M&R Printing Equipment Data Breach Settlement, Are You Eligible to Claim?

A cyberattack hit M&R Printing Equipment, Inc. in June 2024, exposing names, Social Security numbers, and credit card numbers of employees and others connected to the company. Plaintiff Eric Rosynek filed a class action lawsuit, and M&R agreed to settle. U.S. residents whose personal information the breach compromised may claim up to $7,080. The claim deadline is May 26, 2026.

Quick Facts

Current Status & What Happens Next

• The Circuit Court of DuPage County, Illinois, has not yet issued final approval — the Final Approval Hearing is scheduled for July 8, 2026, at 9:00 a.m. Central Time.
• The opt-out and objection deadline is April 27, 2026. Class members who want to preserve their right to sue M&R separately must submit an exclusion request by that date.
• Payments will distribute after final approval and any appeals conclude, estimated no earlier than late 2026.

What Is the M&R Printing Equipment Lawsuit About?

The lawsuit centers on a targeted cyberattack against M&R Printing Equipment’s computer systems that occurred in June 2024. The attacker accessed files containing sensitive personal information, including names, Social Security numbers, and credit card numbers.

M&R mailed data breach notification letters to impacted individuals on August 16, 2024. The company is headquartered in Roselle, Illinois, and employs over 500 individuals.

Plaintiff Eric Rosynek alleged that M&R failed to take adequate steps to protect the sensitive data it stored. M&R denies all wrongdoing, but both parties agreed to settle to avoid the costs and uncertainties of continued litigation. The case, Rosynek v. M&R Printing Equipment, Inc., Case No. 2025CH0000278, is pending in the Circuit Court of DuPage County, Illinois.

Who Is Eligible to File a Claim?

The court defined the class as all individuals residing in the United States whose personally identifiable information (PII) was compromised in the data breach discovered by M&R Printing Equipment in June 2024, including all those who received notice of the breach.

• You may qualify if you received a data breach notification letter from M&R Printing Equipment dated on or around August 16, 2024.
• You may qualify if your name, Social Security number, or credit card number appeared in M&R’s systems and was exposed during the June 2024 cyberattack.
• You may qualify if you reside in the United States and your PII was part of the compromised files.
• You may not qualify if you are an M&R officer, director, or affiliated company employee excluded by the settlement terms.
• You may not qualify if you have already excluded yourself (opted out) from this settlement.

How Much Can You Receive?

M&R’s settlement offers four benefit options, and class members who do not elect the alternative cash payment may choose among credit monitoring and reimbursement benefits.

Option 1 — Credit Monitoring (no cash required) Class members who skip the alternative cash payment can enroll in two years of CyEx Financial Shield Total, which includes $1 million of financial fraud insurance and monitoring for fraud, identity theft, and unauthorized financial transactions.

Option 2 — Ordinary Losses (with proof) Class members who incurred documented out-of-pocket expenses due to the data breach can recover up to $2,000. Eligible expenses include fees for credit reports, credit monitoring, freezing or unfreezing credit, replacing IDs, and postage costs. Losses must have occurred between June 6, 2024, and May 26, 2026.

Option 3 — Extraordinary Losses (with proof) Class members who suffered identity theft or fraud losses traceable to the breach may claim up to $5,000. Supporting documentation such as police reports, bank statements showing unreimbursed fraudulent charges, and insurance correspondence is required.

Option 4 — Lost Time Class members who spent time responding to the data breach — such as changing passwords, investigating suspicious account activity, or researching the incident — may claim up to four hours at $20 per hour, for a maximum of $80. A brief written description of the time spent is required.

Option 5 — Alternative Cash Payment (no proof) Instead of credit monitoring and reimbursement benefits, class members may choose a one-time $50 cash payment with no proof required.

The maximum a single claimant can recover across ordinary and extraordinary losses combined is $7,080 ($2,000 + $5,000 + $80).

How to File a Claim

Step 1 — Visit the official settlement website at mrdatasettlement.com.

Step 2 — Enter your unique ID and PIN from the settlement notice mailed to you on or around February 25, 2026.

Step 3 — Select your payout option: credit monitoring + reimbursement or the $50 alternative cash payment.

Step 4 — Upload supporting documentation if claiming ordinary losses (up to $2,000) or extraordinary losses (up to $5,000). Acceptable proof includes receipts, bank statements, police reports, and insurance correspondence.

Step 5 — If claiming lost time, include a brief written description of how you spent that time addressing the data breach.

Step 6 — Submit your claim and save your confirmation number for your records.

Alternatively, download the claim form at the official site and mail it to: M&R Data Incident Settlement c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958.

Estimated time to complete: 5–10 minutes.

Important Deadlines & Dates

Frequently Asked Questions

Do I need a lawyer to file a claim? 

No. Class members do not need their own attorney to file a claim. The Court has already appointed Cassandra P. Miller of Strauss Borrelli PLLC as Class Counsel to represent all class members at no charge. You may hire your own lawyer, but it is not required and you would pay their fees yourself.

Is this settlement legitimate? 

Yes. The settlement is pending in the Circuit Court of DuPage County, Illinois, under Case No. 2025CH0000278, and is administered by Simpluris, a court-appointed settlement administrator. The official website is mrdatasettlement.com. Always verify the URL before submitting any personal information.

When will I receive my payment?

 The settlement administrator will issue payments after completing claim processing, or approximately 91 days after the court grants final approval of the settlement, whichever is later. The Final Approval Hearing is July 8, 2026, so payments are unlikely to arrive before late 2026.

What if I missed the claim deadline? 

The claim deadline is May 26, 2026. If you miss that date, you will not receive a payment from this settlement. You will also give up your right to sue M&R separately regarding the data breach unless you opted out before April 27, 2026.

Will this settlement payment affect my taxes? 

Settlement payments may be considered taxable income depending on the nature of the award. Consult a qualified tax professional for guidance on your specific situation, as tax treatment can vary based on the type of loss claimed.

What personal information was actually exposed?

 The compromised files may have contained personal information such as names, Social Security numbers, and credit card numbers. The exact scope of exposure varies by individual, and the breach notification letter you received details which of your specific data types were involved.

Can I claim both ordinary losses and extraordinary losses? 

Yes, but the two categories must cover different expenses. Extraordinary losses must not already be covered by your ordinary losses claim, and you must show you tried to prevent the loss or seek reimbursement through existing insurance before claiming extraordinary losses.

What is the $50 alternative cash payment, and who should choose it? 

The $50 alternative cash payment is a flat one-time option for class members who choose not to enroll in credit monitoring and reimbursement benefits. No proof of loss is required. This option suits class members who did not incur out-of-pocket expenses but still want a straightforward payment.

Sources & References

• Official Settlement Website: mrdatasettlement.com
• Settlement FAQ (Simpluris): mrdatasettlement.com/faq
• New Hampshire Attorney General – M&R Breach Notice: Strauss Borrelli PLLC Investigation

Last Updated: March 10, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah