Mental Health Association Breach: Up to $5,000 Plus 3 Years of Credit Monitoring

In November 2024, Mental Health Association, Inc. suffered a cyberattack that left certain files containing people's private information accessible. That data may have included names, addresses, Social Security numbers, medical diagnoses or conditions, medications, medical record numbers, other medical details, dates of birth, and driver's license numbers.

People who sued claim MHA failed to adequately protect this information. MHA denies any wrongdoing, and no court has ruled on who is right. Rather than continue a lengthy legal battle, both sides agreed to settle.

The settlement has received preliminary approval, and a Final Approval Hearing is set for December 15, 2026, when the Court will decide whether to approve it fully. Payments will only be issued if the settlement is approved and any appeals are resolved.

You may qualify if your private information was accessible as a result of this incident. To be eligible for payment, you must submit a valid claim by November 19, 2026, either online or by mail.

To file online, you'll need to log in using the LoginID and PIN found on the notice you received by mail or email. If you've lost these, you can email [email protected] with your full name and mailing address to request them. Every claim must be verified and signed to confirm it is true and correct.

What you'll need to include depends on your claim type. Reimbursement for out-of-pocket losses requires supporting proof like receipts or bank statements. Claims for lost time require checking an attestation box and briefly explaining how the time was spent. If you're only requesting the flat cash payment or the free credit monitoring, no documentation is required. Note that the Settlement Administrator may still reach out for additional information before finalizing your claim.