Carter Federal Credit Union - Data Breach Class Action Settlement

Data Breach · Claims Open

Current Status

Claims are open. The deadline to file is November 19, 2026, online, by email or postmarked. The deadlines to opt out or to object fall a full month earlier, on October 20, 2026. The Court has scheduled a Final Approval Hearing for November 30, 2026 at 9:30 a.m. Central Time in Shreveport, Louisiana, and the settlement has not been approved yet. No payment date has been announced: the Notice says payments are distributed only if the Court grants final approval and after any appeals are resolved, and that it is not known whether appeals will be filed. If a notice reached you, it carries the Login ID and PIN you need to file online.

What Changed Recently?

The settlement is newly open to claims. Carter Credit Union d/b/a Carter Federal Credit Union has agreed to resolve Ellis, et al. v. Carter Credit Union d/b/a Carter Federal Credit Union, Case No. 662980-C, in the 1st Judicial District Court for the Parish of Caddo, Louisiana, and the Court has authorized notice to the class. Simpluris is administering it, and the claim portal, the long-form notice, the claim form and the settlement agreement are live on the official settlement website.

Carter Credit Union denies that it did anything wrong, and the Court has not decided who is right. The Notice states that both sides agreed to settle to avoid the costs, risks, disruptions and uncertainties of continuing the litigation. No finding of liability has been made.

What the Case Is About

According to the Notice, the case concerns a targeted cyberattack on Carter Credit Union's computer systems in June 2025, during which files containing private information were accessed. The Class definition dates the incident to on or about June 25, 2025.

The Notice says those files may have contained names, addresses, Social Security numbers, driver's license and government-issued ID numbers, financial information such as account numbers and credit or debit card numbers, medical information, health insurance information, dates of birth, and other personally identifiable or protected health information the credit union collected and maintained.

The financial fields are what make this one different from a typical retailer breach. A credit union holds account numbers alongside the Social Security number, date of birth and government ID that a fraudster needs to pass identity verification on a new account — the combination that makes account takeover and new-account fraud possible rather than just card fraud. Cards get reissued; the rest of that file does not change. The three years of monitoring offered here is a year longer than most breach settlements provide, which fits the data involved.

The Notice also mentions that Carter Credit Union's records indicate class members are entitled to benefits, and that some people may have received an earlier notice directly from the credit union before this court-authorized one. If you remember a letter about this in 2025 and then a second notice arrived, that is the sequence being described, not a duplicate.

Who Qualifies?

The Court defined the Class as all persons whose personally identifiable information was compromised because of the Data Incident experienced by Carter Credit Union beginning on or about June 25, 2025.

There is no residency requirement in that definition, which is the point most likely to be misread. The case sits in a Louisiana state court in Shreveport and Carter Credit Union is a Louisiana institution, but the class is defined by whose information was compromised, not by where they live. Someone who has since moved out of state is still a class member.

Three groups are excluded: Carter Credit Union along with its officers, directors and related companies; attorneys for the parties; and the judge in the case, along with the judge's family and staff.

How Much Can You Get?

There are three benefits, and the way they combine is worth getting right before you open the form: