Loading story…
MCNA Dental agreed to a proposed multimillion-dollar settlement to resolve consolidated class action litigation stemming from a 2023 LockBit ransomware attack and data theft that exposed the personal, insurance, and health information of nearly 9 million people. Many of those affected were children enrolled in government-sponsored dental programs, and the incident also impacted more than 100 organizations connected to MCNA’s services, including state agencies and public benefit entities.
The settlement, filed in Florida federal court, provides up to $2,500 per class member for undocumented out-of-pocket losses, two years of medical data monitoring, and $1 million in identity theft coverage, along with administrative and legal costs. Plaintiffs alleged MCNA maintained negligent security practices and failed to protect sensitive data before LockBit allegedly demanded $10 million and published stolen information when the ransom was not paid; MCNA denied wrongdoing but agreed to continue taking reasonable steps to improve its security posture.
See attribution, scope, and your downstream exposure.
4 events from the most recent confirmed update back to the earliest known activity.
A New York State regulatory action imposed a $2 million fine on MCNA Dental in connection with the breach. This adds a government enforcement development beyond the previously documented attack details and civil settlement.
According to the lawsuits summarized in the references, LockBit demanded a $10 million ransom from MCNA Dental. After MCNA allegedly refused to pay, the group published the stolen data.
In 2023, MCNA Dental suffered a LockBit ransomware attack and data theft that affected nearly 9 million individuals. The breach also impacted more than 100 organizations connected to MCNA's services, including state agencies and public benefit entities.
On 2026-06-12, MCNA Dental filed a proposed multimillion-dollar settlement in Florida federal court to resolve consolidated class action litigation tied to the 2023 breach. The settlement includes up to $2,500 per class member for undocumented out-of-pocket losses, two years of medical data monitoring with $1 million theft coverage, and payment of administrative and legal costs.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
4 references tracked. Mallory keeps watching after this page renders.
govinfosecurity.com
Open sourcebankinfosecurity.com
Open sourcehealthcareinfosecurity.com
Open sourceismg-cdn.nyc3.cdn.digitaloceanspaces.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Michigan-based **McLaren Health Care** agreed to pay **$14 million** to settle consolidated class-action litigation tied to **two ransomware incidents**—one in **2023** (attributed in reporting to **ALPHV/BlackCat**) and another in **2024** (attributed to **INC Ransom**)—that collectively affected **more than 2.5 million** patients and employees. The lawsuits, filed in Michigan state court, alleged failures including **negligence** and **breach of contract** claims related to safeguarding sensitive data. Under the preliminary settlement terms, eligible class members may submit claims for up to **$5,000** in documented, unreimbursed losses and consequential expenses that are more likely than not tied to the breaches, and may also be eligible for a **pro rata** cash payment. A final court hearing to consider approval of the settlement is reported as scheduled for **April 21**; the two articles covering the McLaren matter are substantively the same report syndicated across *GovInfoSecurity* and *BankInfoSecurity*.
Jun 29, 2026
**Norton Healthcare** agreed to pay **$11 million** to settle a class-action lawsuit tied to a 2023 **ALPHV/BlackCat** ransomware-related data theft that reportedly involved **4.7 TB** of stolen data and impacted nearly **2.5 million** people. The preliminary settlement provides for reimbursement claims (up to **$2,500** for unreimbursed expenses), compensation for time spent responding to the incident (up to **$80**), and **three years of medical identity monitoring**, pending final court approval. Separately, Ohio-based **Kettering Health** began notifying current and former patients and affiliates about a **May 2025** ransomware and data theft incident claimed by the **Interlock** cybercrime group. Reporting indicates Interlock publicly listed Kettering Health on its leak site and claimed roughly **941–950 GB** of data, and Kettering previously warned patients about **scam calls** from fraudsters impersonating medical bill collectors seeking credit card payments—activity consistent with post-breach social engineering and fraud attempts.
Jun 29, 2026
Omni Family Health, a nonprofit network of community health centers in California, has agreed to pay $6.5 million to settle class action lawsuits stemming from a 2024 cyberattack that compromised the personal information of nearly 470,000 patients and employees. The breach, attributed to the ransomware group Hunters International, resulted in sensitive data being leaked on the dark web and prompted legal action from affected individuals across the United States. As part of the settlement, Omni Family Health will also implement enhancements to its data security program to prevent future incidents. The settlement covers all U.S. residents whose information was potentially exposed in the incident, with a specific subclass for California residents affected between August 2024 and January 2026. The organization, which operates about 40 health centers in four California counties, has faced significant scrutiny and is taking steps to address the fallout from the breach, including offering compensation to victims and committing to improved cybersecurity measures.
Jun 29, 2026