Doxim Data Breach Class Action Settlement

Data Breach · Claims Open

Current Status

Claims are open. Claim forms must be submitted online by 11:59 p.m. Eastern time on October 13, 2026, or mailed to the Settlement Administrator and postmarked by the same date. The deadline to exclude yourself from the settlement or to object to it is earlier: September 28, 2026. The U.S. District Court for the Eastern District of Michigan has scheduled a final approval hearing for October 28, 2026 at 10:00 a.m. before the Honorable Terrence G. Berg; no final approval order had been entered as of August 3, 2026. Benefits are provided only after the Court approves the settlement and it becomes final, and no payment date had been announced as of August 3, 2026.

What Changed Recently?

The claim window is now running. The Court authorized notice to the settlement class in In re Doxim, Inc. Data Security Incident Litigation, Case No. 2:24-cv-11550, in the U.S. District Court for the Eastern District of Michigan, Southern Division, and the Settlement Administrator has mailed postcard notices carrying each class member's Unique ID. The amended settlement agreement was signed at the end of April 2026 and filed with the Court on May 5, 2026, and it sets the deadlines below.

The case reached this point over about two years. Six materially identical putative class actions were filed starting June 13, 2024, after Doxim and the credit unions began notifying affected individuals on May 31, 2024; the federal cases were consolidated in October 2024, and a consolidated complaint alleging negligence, negligence per se, unjust enrichment, breach of contract, breach of fiduciary duty, breach of third-party beneficiary contract, and declaratory and injunctive relief was filed that December. Each defendant moved to dismiss. Before the Court ruled, the parties mediated in November 2025 and agreed on settlement terms.

The defendants — Doxim, Inc., Credit Union ONE, and Beacon Credit Union — deny the legal claims and deny any wrongdoing or liability, and the Court has not decided that any of them did anything wrong or that any law was violated. The parties agreed to settle to avoid the risk, cost, and time of continuing the lawsuit.

Who Qualifies?

The settlement class is all living individuals residing in the United States who were identified by Doxim and who were sent notice by Doxim or one of Doxim's Credit Union Clients that their private information was impacted in the data incident. If a notice about this settlement reached you by mail, you have been identified as a class member.

Doxim is a third-party service provider that helps credit unions prepare account statements and income tax forms for their members, so the information at issue was collected or maintained by Doxim or by the credit unions it serves. "Doxim's Credit Union Clients" is defined broadly as every credit union that directly or indirectly gave class members' private information to Doxim that was subject to unauthorized access in the incident, including but not limited to the two credit unions named as defendants, Credit Union ONE and Beacon Credit Union. The information involved may include names, addresses, financial account numbers, and Social Security numbers.

Excluded from the class are directors, officers, and employees of the defendants; the judge assigned to the case, that judge's immediate family, and court staff; and anyone who timely and validly excludes themselves from the settlement.

How Much Can You Get?

Doxim has agreed to pay a non-reversionary settlement fund of $5,500,000. No money goes back to the defendants; the fund pays class member benefits, settlement administration costs, court-approved attorneys' fees and costs, and service awards. There are two cash options, and you choose one of them, plus a credit monitoring benefit you can claim on top of either.