McLean Mortgage data breach settlement
In re McLean Data Breach Litigation
Also known as McLean Mortgage Corporation
The lawsuit was about an October 2024 cyberattack on McLean Mortgage that may have exposed SSNs.
Copied from the official notice. Last compared Nov 7, 2026.
- You could get
- $45 cash Up to $4,000 for fraud losses with proof.
Source
“one-time $45.00 cash payment”
From the administrator site: Official online claim form login page. Last compared Nov 7, 2026.
- You need
- Receipt pays more Needs the code from your notice LoginID and PIN from your notice (to file online); without them, email info@McLeanDataSettlement.com with your name and address Some paperwork: describes the claim form only
Source
“To start your online claim form, you must login with your LoginID and PIN. You can find your LoginID and PIN on the Notice that was sent to you. If you are unable to locate your ID and PIN, please contact us by emailing info@McLeanDataSettlement.com. Please request your LoginID and PIN by providing your full name and mailing address. ... If you are claiming for Ordinary Documented Losses and Expenses you need to submit proof, like receipts, to show how much you spent or lost and for Extraordinary Losses, you need to submit proof, proof, like police reports, submitted insurance claims, or receipts, to show how much you spent or lost and that your loss was the result of actual fraud or identity theft. You can also provide notes or papers you made yourself to explain or support other proof, but those notes or papers alone are not enough to make a valid claim.”
From the administrator site: Official online claim form login page. Last compared Nov 7, 2026.
- Who can file
- Affected by McLean Mortgage's October 2024 data incident
Source
“The court has defined the Class this way: “All living persons residing in the United States whose PII was potentially compromised in the Data Incident experienced by McLean on or around October 17, 2024, including all persons who were sent a notice letter regarding the Data Incident.” ... Excluded from the Class are: (1) McLean’s officers, directors, and entities in which McLean has a controlling interest; (2) McLean’s affiliates, legal representatives, attorneys, successors, heirs, and assigns; and (3) the Judge in this case, and the Judge’s family and staff.”
From the administrator site: Official long-form notice (PDF on official site's document host). Last compared Nov 7, 2026.
- Where
- Anywhere in the U.S.
Source
“All living persons residing in the United States whose PII was potentially compromised in the Data Incident experienced by McLean on or around October 17, 2024, including all persons who were sent a notice letter regarding the Data Incident.”
From the administrator site: Official long-form notice (PDF on official site's document host). Last compared Nov 7, 2026.
- Time to file
- About 4 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: mcleandatasettlement.com. Last compared Nov 7, 2026.
Free. The official site never charges.
Quick answers
How much is the McLean Mortgage data breach settlement payout?
$45 cash. Up to $4,000 for fraud losses with proof.
Where is the McLean Mortgage data breach settlement claim form?
On the official site, mcleandatasettlement.com. Filing is free. The last day to file is Dec 10, 2026.
When will the McLean Mortgage data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Dec 10, 2026.
Is the McLean Mortgage data breach settlement legit?
The settlement administrator (the company that handles claims) is Simpluris, and the official site is mcleandatasettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if you live in the U.S. and your data was potentially compromised in McLean Mortgage's October 2024 data incident.
It covers everyone who was sent a notice letter about the incident.
You are not included if you are a McLean officer, director or affiliate, or the judge in the case or the judge's family or staff.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
All living persons residing in the United States whose PII was potentially compromised in the Data Incident experienced by McLean on or around October 17, 2024, including all persons who were sent a notice letter regarding the Data Incident.
From the administrator site: Official long-form notice (PDF on official site's document host)
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
Official payout table
The amounts the settlement itself sets. We do not work out a personal amount.
| Option and condition | Amount |
|---|---|
| Out-of-pocket losses you can show with paperwork, including lost timeThe most one claim can get | Up to $1,000 |
| Lost time (up to 4 hours at $25 an hour, within the $1,000 cap)The most one claim can get | Up to $100 |
| Documented identity theft or fraud lossesThe most one claim can get | Up to $4,000 |
| Alternative cash payment (instead of all other cash options)Set amount | $45 |
Take the $45 payment or the other cash options, not both. Losses need proof such as receipts; notes you made yourself are not enough alone.
Ordinary Documented Losses and Expenses. If you incurred actual, documented, and unreimbursed out-of-pocket expenses due to the Data Breach, you can get back up to $1,000.00. The losses must have occurred between October 17, 2024, and December 10, 2026. ... Extraordinary Losses. If you lost money because of identity theft or fraud, you can get back up to $4,000.00. ... Class Members who spent time responding to problems caused by the Data Breach may claim up to four hours, at $25.00 per hour, for a maximum of $100.00. ... If you claim Ordinary Documented Losses and Expenses, the combined total is capped at $1,000.00. ... Alternative Cash Payment. Instead of any other payments, you may claim a one-time $45.00 cash payment.
From the administrator site: Official long-form notice (PDF on official site's document host)
Estimates can change with the number of valid claims and court deductions. Guidance only.
How to file
-
Find the code from your notice
- LoginID and PIN from your notice (to file online); without them, email info@McLeanDataSettlement.com with your name and address
-
Gather what you need
No proof of purchase is required.
- For out-of-pocket losses: proof such as receipts; notes you made yourself are not enough alone
- For fraud or identity theft losses: proof such as police reports, insurance claims or receipts
-
File online, or by mail
At mcleandatasettlement.com, by Dec 10, 2026. Filing is free.
Or mail a paper claim form to:McLean Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799
The deadline note says: “By mail, the notice and claim page say postmarked no later than December 10, 2026, but the paper claim form says received by that day, so mail early.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Dec 10, 2026.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- In re McLean Data Breach Litigation
- Court
- United States District Court for the Eastern District of Virginia, Richmond Division
- Case number
- 3:25-cv-00461
- Administrator
- Simpluris
- Official site
- mcleandatasettlement.com
- Full payout terms
- $45 cash, or up to $1,000 and $4,000 for documented lossesA one-time $45.00 cash payment with no proof needed, or instead: up to $1,000.00 back for documented out-of-pocket losses (lost time of up to four hours at $25.00 per hour, $100.00 at most, counts toward that $1,000.00 cap) and up to $4,000.00 back for documented losses from identity theft or fraud. Losses must have occurred between October 17, 2024 and December 10, 2026. Three years of CyEx Financial Shield Complete credit monitoring may also be claimed.
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (ahead) source document
- Objection deadline
- (ahead) source document
- Final approval hearing
- (ahead) source document
The court’s exact words
All living persons residing in the United States whose PII was potentially compromised in the Data Incident experienced by McLean on or around October 17, 2024, including all persons who were sent a notice letter regarding the Data Incident.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The settlement concerns a targeted cyberattack on McLean Mortgage Corporation's computer systems in October 2024, in which files that may have held names, Social Security numbers, driver's license numbers, financial account numbers, passport numbers and health insurance information were potentially accessed. Per the notice, the class is living people residing in the United States whose personal information was potentially compromised in the incident (on or around October 17, 2024), including everyone sent a notice letter. Excluded: McLean's officers, directors and entities it controls, its affiliates, legal representatives, attorneys, successors, heirs and assigns, and the judge and the judge's family and staff. Read the notice for the full definition.
Sources and checks (4)
Every fact people act on was copied from the official source and compared with it. How we check
- Official long-form notice (PDF on official site's document host) administrator site
- Official online claim form login page administrator site
- Official paper claim form (PDF on official site's document host) administrator site
- Official settlement website home page administrator site
What changedLast change Oct 27, 2026
- Page created. Claims open until December 10, 2026. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.
Opting out
To leave the settlement and keep your right to sue on your own, follow the official notice by Nov 10, 2026. If you opt out, you get no payment. Opting out and objecting have separate rules; we cannot tell you which is right for you.