Murfreesboro Medical Clinic Data Breach Settlement

Individuals whose private information may have been compromised as a result of the April 2023 data breach and who received a notice from Murfreesboro Medical Clinic.

Documentation of out-of-pocket expenses such as receipts, invoices, bank or credit card statements. A signed claim form under penalty of perjury is required. Handwritten receipts alone are insufficient.

Murfreesboro Medical Clinic (MMC) has agreed to a class action lawsuit settlement over claims it failed to prevent a 2023 data breach that compromised sensitive patient data.

The ransomware attack, which occurred in April 2023 and was disclosed in May, allegedly exposed private information including names, birth dates, Social Security numbers, health insurance details, and driver’s license numbers. According to plaintiffs, the breach was preventable and resulted from inadequate cybersecurity measures.

Although MMC denies any wrongdoing, it agreed to resolve the allegations through a class action settlement.

Under the terms of the settlement, class members may receive up to $500 for out-of-pocket expenses related to the breach. This includes identity theft losses, fraud, professional fees, credit monitoring costs, and up to two hours of lost time at $25 per hour. Additional compensation is available for lost time beyond two hours, subject to a $200,000 cap across all claims.

The settlement also includes two years of free credit and identity monitoring services, featuring real-time credit alerts, $1 million in identity theft insurance, and access to fraud resolution experts. MMC has also agreed to implement new cybersecurity protocols to help prevent future incidents.

To receive a payment, class members must submit a valid claim form by April 14, 2026. The deadline to object or request exclusion is December 15, 2025, and the final approval hearing is scheduled for January 16, 2026.