McLaren Health Care to pay $14M in data breach class action settlement
Summary
McLaren Health Care Corp. has reached a $14 million settlement regarding two ransomware attacks in 2023 and 2024 that compromised the personal information of approximately 2.8 million patients. The exposed data included names, social security numbers, birthdates, health insurance details, and medical data. Genesee County Circuit Court Judge Chris B. Christenson granted preliminary approval of the settlement on December 15th. The settlement fund will provide credit monitoring, identity theft protection, reimbursement for documented losses (up to $5,000), and additional cash payments to eligible class members. The settlement covers all U.S. residents affected by the breaches, and claim forms are available at MHCCSettlement.com with a filing deadline of April 29th. McLaren Health Care denies any wrongdoing but states that settling is in the best interest of its patients and organization, allowing them to focus on patient care and data security. The 2024 attack significantly disrupted clinical systems and electronic medical records for three weeks, and the 2023 breach was claimed by the cybercriminal group ALPHV, also known as BlackCat.
(Source:M Live Michigan )