McLaren Health Care to pay $14M in data breach settlement

The healthcare provider reached a class action settlement over two cyberattacks that exposed personal information.

Published on Feb. 14, 2026

Got story updates? Submit your updates here. ›

McLaren Health Care Corp., a healthcare provider based in Grand Blanc, Michigan, has reached a $14 million settlement over two cyberattacks in 2023 and 2024 that exposed personal information. The Genesee County Circuit Court granted preliminary approval of the class action settlement in December.

Why it matters

Data breaches and cyberattacks are an ongoing concern for healthcare organizations, which hold sensitive personal and medical information. This settlement highlights the financial and reputational costs that can result from such incidents, and the importance of robust cybersecurity measures to protect patient data.

The details

The two cyberattacks on McLaren Health Care in 2023 and 2024 exposed the personal information of an undisclosed number of individuals. The $14 million settlement will compensate those affected by the data breaches.

  • The first cyberattack on McLaren Health Care occurred in 2023.
  • The second cyberattack occurred in 2024.
  • The Genesee County Circuit Court granted preliminary approval of the $14 million class action settlement in December.

The players

McLaren Health Care Corp.

A healthcare provider based in Grand Blanc, Michigan.

Genesee County Circuit Court

The court that granted preliminary approval of the $14 million class action settlement.

Got photos? Submit your photos here. ›

What’s next

The judge in the case will make a final decision on the $14 million settlement in the coming months.

The takeaway

This settlement underscores the significant financial and reputational consequences that healthcare organizations can face due to data breaches, and the importance of prioritizing cybersecurity to protect patient information.