Managed Care of North America Agrees to Settlement Over Massive 2023 Data Breach

Managed Care of North America (MCNA Dental), along with MCNA Insurance Company and Healthplex, Inc., has agreed to a class action settlement resolving allegations that the dental benefits administrators failed to adequately safeguard sensitive personal and medical data during a early 2023 cyberattack.

The deal offers affected consumers up to $2,500 in compensation for documented out-of-pocket expenses resulting from the incident, alongside two years of free medical data monitoring and identity theft protection services. If you received a breach notice from MCNA stating your information was potentially compromised, you may be eligible to submit a claim for benefits before the upcoming deadline.

What Happened in the 2023 MCNA Dental Data Security Incident?

The class action lawsuit stems from a major cyber incident that took place between Feb. 26 and March 7, 2023. According to court filings, unauthorized third parties accessed MCNA’s computer network systems and compromised the highly sensitive personal, financial, and health records of millions of individuals across the United States.

Plaintiffs in the lawsuit alleged that MCNA Dental and its affiliated entities failed to deploy industry-standard cybersecurity practices, leaving patient records vulnerable to unauthorized exposure. The exposed files contained a wide variety of personal identifiers and private health data that could put affected individuals at ongoing risk for identity theft, fraud, and targeted scams.

What Sensitive Personal and Medical Information Was Exposed?

The scope of private data involved in the breach is extensive. Court documents reveal that unauthorized parties may have accessed both standard personal identification information and detailed health records.

Specific categories of compromised data include:

• Full names, residential addresses, phone numbers, and email addresses

• Dates of birth and Social Security numbers

• Driver’s license numbers and other government-issued identification IDs

• Health insurance information, including Medicare and Medicaid identification numbers

• Dental plan and group numbers

• Details regarding specific dental and orthodontic treatment care

If your sensitive details were swept up in this breach, the exposure of combined health, financial, and government identifiers creates a significant risk of medical and financial identity fraud.

How Much Compensation Can You Receive From the Settlement?

Under the terms of the settlement, class members who file a valid and timely claim form can seek reimbursement for out-of-pocket losses caused by the cyber incident. Individuals who suffered documented financial harm—such as unreimbursed bank fees, fraudulent charges, or professional fees incurred to resolve identity theft—can receive up to $2,500.

To qualify for out-of-pocket reimbursement, you must submit proof supporting your claim, such as account statements, receipts, or official correspondence showing the financial losses directly tied to the breach. Total payments for documented losses are capped at $250,000 across all class members, meaning individual payouts could be reduced on a pro-rata basis if total valid claims exceed the limit.

Free Medical Data Monitoring and Identity Theft Protection Offered

In addition to cash reimbursement for out-of-pocket expenses, all eligible class members can receive two years of CyEx Medical Shield Complete at no cost. This service provides medical data monitoring, identity theft protection, and identity restoration support.

Class members do not need to show proof of financial loss to receive this protection. Unique enrollment codes were included with the official settlement notices sent to impacted individuals. These protection codes are set to become active within 30 days after the settlement receives final court approval and becomes effective.

Who Is Eligible to Participate in the MCNA Class Action Settlement?

You may be eligible to participate in this class action settlement if you meet the following criteria:

• You are a living resident of the United States.

• You were sent a notice directly from MCNA, MCNA Insurance Company, or Healthplex, Inc. stating that your private information was potentially impacted during the February/March 2023 data breach.

The settlement covers affected individuals nationwide. If you received a breach notification letter in the mail or via email, you are considered a member of the settlement class.

Understanding Your Rights Under State Data Privacy Laws

This class action litigation, Crowe, et al. v. Managed Care of North America, Inc., et al., was brought in Florida federal court, highlighting the legal obligations healthcare organizations and dental insurers have under state and federal data protection standards. Entities handling protected health information (PHI) and personally identifiable information (PII) are required to maintain robust administrative and technical safeguards.

When companies fail to safeguard sensitive healthcare records, state consumer protection laws allow everyday people to seek legal accountability and compensation for the costs associated with protecting their identity after a breach.

How to File a Claim and Key Deadlines You Need to Know

If you are an eligible class member and wish to receive out-of-pocket loss compensation, you must complete and submit a valid claim form.

Follow these key steps and keep these deadlines in mind:

• Filing Options: You can submit your claim form online by visiting the court-approved settlement website at MCNADataBreachSettlement.com using the Class Member ID found on your settlement notice. Alternatively, you can download, print, and mail a paper claim form to the settlement administrator.

• Claim Submission Deadline: All claim forms must be submitted online or postmarked no later than Oct. 19, 2026.

• Final Approval Hearing: The court will hold a final fairness hearing on Nov. 16, 2026, to decide whether to grant final approval to the settlement agreement.

• Payment Timeline: Compensation and active monitoring services will begin only after the court grants final approval and any potential legal appeals are fully resolved.

When major corporations fail to protect your sensitive personal and medical data, you should not have to bear the financial burden alone. Taking advantage of available settlement benefits and identity monitoring is an important step toward protecting your privacy and holding negligent entities accountable.