Gándara Data Breach Settlement (2026)
Data Breach · Mental Health Privacy · Claims Open

Gándara Mental Health Center Data Breach Settlement

Published June 25, 2026

Massachusetts residents notified of the June 2024 breach can claim a flat $60, or document larger losses up to $5,000, before the July 23, 2026 deadline.

Gándara Mental Health Center data breach settlement

What Is This Settlement About?

A proposed class action settlement has been reached with Gándara Mental Health Center, Inc., a Massachusetts behavioral health provider, to resolve claims arising from unauthorized third-party access to its network that was detected on or around June 20, 2024. According to reporting on the incident, the information potentially involved included names, addresses, dates of birth, driver's license numbers, Social Security numbers, and health information such as diagnoses, treatment, and health insurance details.

The lawsuit, captioned Eugene Mitchell v. Gándara Mental Health Center, Inc., was filed in Hampden County, Massachusetts, alleging the provider failed to adequately protect patient information. Gándara denies any wrongdoing, and the court has not decided who is right. Both sides agreed to settle, creating a $900,000 fund, to avoid the cost and uncertainty of continued litigation. If your information may have been involved in the incident, you may be eligible to file a claim before the July 23, 2026 deadline.

Status Claims Open
Claim Deadline July 23, 2026
Estimated Payout $60 flat, or up to $5,000 Flat $60 alternative cash · or up to $500 ordinary & up to $5,000 extraordinary documented losses · lost-time pay · plus 3 years of medical identity monitoring · $900K fund
Proof Required Yes Notice ID and Confirmation Code from your mailed notice to log in and file · documentation also required for ordinary and extraordinary loss claims

Who Qualifies?

The settlement class includes all individuals residing in Massachusetts whose private information was compromised in the data security incident Gándara Mental Health Center discovered in June 2024. About 17,543 people were notified. Excluded from the class are the Defendant and its officers and directors, any judges assigned to the case and their staff and families, and anyone found criminally culpable for the data security incident.

The simplest way to check your eligibility is to confirm whether you received a settlement notice, or to review the official settlement website at gandarasettlement.com.

How Much Can You Get?

Class members who submit a valid and timely claim can choose from several benefits:

• Alternative cash payment: a flat $60 payment, in lieu of filing for ordinary losses, extraordinary losses, or lost time.
• Ordinary losses: reimbursement of up to $500 with documentation, for out-of-pocket expenses incurred between June 20, 2024 and July 23, 2026 that are fairly traceable to the incident, such as bank fees, postage, phone charges, and the cost of credit reports, credit monitoring, or other identity-theft protection.
• Extraordinary losses: reimbursement of up to $5,000 with documentation for losses traceable to the incident, such as actual identity theft, supported by records like identity-theft reports, affidavits, police reports, or correspondence with financial institutions.
• Lost time: reimbursement of up to four hours at $25 per hour (up to $100) for attested time spent dealing with the incident.
• Medical identity monitoring: three years of CyEx Medical Shield Complete identity-protection coverage through one credit bureau, which includes $1,000,000 in identity-theft insurance. You can elect this whether you claim the $60 alternative payment or the documented-loss options.

Claims for ordinary and extraordinary losses require supporting documentation. Total payments are capped at $900,000; if valid claims exceed that aggregate cap, each class member's award is reduced pro rata so the total stays within the cap.

How to File a Claim

The fastest way to file is online through the official settlement website. To log in and file online, you enter the Notice ID and Confirmation Code printed on your personalized mailed notice, so have it handy. You can also download a paper claim form to complete and mail, or use the claim form that came with your notice. If you choose the documented ordinary or extraordinary loss options, attach the records that support your loss.

If you lost or never received your notice — or are not sure whether you are a class member — use the official settlement website to confirm your eligibility and request the information needed to file. Submit your claim at gandarasettlement.com before the deadline.

Important Deadline

The deadline to submit a claim is July 23, 2026, whether you file online or by mail (mailed claims must be postmarked by that date). July 23, 2026 is also the deadline to object to the settlement. The final approval hearing is scheduled for August 25, 2026 at 2:00 p.m. Eastern Time in Courtroom 4 at 50 State Street, Springfield, Massachusetts. Hearing details can change, so check the official settlement website for the latest.

Beware of Scams

Legitimate settlement administrators do not ask you to pay a fee to file a claim or to receive a payment. File only through the official settlement website and never share more information than the claim form requires.

If you have been affected by other data incidents, you may also have open claims — see our roundup of active data breach settlements.

Frequently Asked Questions

Who qualifies for the Gándara Mental Health Center settlement?

You qualify if you are a Massachusetts resident whose private information was compromised in the data security incident Gándara discovered in June 2024. About 17,543 people were notified.

How much can I get?

A flat $60 alternative cash payment, or up to $500 for documented ordinary losses and up to $5,000 for documented extraordinary losses, plus lost-time pay and three years of medical identity monitoring, paid from a $900,000 fund.

What is the claim deadline?

The deadline to submit a claim is July 23, 2026, and the final approval hearing is scheduled for August 25, 2026.

Is proof required?

Yes. You log in to the online claim form with the Notice ID and Confirmation Code from your notice, and documentation is required for ordinary and extraordinary loss claims.

Sources

• Official Settlement Website: Gándara Settlement.com
• Eugene Mitchell v. Gándara Mental Health Center, Inc., Civil Action No. 2479CV00652 — The Court in the Commonwealth of Massachusetts, Hampden County (Final Approval Hearing August 25, 2026)
Notice of Proposed Class Action Settlement (PDF)

Official Settlement Notice

Your browser does not support viewing PDFs inline. Download the PDF.



For more class actions keep scrolling below.
Settlement Amount $900,000 (fund)
Claim Deadline July 23, 2026
Estimated Payout $60 flat, or up to $5,000 + 3 yrs monitoring
Category Data Breach / Privacy
Case Title Eugene Mitchell v. Gándara Mental Health Center, Inc.
Case Number 2479CV00652
Court Commonwealth of Massachusetts, Hampden County
Final Approval Hearing August 25, 2026 at 2:00 p.m. ET Courtroom 4, 50 State Street, Springfield, MA
Administrator Angeion Group
Official Website Gándara Settlement.com

More on Medical & Health Data Breach Settlements