MHCC Class Action Lawsuit Settlement Approved, McLaren Health Care Data Breach Victims Can Claim Up To $5,000 Before April 2026 Hearing
McLaren Health Care Corporation reached a class action settlement for victims of data breaches that occurred between July 28, 2023 through August 23, 2023, and between July 17, 2024 and August 3, 2024. The Court will hold a Final Approval Hearing on April 21, 2026, at 10:00 a.m. before the Honorable B. Chris Christenson of the 7th Judicial Circuit Court, Genesee County. Victims can claim up to $5,000 in documented losses or a pro-rata cash payment from the settlement fund.
You’re here because you received a data breach notice from McLaren or Karmanos Cancer Institute and need to know what compensation you’re owed, how to file a claim, and what the April 2026 court decision means for your rights.
What the MHCC Class Action Lawsuit Is About
In August 2023, ALPHV or BlackCat gained unauthorized access to the McLaren Health Care Corporation system through a ransomware attack accessing over 2 million patients’ personal medical information. This is not McLaren’s first data breach—in 2023, the healthcare system was hit by a separate ransomware attack linked to the ALPHV/BlackCat group that compromised the personal and medical information of 2.2 million people.
Then came a second breach. McLaren stated that an unauthorized presence had access to their network between July 17, 2024, and August 3, 2024, potentially compromising names, Social Security numbers, billing information, medical information, and health insurance information. This double hit triggered multiple lawsuits that were consolidated into the current settlement.
Who Is Eligible and What Damages Are Available
If you are a natural person whose Private Information may have been compromised as a result of one of the Data Breaches occurring between July 28, 2023 through August 23, 2023, and between July 17, 2024 and August 3, 2024, including those who were sent a notice by McLaren Health Care Corporation of either of the Data Breaches, you are a Class Member. You are eligible to make a claim for the following options: up to a $5,000 cash payment for reimbursement of Documented Losses supported by Reasonable Documentation that occurred on or after July 28, 2023.
For victims without documented losses, a flat pro rata cash payment is available, the amount of which will depend on the number of claims filed. All class members also qualify for credit monitoring services.
The Consolidated Lawsuits and Settlement Agreement
After the 2024 Data Breach, plaintiffs in the Federal Court Action amended their complaint to add claims related to the 2024 Data Incident, and plaintiffs Cindy Womack-Devereaux, Sue Ranney, and Kayle Gries filed two class action complaints that were consolidated before Judge Christenson in the State of Michigan, 7th Judicial Circuit, Genesee County Court. The settlement agreement was signed on January 12, 2026.
The Plaintiffs allege that McLaren failed to adequately protect their Private Information and that they were injured as a result. McLaren denies any wrongdoing, and no court or other entity has made any judgment of liability. By entering into the settlement, McLaren is not admitting that it violated any laws.
If you’ve been affected by other healthcare data breaches, understanding how these data breach class action lawsuits like 700credit work can help you protect your rights and claim compensation.
What You Must Know About This Settlement
Important Deadlines You Cannot Miss
Class Members must file an objection within 45 days following the Notice Date by March 16, 2026. The final approval hearing is April 21, 2026. You must file your claim before these deadlines or lose your right to compensation.
HIPAA and Data Breach Legal Standards
Healthcare providers must protect patient information under HIPAA (Health Insurance Portability and Accountability Act). Ransomware attacks targeting medical facilities have increased dramatically since 2020. When providers fail to implement basic security measures like multi-factor authentication or timely patch management, they may face civil liability under state negligence laws and consumer protection statutes.
Class action settlements in healthcare data breach cases typically range from $10 million to $100 million depending on the number of affected patients and severity of harm. The MHCC settlement falls within this standard range for breaches affecting under 3 million individuals.
What to Do Next
File Your Claim Before Deadlines
Visit www.MHCCSettlement.com to submit your claim online or call 1-844-685-4251 for assistance. The Settlement Administrator is located at MHCC Class Action Settlement, Attn: Claim Forms, 1650 Arch Street, Suite 2210, Philadelphia, PA 19103. You will need your Unique Notice ID if you received a mailed or emailed notice.
For documented losses, gather receipts for credit monitoring services, identity theft protection, time spent addressing the breach, and any fraudulent charges not reimbursed. Claims must be supported by Reasonable Documentation that losses occurred on or after July 28, 2023, are more likely than not a result of one of the Data Breaches, and were not otherwise reimbursed by another source.
Monitor Your Credit and Medical Records
Enroll in the free credit monitoring McLaren is offering. Check your credit reports from all three bureaus—Equifax, Experian, and TransUnion—for unauthorized accounts. Review medical records and Explanation of Benefits statements from insurers for signs someone is using your health insurance fraudulently.
Understand Your Legal Options
You can object to the settlement if you believe the terms are unfair, opt out if you want to pursue your own lawsuit, or do nothing and automatically participate. If you opt out, you cannot object to the Settlement and will not receive any payment.
Healthcare data breaches have become increasingly common. Similar class action lawsuits against Kaiser Permanente and other major healthcare systems demonstrate that patients have legal recourse when their protected health information is compromised.
Frequently Asked Questions
What is the MHCC class action lawsuit about?
The lawsuit alleges McLaren Health Care failed to adequately protect patient data during two separate ransomware attacks in 2023 and 2024. Nearly 3 million patients had sensitive health and personal information compromised.
Who qualifies as a class member?
Anyone whose private information may have been compromised during the July 28-August 23, 2023 breach or the July 17-August 3, 2024 breach, including those who received breach notifications from McLaren.
How much money can I get from the settlement?
Up to $5,000 for documented losses with proof, or a pro-rata cash payment from the settlement fund if you file without documented losses. Payment amounts depend on total claims filed.
What is the deadline to file a claim?
While the final approval hearing is April 21, 2026, claim deadlines are typically set after final approval. Check www.MHCCSettlement.com for the exact claim filing deadline.
Can I opt out and sue McLaren separately?
Yes. You must submit a written request for exclusion to the settlement administrator by the opt-out deadline specified in your notice. If you opt out, you receive no settlement payment but can pursue individual litigation.
What happened at McLaren Health Care?
BlackCat was a threat actor known to McLaren at the time the breach occurred and McLaren neglected to employ mitigation and defense strategies to protect their patients’ information from such an attack. The compromised data included Social Security numbers, medical records, and health insurance details.
Is this settlement final?
No. The Court in charge of this lawsuit still has to decide whether to approve the Settlement and it becomes final. No settlement benefits or payments will be provided unless the Court approves the settlement at the April 21, 2026 hearing.
Last Updated: February 2, 2026
Disclaimer: This article provides legal information about the MHCC class action lawsuit settlement based on court documents and official settlement notices and does not constitute legal advice.
Need help navigating complex class action settlements? Stay informed about deadlines, claim requirements, and your legal rights in data breach litigation.
Stay informed, stay protected. — AllAboutLawyer.com
About the Author
Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah