EisnerAmper Data Breach Class Action Settlement

Data Breach · Claims Open

Current Status

Claims are open. The deadline to file is October 8, 2026 — Claim Forms must be submitted online or postmarked by that date. Judge Laura M. Provinzino granted preliminary approval on June 11, 2026, and the Final Approval Hearing is scheduled for October 13, 2026 at 2:00 p.m. CDT in St. Paul, Minnesota. No final approval order has been entered and no payment date had been announced as of August 2, 2026. If you received a postcard or email notice, it carries the Claim ID and PIN you need to file online.

What Changed Recently?

The settlement reached the claims stage this summer. The parties signed the Settlement Agreement dated May 1, 2026 and filed it on May 13, 2026; Judge Provinzino granted preliminary approval on June 11, 2026, certified the Settlement Class and a California Subclass for settlement purposes only, appointed Verita Global as Claims Administrator, and set the notice, opt-out, objection and claim deadlines. Notice went out to the class in July 2026 by postcard and email, each carrying a Claim ID and PIN.

The case itself is a consolidation. According to the Settlement Agreement, the first complaint was filed in Minnesota on April 8, 2025, the day Eisner began sending breach notices, and four more Minnesota cases followed; they were consolidated in May 2025. A parallel group of four cases was filed in the Southern District of New York starting April 11, 2025 and consolidated there. Eisner moved to transfer the New York cases to Minnesota in December 2025, the New York plaintiffs did not oppose, and the transfer was granted February 25, 2026. A consolidated amended complaint covering both groups was filed April 8, 2026. The parties mediated on September 25, 2025 before a retired federal magistrate judge, did not settle that day, and reached terms in the months that followed.

Eisner denies each of the claims and denies any liability or wrongdoing. The Settlement Agreement states expressly that it is not an admission, and the Court has not decided the merits.

Who Qualifies?

The Settlement Class covers all people who were affected by the Data Incident, including — but not limited to — anyone who was sent a notice letter by Eisner about the data incident discovered in September 2023. A California Subclass covers those class members in California, who are eligible for an extra payment under the California Consumer Privacy Act.

The incident itself was narrow in time and broad in content. Eisner became aware of suspicious activity on or around September 9, 2023 and its investigation determined that there was unauthorized access to a limited set of information between September 4 and September 9, 2023. The types of personally identifiable information that could have been affected include name, Social Security number, financial account information, date of birth, medical information and health insurance information.

The Settlement Agreement states that Eisner identified approximately 82,459 individuals whose information may have been impacted, with notice mailed beginning April 8, 2025. The consolidated complaint alleged the breach affected more than 85,000 people; the 82,459 figure is the one Eisner identified.

Because EisnerAmper is an accounting, tax and advisory firm rather than a consumer business, a lot of class members will not think of themselves as customers. The records involved can include employees and former employees of the firm's business clients, individuals whose information arrived through a tax or audit engagement, and Eisner's own personnel. What matters is whether your information was affected, not whether you ever hired the firm.