MCNA's 8.9-Million-Person Settlement Has a $250,000 Cash Pool — the Benefit That Matters Needs No Claim Form

On August 13, 2026, Kroll Settlement Administration put the court-approved legal notice on the newswire — the publication half of a notice plan whose other half is ordinary mail to the class. Within days, searches for "MCNA data breach settlement" went from background noise to a breakout in the United States.

That pattern is worth naming, because it repeats with every large settlement: a notice wave does not mean something new happened. Nothing was decided in August. The case was settled months earlier, and the notice is simply the moment the court requires everyone to be told. What people are actually searching for is narrower than it looks — most of them are holding a letter or an email and want to know whether it is real, what it is worth, and what they have to do.

The underlying case is Crowe, et al. v. Managed Care of North America, Inc., et al., No. 0:23-cv-61065-AHS, in the U.S. District Court for the Southern District of Florida. It concerns potential unauthorized access to personal and health information on MCNA's systems between February 26 and March 7, 2023. MCNA began sending notification letters on May 26, 2023. The defendants deny all allegations, and no court has found that they did anything wrong.

Read the benefit terms side by side and the shape of this deal is immediately clear.

Two years of medical-data monitoring — CyEx's Medical Shield Complete — goes to settlement class members who do not opt out, without a claim form. You do have to enroll, but you do not have to file anything to be eligible. For the overwhelming majority of the class, this is the entire benefit.

Cash is a different story. The settlement provides a total of up to $250,000 for documented, unreimbursed out-of-pocket losses, capped at $2,500 per individual claim. And the official FAQ is explicit about what happens if demand exceeds supply: "Cash Payments will be reduced pro rata in the event the total dollar amount of all Valid Claims exceeds $250,000."

Put those two numbers together. A $250,000 pool at a $2,500 ceiling is fully consumed by 100 successful maximum claims. Against a class reported at roughly 8.9 million people, that is not a fund designed to pay a broad population — it is a backstop for the small number who can document real financial harm traced to the breach. For comparison, class counsel will ask the court to award attorneys' fees of up to $6,400,000 plus litigation costs of no more than $1,313,000; those amounts are paid separately by the defendants and do not come out of the $250,000.

None of that makes the settlement improper — non-cash relief is common in health-data cases, and monitoring has genuine value for medical identity theft. But anyone arriving here expecting a check should recalibrate: this is a monitoring settlement, not a payout settlement. File a claim only if you have documentation. Otherwise, enroll in the monitoring and skip the paperwork.

MCNA administers government-funded dental benefits through Medicaid and state children's health insurance programs. That is why the exposed records skew heavily toward minors, and why the settlement site carries an instruction most settlements never need: if the notice concerns a minor, the claim must be completed and submitted by the child's parent or court-appointed legal guardian.

The categories of information involved, per the official FAQ, include name, address, date of birth, telephone number, email address, Social Security number, driver's license or government ID number, health insurance details (plan name, insurer, member number), Medicaid and Medicare ID numbers, information about dental and orthodontic care, and plan or group numbers.

A child's Social Security number is the most durable identity-theft asset there is, precisely because nobody checks a nine-year-old's credit file for a decade. If the notice in your household names a child, the practical steps are the same ones that would apply to an adult, and they are free: place a credit freeze for the minor with all three bureaus, enroll them in the monitoring the settlement provides, and read insurance Explanation-of-Benefits statements for care that never happened.

October 19, 2026 is the single date to remember. It is the deadline to submit a claim form (online by 11:59 p.m. ET, or by mail postmarked that day), and it is also the deadline to exclude yourself or to object. The Final Approval Hearing is scheduled for November 16, 2026, when the court decides whether to approve the settlement and what to award class counsel.

Payment timing follows from that, and it is slower than most people expect. Benefits flow only after final approval and after any appeals are resolved — the official FAQ says so in as many words. Nobody can honestly promise you a date in 2026.

Mailed claims go to Settlement Administrator - 83443, c/o Kroll Settlement Administration, P.O. Box 225391, New York, NY 10150-5391. The court-authorized website is mcnadatabreachsettlement.com. Notice waves reliably attract imitation sites that harvest the exact data the breach already exposed, so treat any other domain, any request for a fee, and any request for your bank login as disqualifying. A legitimate administrator never charges you to file, and you never need a lawyer to claim — filing is free and takes minutes.