People whose personal information was potentially compromised in the October 2024 cyberattack on McLean Mortgage Corporation may qualify to claim a $45 cash payment or up to $4,000 in documented losses, plus three years of credit monitoring, from the McLean Mortgage data breach class action settlement. Claims close December 10, 2026, the same day as the final approval hearing.
Current Status
Claims are open. The deadline to file is December 10, 2026; the official sources give a date only, with no time of day for online claims. The U.S. District Court for the Eastern District of Virginia granted preliminary approval on August 12, 2026, and the final approval hearing is scheduled for December 10, 2026 at 11:00 a.m. Eastern Time. No payment date has been announced; payments are made only after final approval and any appeals.Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Changed Recently?
Notices began going out to class members on September 11, 2026, opening the claim period. Judge Roderick C. Young granted preliminary approval on August 12, 2026, after a July 27, 2026 hearing, finding the settlement likely to be approved as fair, reasonable and adequate and appointing Simpluris as the settlement administrator.The case, In re McLean Data Breach Litigation, grew out of a cyberattack McLean Mortgage Corporation says it detected on its network on or around October 17, 2024. After reviewing the affected files, the mortgage lender began notifying people on or about June 11, 2025 that names, Social Security numbers, driver's license numbers, financial account numbers, passport numbers and health insurance information may have been accessed, with the data varying by person. In November 2024, the Black Basta ransomware group publicly claimed responsibility for the attack, according to cybersecurity reporting at the time; McLean had not verified that claim. Several lawsuits followed and were consolidated in October 2025. McLean denies any wrongdoing, and the court has not decided who is right.
Who Qualifies?
The settlement class is all living persons residing in the United States whose personally identifiable information was potentially compromised in the data incident McLean experienced on or around October 17, 2024, including everyone who was sent a notice letter about it. The settlement agreement estimates the class at about 30,453 people, the same number McLean reported notifying. The notice states that anyone who received notice of the settlement or of the breach is a class member according to McLean's records.Excluded are McLean's officers and directors and entities it controls; its affiliates, legal representatives, attorneys, successors, heirs and assigns; and the judge assigned to the case, the judge's family and staff.
How Much Can You Get?
Every class member can claim three years of CyEx Financial Shield Complete one-bureau credit monitoring, which includes $1 million in financial fraud insurance. On top of that, a class member chooses between documented reimbursement and a flat cash payment:• Ordinary losses: up to $1,000 for documented, unreimbursed out-of-pocket costs caused by the breach, such as fees for credit reports, credit monitoring or credit freezes, replacement IDs, and postage. This tier also covers up to four hours of lost time at $25 an hour ($100 maximum), claimed with a signed description of how the time was spent; lost time counts toward the $1,000 cap.
• Extraordinary losses: up to $4,000 for documented, unreimbursed money lost to identity theft or fraud directly caused by the breach, where the class member tried to recover the loss through insurance or a bank's fraud policy.
• Alternative cash payment: a one-time $45, instead of all the other cash benefits, with no documentation or explanation required.
Losses must have occurred between October 17, 2024 and December 10, 2026. The settlement is claims-made: McLean or its insurer pays each approved claim at the amounts above, rather than splitting a fixed fund, so there is no total settlement amount and no pro rata reduction. McLean also pays the notice and administration costs, the attorneys' fees and costs class counsel will request ($250,000), and $2,500 service awards for each class representative, all separately from class members' benefits and subject to court approval.
What Proof or Notice ID Is Required?
The online claim form opens only with the LoginID and PIN printed on the notice McLean's settlement administrator sent to each class member. The settlement website tells anyone who cannot find them to request them from the administrator by providing their full name and mailing address. The downloadable paper claim form asks for the LoginID only if known, but filing online requires both credentials.The $45 payment and the credit monitoring need no receipts. Ordinary and extraordinary loss claims need third-party documentation, such as receipts, bank statements, police reports or submitted insurance claims; personal notes can support a claim but are not enough on their own. Every claim is signed under penalty of perjury and may be checked by the administrator.
What Is the Deadline?
Online claims must be submitted by December 10, 2026. The notice and the settlement agreement say a mailed claim form must be postmarked by December 10, 2026, while the printed claim form says it must be received by that date, so mail a paper form well ahead of the deadline. Requests to opt out and objections are due November 10, 2026. No timezone is given for any of these deadlines.How Do You Take Action?
File on the official McLean Data Settlement website using the LoginID and PIN from the notice, or download the claim form there and mail it. The claim form asks which cash option to take and whether to enroll in credit monitoring, and offers payment by PayPal, Venmo, Zelle, virtual prepaid card or paper check. Credit monitoring enrollment codes are sent to the email address on the claim. Submit only one claim per person.A class member who wants to keep the right to sue McLean separately over the breach must mail a signed request for exclusion by November 10, 2026, following the instructions in the notice; anyone who opts out receives no settlement benefits.
What Happens Next?
The court will hold the final approval hearing on December 10, 2026 at 11:00 a.m. Eastern Time in Richmond, Virginia, or by video at the court's discretion, and will rule on the settlement, class counsel's fee request and the service awards. If the court approves the settlement, payments and credit monitoring codes go out only after any appeals are resolved. The settlement agreement then gives the administrator up to 75 days after claims are finalized to send payments, and a payment not cashed within 90 days becomes void.Sources and Verification
• McLean Data Settlement, official settlement website• Notice of Proposed Class Action Settlement
• Claim Form and Release
• Settlement Agreement, ECF No. 36-1 (filed July 9, 2026)
• Order Granting Preliminary Approval, ECF No. 39 (August 12, 2026)
• Comparitech, McLean Mortgage breach notification report (June 2025)
Questions
Can I take the $45 payment and also claim documented losses?
No. The $45 alternative cash payment is offered instead of every other cash benefit, so a class member who chooses it cannot also claim ordinary losses, extraordinary losses or lost time. The three years of credit monitoring is separate and can be claimed alongside any cash option, including the $45.
I lost my McLean settlement notice. How do I get my LoginID and PIN?
The settlement website says a class member who cannot find the LoginID and PIN can ask the administrator, Simpluris, to resend them by giving their full name and mailing address. Use the contact page on McLeanDataSettlement.com. A printed claim form can also be downloaded from the website and mailed, and it asks for the LoginID only if known.
Will the $45 payment shrink if many people file?
The settlement is claims-made: McLean pays each approved claim at the amounts the agreement sets rather than dividing a fixed fund, and it pays administration costs, attorneys' fees and service awards separately. The settlement agreement does not provide for reducing payments based on how many people file.
What if I mail a paper claim form?
The notice and the settlement agreement say a mailed claim form must be postmarked by December 10, 2026, but the printed claim form itself says claims must be received by that date. Mailing well before the deadline avoids depending on which reading applies. Online claims are due by December 10, 2026.
How long do I have to cash a McLean settlement payment?
Under the settlement agreement, a payment that is not cashed or negotiated within 90 days of its issue date becomes void, and the money goes back to McLean or its insurer. A class member can ask for one reissued payment during that 90-day period, and a reissued payment must be cashed within 30 days.
