment together?
No. The $45.00 Alternative Cash Payment is claimed instead of any other payments, so pick based on whether you can document at least $45.00 in losses. Credit monitoring is separate, and every class member can claim it alongside any cash option.
How is the McLean credit monitoring different from what I was offered before?
McLean’s Maine filing says it first offered 12 months of IDX monitoring. The settlement offers three years of CyEx Financial Shield Complete one-bureau monitoring with $1 million of insurance coverage, and enrollment codes go out by email to everyone who claims it.
Sources Used in This McLean Mortgage Data Breach Article
- Settlement Administrator (Simpluris) — Settlement website home page, accessed October 3, 2026: https://mcleandatasettlement.com/
- Settlement Administrator (Simpluris) — FAQ page, accessed October 3, 2026: https://mcleandatasettlement.com/faq/
- Settlement Administrator (Simpluris) — Claim form login page, accessed October 3, 2026: https://mcleandatasettlement.com/form/claim
- Settlement Administrator (Simpluris) — Important Dates page, accessed October 3, 2026: https://mcleandatasettlement.com/dates/
- Office of the Maine Attorney General — Data Breach Notification, McLean Mortgage Corporation, consumer notice dated June 11, 2025: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e423ab1f-c575-44f8-b5fc-c02533be7338.html
Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement administrator website (Simpluris) and McLean Mortgage Corporation’s filing with the Maine Attorney General on October 3, 2026. Last Updated: October 3, 2026.
This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.
About the Author
Israr Ahmad is a legal content researcher with 4+ years of experience covering class action settlements and consumer rights cases. He has researched and published coverage of 2,500+ settlements using verified court records, settlement administrator filings, and government sources. Learn more about Israr.
