A $2.9 million settlement is now available for people whose personal information may have been exposed in the Communication Federal Credit Union (CFCU) data breach that occurred from Dec. 31, 2023 to Jan. 11, 2024. If you received a data breach notice—or believe your info was affected—you may qualify for cash compensation, reimbursement for losses, and free identity protection.
Here’s everything you need to know to take action before the deadlines.
Why is there a lawsuit?
The case, In re Communication Federal Credit Union Data Breach Litigation (Case No. CJ-2024-5388), stems from a targeted cyberattack that hit CFCU’s systems between Dec. 31, 2023 and Jan. 11, 2024.
During that incident, files containing sensitive information may have been accessed, including:
Names
Dates of birth
Addresses
Social Security numbers
Driver’s license numbers
Bank account details
Debit/credit card numbers
Plaintiffs claim CFCU failed to use reasonable cybersecurity measures to prevent the attack.
CFCU denies wrongdoing but agreed to the $2.9 million settlement to avoid the cost and uncertainty of continuing litigation.
Who qualifies?
All U.S. residents whose personal information was potentially exposed in the CFCU data breach between December 31, 2023 – January 11, 2024. This includes anyone who received a CFCU data breach notification letter.
How much can people get?
Class members can choose from two benefit types:
1. Reimbursement for Out-of-Pocket Losses (Up to $7,500)
Available for documented expenses related to the breach, such as:
Fraud or identity theft losses
Replacement IDs or bank cards
Credit-related fees
Phone, postage, or other communication costs
Professional services (ex: financial advisors, notaries)
Proof (receipts, bank statements, etc.) is required.
2. Cash Payment (Estimated ~$125)
Class members who did not experience out-of-pocket losses can receive a pro rata cash payment from the settlement fund. The estimate is around $125, but the final amount depends on the number of claims.
3. Free Identity Theft Protection
All class members can claim three years of credit monitoring and identity protection, including:
$1 million in identity theft insurance
Ongoing monitoring services
What Are Your Options?
| Your Option | What It Means | Deadline |
|---|---|---|
| Submit a Claim | Receive cash or reimbursement up to $7,500 + 3 years of identity protection. | Dec. 22, 2025 |
| Opt Out | Get no settlement benefits but keep your right to sue CFCU separately. | Nov. 21, 2025 |
| Object | Stay in the settlement but tell the Court what you disagree with. | Nov. 21, 2025 |
| Do Nothing | Stay in the class, get no benefits, and give up your right to sue. | No deadline |
| Final Approval Hearing | Court reviews the settlement. | Jan. 7, 2026 |
How to File a Claim
To receive benefits, you must submit a valid claim form by December 22, 2025.
Submit Online (Fastest): File directly through the official settlement website.
Submit by Mail:
Send your completed claim form to:
CFCU Data Incident Settlement
c/o Settlement Administrator
P.O. Box 25226
Santa Ana, CA 92799
Email: [email protected]
Phone: 844-496-1149
Submit your claim by December 22, 2025 to secure your cash payment, reimbursement, or free identity protection.
