Mission Community Hospital $1.55M Data Breach Settlement, Check If You Qualify for a Payment, File by Aug 12 Concepcion, et al. v. Deanco Healthcare, LLC, No. 23STCV29292

The Mission Community Hospital data breach settlement is a $1,546,409.42 class action case where eligible patients who received a breach notice from Deanco Healthcare on or around November 21, 2023, can claim up to $5,000 by filing before August 12, 2026. The breach, executed by ransomware group RansomHouse, occurred on May 1, 2023, and impacted patients whose files contained names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account information, health insurance plan member IDs, claims data, and clinical information. If you were a Mission Community Hospital patient and received that notification, your money may be waiting.

Mission Community Hospital Data Breach Settlement — Key Facts

FieldDetail
Settlement Amount$1,546,409.42
Claim DeadlineAugust 12, 2026
Opt-Out / Objection DeadlineJuly 13, 2026
Who QualifiesIndividuals who received written notice from Deanco Healthcare or a Deanco affiliate on or around November 21, 2023, that their PII may have been compromised
Documented Loss PaymentUp to $5,000 per class member (with documentation)
California Statutory Payment$100 flat payment (California residents at time of breach only)
Residual Cash PaymentPro rata from remaining net fund (all class members)
Medical Monitoring2 years of Medical Monitoring Services (all class members)
Proof RequiredYes for documented losses; No for California statutory or residual payment
Settlement StatusPreliminary approval granted — pending final approval
Court & Case NumberSuperior Court of California, Los Angeles County — No. 23STCV29292
Specific Law AllegedNegligence; invasion of privacy; breach of implied contract; unjust enrichment; California statutory violations
AdministratorKroll Settlement Administration LLC — deancodatabreachsettlement.com — (833) 319-2344
Official Claim Websitedeancodatabreachsettlement.com
Final Approval HearingSeptember 9, 2026
Expected Payment Date120 days after final approval or claim processing is complete, whichever is later
Last UpdatedMay 26, 2026

Where Does the Mission Community Hospital Data Breach Settlement Stand Today?

  • The settlement has received preliminary approval from the Superior Court of California, Los Angeles County, and the notice period is now underway.
  • The claim filing deadline is August 12, 2026 — you must submit or postmark your claim form by that date.
  • The Final Approval Hearing is scheduled for September 9, 2026. Payments and medical monitoring information will be issued to approved claimants 120 days after the court grants final approval of the settlement or claim processing is complete, whichever is later.

Who Is Deanco Healthcare and Why Are They Facing a Data Breach Settlement?

Owned and operated by Deanco Healthcare, LLC, Mission Community Hospital has been providing healthcare in the San Fernando Valley community for more than 50 years, offering a full range of medical, surgical, and mental health care, including 24-hour emergency services. Mission Community Hospital is a healthcare provider based in Panorama City, California, with 75 medical/surgical beds, 10 critical care beds, and 60 beds for psychiatric care.

Because Mission Community Hospital operates as an acute care facility, it holds some of the most sensitive personal and medical records imaginable — diagnoses, insurance data, Social Security numbers, and clinical treatment histories. That made it an attractive target. According to DataBreaches.net, the breach was executed by the notorious cybercriminal group RansomHouse, which claimed to have stolen 2.5 terabytes of data from the hospital.

What Did the May 2023 Mission Community Hospital Ransomware Attack Expose?

Deanco Healthcare was alerted to potential unauthorized access to its IT network on May 1, 2023. An investigation confirmed that there was unauthorized access on that date and that the unauthorized party accessed files containing patient information while in the network.

A subsequent investigation determined that during this data security incident, a threat actor compromised certain database files that included addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account information, health insurance plan member IDs, claims data, and clinical information about care with Mission Community Hospital.

The cybersecurity incident impacted 269,847 people. DataBreaches.net noted that some of the stolen information was already being leaked as early as June 4, 2023. Despite the attack occurring in May 2023, breach notices did not reach patients until November 21, 2023 — more than six months later. That delay is a central part of what plaintiffs argued harmed affected individuals, who had no opportunity during that window to freeze their credit or take other protective steps.

For context on how similar hospital ransomware breach settlements are structured, see our coverage of the Gryphon Healthcare $2.8M data breach settlement — a nearly identical case involving medical billing data and delayed notification — and the Onsite Mammography $2.53M data breach settlement where over 357,000 patients faced the same documented-loss-plus-pro-rata structure with an identical August 2026 claim deadline.

The lawsuit asserts claims including negligence, invasion of privacy, breach of implied contract, unjust enrichment, and California statutory violations. Deanco denies all wrongdoing but agreed to settle to avoid the cost and uncertainty of continued litigation.

If you were a patient or had any other relationship with Mission Community Hospital and received a notice letter in November 2023, this case may directly affect you.

Related article: Krispy Kreme $1.6M Data Breach Settlement, Claim $75 to $3,500 Before June 22 — In re: Krispy Kreme Data Security Litigation, Case No. 3:25-cv-00434

Mission Community Hospital $1.55M Data Breach Settlement, Check If You Qualify for a Payment, File by Aug 12 Concepcion, et al. v. Deanco Healthcare, LLC, No. 23STCV29292

Who Qualifies for the Mission Community Hospital Data Breach Settlement?

Here is exactly how to know if this settlement covers you.

You qualify if:

  • You received a written notice from Deanco Healthcare, LLC, Mission Community Hospital, or a Deanco affiliate on or around November 21, 2023, stating that your personally identifying information may have been compromised in the May 1, 2023 breach
  • You are a current or former patient whose personal or medical information was stored in the hospital’s database files that were accessed during the attack

You do NOT qualify if:

  • You never received a notice from Deanco Healthcare or Mission Community Hospital about the May 2023 breach
  • You are a current officer, director, or affiliate of Deanco Healthcare, LLC
  • You are a judge presiding over this matter or an immediate family member of such a judge
  • You have already resolved individual claims against Deanco Healthcare arising from this incident

Mission Community Hospital Patients Outside California — Are You Still Covered?

The settlement class includes all individuals who were notified on or around November 21, 2023, by Deanco or a Deanco affiliate that their personally identifying information may have been compromised. While the case is filed in California state court and California residents receive an additional $100 statutory payment, the broader class is not limited to California residents. If you received the breach notification letter regardless of what state you currently live in, you are likely included.

If you are unsure whether you qualify for the Mission Community Hospital data breach settlement, a free consultation with a data privacy attorney can help you assess your situation before the August 12, 2026 deadline.

How Much Can Mission Community Hospital Settlement Class Members Recover?

Documented Loss Payment — Up to $5,000 With Supporting Documentation

Class members can claim up to $5,000 in documented, unreimbursed losses that are fairly traceable to the data breach and incurred on or after May 1, 2023.

Qualifying documented losses include:

  • Fraudulent charges or unauthorized transactions on financial accounts tied to exposed data
  • Fees paid to place credit freezes or obtain credit reports
  • Costs for credit monitoring or identity protection services purchased after the breach
  • Professional fees, notary charges, postage, and other out-of-pocket expenses directly connected to addressing the breach
  • Lost time spent dealing with breach-related issues, documented with receipts or records

Supporting documentation must be provided — bank statements, receipts, invoices, or records showing the expense and its connection to the breach.

California Statutory Payment — $100 Flat Cash, No Documentation Needed

Class members who were California residents at the time of the breach can submit to receive a $100 cash payment. This payment is available under California’s consumer protection statutes and requires no proof of actual loss — only that you were a California resident when the May 2023 breach occurred and received the notification letter.

Residual Pro Rata Cash Payment — Available to All Class Members

All class members can submit to receive a residual cash payment from the remaining net settlement fund after all other claims are paid. The payment amount will be determined by the total number of claims filed. The fewer people who file, the larger each residual payment. The more who file, the smaller — that’s how pro rata distributions work. Filing early and completely is the best way to protect your share.

Two Years of Medical Monitoring Services — No Extra Cost

The settlement pays for two years of Medical Monitoring Services for all class members who elect to receive them. Given that clinical information, health insurance IDs, and claims data were among the exposed records, medical identity monitoring is particularly valuable here. A fraudulent medical claim filed under your insurance ID can take years to discover and untangle — this benefit helps catch that early.

Payments over $600 may be reported to the IRS. Consult a tax professional about how any settlement payment affects your individual tax situation.

How to File Your Mission Community Hospital Data Breach Settlement Claim — Step by Step

Claim Deadline: August 12, 2026

  1. Visit the official settlement website at deancodatabreachsettlement.com. This is the only authorized website for this settlement, supervised by the court and controlled by Kroll Settlement Administration.
  2. Locate your Class Member ID from the official settlement notice mailed to you. If you cannot find your ID, call (833) 319-2344 or write to Kroll at: Concepcion et al. v. Deanco Healthcare, c/o Kroll Settlement Administration, P.O. Box 5324, New York, NY 10150-5324.
  3. Select your benefit options. You can claim any combination of: documented loss payment (up to $5,000), California statutory payment ($100 if applicable), residual cash payment, and/or two years of medical monitoring services.
  4. Upload documentation if claiming documented losses — bank statements, receipts, invoices, or other records showing unreimbursed expenses traceable to the breach.
  5. Submit your claim online or by mail, postmarked no later than August 12, 2026.
  6. Save your confirmation and keep a record of your submission. Kroll will contact you if additional information is needed.

Takes approximately 10–15 minutes to complete online. A Spanish-language notice is also available — call (833) 319-2344 or visit the settlement website.

Should Mission Community Hospital Class Members Opt Out or Object Before July 13, 2026?

What Does Opting Out of the Mission Community Hospital Settlement Mean for Your Rights?

Opting out is the only option that allows you to sue, continue to sue, or be part of another lawsuit against Deanco or certain other released parties for the claims this settlement resolves. If you exclude yourself, you give up the right to receive any settlement benefits. Opting out makes practical sense only if you have substantial documented damages well above $5,000 and have already consulted with a data privacy attorney about pursuing an individual claim. The opt-out deadline is July 13, 2026.

How to Object to the Mission Community Hospital Settlement Before July 13, 2026

Objecting means telling the court you believe the settlement terms are unfair while still remaining in the class. Your written objection must be postmarked by July 13, 2026, and submitted to the court. You can still file a claim form even if you object. If you are considering opting out or objecting, speaking with a data privacy attorney before July 13, 2026 is strongly recommended.

Mission Community Hospital Data Breach Settlement — Key Dates, 2026

MilestoneDate
Ransomware attack on Deanco Healthcare IT networkMay 1, 2023
RansomHouse begins leaking stolen data publiclyJune 4, 2023
Breach notification letters mailed to patientsNovember 21, 2023
Class action complaint filed, Case No. 23STCV29292December 2023
Settlement agreement reachedEarly 2026
Claims period opensMay 2026
Opt-Out / Objection deadlineJuly 13, 2026
Claim Filing DeadlineAugust 12, 2026
Final Approval HearingSeptember 9, 2026
Expected Payment DateTBD — 120 days after final approval and claim processing complete

Mission Community Hospital Data Breach Settlement — Frequently Asked Questions, No. 23STCV29292

Is the Mission Community Hospital data breach settlement legitimate?

 Yes. This website is authorized by the court, supervised by counsel to the parties, and controlled by the settlement administrator approved by the court. This is the only authorized website for this settlement. The administrator is Kroll Settlement Administration LLC, one of the largest and most established settlement administrators in the country.

Do I need a lawyer to file a Mission Community Hospital settlement claim? 

No. The claim form is available online at deancodatabreachsettlement.com and can be completed without an attorney. If you are considering opting out or believe your documented losses substantially exceed $5,000, speaking with a data privacy attorney makes sense.

When will Mission Community Hospital settlement payments be sent? 

Payments and medical monitoring information will be issued to approved claimants 120 days after the court grants final approval of the settlement or claim processing is complete, whichever is later. The Final Approval Hearing is September 9, 2026, so payments could begin in early 2027, assuming no appeals delay the process.

What happens if I missed the Mission Community Hospital settlement claim deadline?

 If you do not submit a claim by August 12, 2026, you will not receive any cash payment or medical monitoring from this settlement. If you do nothing, you will not receive any of the monetary settlement benefits, and you will give up your rights to sue Deanco and other released parties for the claims this settlement resolves.

Can I claim both the California statutory payment and the documented loss payment?

 Yes. The settlement fund pays for the California Statutory Payment for eligible class members and documented loss payments — these benefits can be claimed in combination. A California resident who has documented losses can claim the $100 statutory payment, the documented loss reimbursement up to $5,000, the residual cash payment, and the two years of medical monitoring — all on a single claim form.

Will my Mission Community Hospital settlement payment be reported to the IRS?

 Cash payments from data breach settlements may be taxable depending on the type and amount of compensation. Payments over $600 may require tax reporting. Consult a tax professional to understand how any payment affects your individual return.

What data was exposed in the Mission Community Hospital breach?

 The investigation confirmed that a threat actor compromised database files that included addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account information, health insurance plan member IDs, claims data, and clinical information about care with Mission Community Hospital. Each affected patient received a notice letter specifying which data elements were tied to their records.

Why did it take six months to notify patients after the May 2023 breach? 

Breach notification letters were not sent until November 21, 2023 — more than six months after the May 1 attack. Healthcare breach investigations often require months to identify every affected individual and determine exactly what data was exposed. However, plaintiffs argued that this delay deprived patients of the opportunity to protect themselves during that window. That delay is part of what the settlement resolves.

Sources Used in This Mission Community Hospital Data Breach Settlement Article

  • Official Settlement Website — Kroll Settlement Administration LLC, 2026: https://deancodatabreachsettlement.com

Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against the official settlement website at deancodatabreachsettlement.com, ClaimDepot, ClassAction.org, DataBreaches.net, and HIPAA Journal on May 26, 2026. Last Updated: May 26, 2026.

This article is for informational purposes only and does not constitute legal advice. For advice specific to your situation, consult a qualified attorney.

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah

Leave a Reply

Your email address will not be published. Required fields are marked *