McKenzie Health System Data Breach Settlement Offers Compensation to Affected Patients
A class action settlement has been reached with McKenzie Health System (operating as McKenzie Memorial Hospital) following a cyberattack in April 2025 that exposed the personal and medical data of over 58,000 current and former patients. The breach compromised sensitive information, including Social Security numbers, dates of birth, and medical records.
Eligible individuals those who received a breach notification may file claims for compensation under the settlement. Two payment options are available: up to $4,000 for documented out-of-pocket losses (e.g., identity theft, credit monitoring fees, or fraud-related expenses) incurred between April 14, 2025, and August 24, 2026, or a $50 one-time payment for those without documented losses. Additionally, all class members can opt for two years of free credit monitoring through CyEx Financial Shield Complete, which includes fraud alerts and $1 million in identity theft insurance.
Claims must be submitted by August 24, 2026, either online or via mail, using the login ID and PIN provided in the settlement notice. Approved payments will be distributed after the court’s final approval, expected following an October 6, 2026, hearing.
The lawsuit alleged that McKenzie Health System failed to adequately safeguard patient data, though the organization denies wrongdoing and settled to avoid prolonged litigation. The settlement fund will cover administrative costs, attorneys’ fees ($350,000), service awards for class representatives ($2,500 each), and payments to claimants.
Source: https://www.claimdepot.com/settlements/mckenzie-health-settlement
McKenzie Health System TPRM report: https://www.rankiteo.com/company/mckenzie-health-system
"id": "mck1782865651",
"linkid": "mckenzie-health-system",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '58,000',
'industry': 'Healthcare',
'name': 'McKenzie Health System (McKenzie Memorial '
'Hospital)',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Compensation claims and credit monitoring offered to '
'affected patients',
'data_breach': {'number_of_records_exposed': '58,000',
'personally_identifiable_information': ['Social Security '
'numbers',
'Dates of birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal data',
'Medical records']},
'date_detected': '2025-04-14',
'description': 'A class action settlement has been reached with McKenzie '
'Health System following a cyberattack in April 2025 that '
'exposed the personal and medical data of over 58,000 current '
'and former patients. The breach compromised sensitive '
'information, including Social Security numbers, dates of '
'birth, and medical records.',
'impact': {'data_compromised': 'Personal and medical data, including Social '
'Security numbers, dates of birth, and medical '
'records',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action settlement'},
'investigation_status': 'Settled',
'post_incident_analysis': {'root_causes': 'Alleged failure to adequately '
'safeguard patient data'},
'references': [{'source': 'Class action settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Breach notification to affected '
'patients'},
'title': 'McKenzie Health System Data Breach Settlement',
'type': 'Data Breach'}