MCNA Dental has agreed to settle a class-action lawsuit stemming from a 2023 LockBit ransomware attack that affected nearly 9 million people.

The LockBit group gained access to MCNA’s network Feb. 22, 2023, and maintained access through March 7, 2023. The attackers exfiltrated roughly 700 gigabytes of data — including names, Social Security numbers, health insurance information and dental treatment records — and later published it after MCNA failed to pay a $10 million ransom.