Blue Ridge Rural Water Data Breach Class Action Settlement
Blue Ridge Rural Water Data Breach Class Action Settlement

Current and former customers of Blue Ridge Water Co., Inc., whose personal information the July 2024 data breach.pdf) compromised may be eligible to submit a claim for up to $3,000 plus credit monitoring from a class action settlement. The cybersecurity incident impacted approximately 16,360 individuals.

Blue Ridge Rural Water Company agreed to settle a class action lawsuit for alleged failures in protecting customer data during a targeted cyberattack. The incident exposed sensitive information such as names, Social Security numbers and direct deposit account numbers.

Who can file a claim for a data breach payout?

Class members are all individuals residing in the United States whose personal information the July 2024 Blue Ridge Rural Water data breach impacted, including current and former customers and anyone who received a notice of the data incident from Blue Ridge.

How much can class members receive?

Class members have the following benefit options:

  • Compensation for extraordinary out-of-pocket losses: Class members can claim up to $2,500 for actual, documented losses due to identity theft or fraud resulting from the data breach. These losses must have occurred between July 23, 2024 and Jan. 14, 2027. Examples include unauthorized bank transfers or other direct financial losses.
  • Compensation for ordinary out-of-pocket losses: Class members can claim up to $500 for documented expenses related to the data breach, such as fees for credit reports, credit monitoring, freezing or unfreezing credit, replacing IDs or postage to contact banks. These expenses must also have occurred between July 23, 2024 and Jan. 14, 2027.
  • Alternative cash payment: Class members who do not wish to claim out-of-pocket losses may claim a one-time $50 payment.
  • Credit monitoring: All class members are eligible for two years of three-bureau credit monitoring through CyEx Financial Shield Total, which includes $1 million in financial fraud insurance and monitoring for identity theft, unauthorized transactions and high-risk activity.

How to claim a settlement payment

To receive a payment class members must submit an online claim form or print and complete the PDF claim form and mail it to the settlement administrator. Class members may also request a paper claim form by contacting the settlement administrator.

Settlement administrator's mailing address: Blue Ridge Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

The deadline to file a claim is Jan. 14, 20207.

Required proof/documentation

  • Extraordinary out-of-pocket losses: Class members must provide proof such as bank statements, receipts or other documentation showing the loss was due to the data incident.
  • Ordinary out-of-pocket losses: Class members must provide receipts or documentation showing the expense was due to the data incident.
  • Online claim form: Class members using the online claim form must provide the login ID and PIN they received in their settlement notice.

Payout options

  • Zelle
  • PayPal
  • Venmo
  • Physical check mailed to the address on file

Settlement fund breakdown

The settlement fund includes:

  • Attorneys' fees and costs: Up to $225,000
  • Service award to class representative: Up to $5,000
  • Credit monitoring: Cost determined by number of claims filed
  • Payments to eligible class members: Amounts as described above, cost determined by the number of valid claims submitted

Important dates

  • Deadline to file a claim: Jan. 14, 2027
  • Deadline to opt out: Jan. 25, 2027
  • Final approval hearing: Feb. 22, 2027

When is the Blue Ridge data incident settlement payout date?

The settlement administrator will distribute payments and benefits to approved claimants after the court grants final approval of the settlement.

Why is there a class action settlement?

A targeted cyberattack in July 2024 compromised Blue Ridge's computer systems, exposing customers' personal information. The plaintiff alleged Blue Ridge failed to adequately protect this information.

Blue Ridge denied any wrongdoing, but agreed to settle to avoid the risks and costs of ongoing litigation.

Sources

  1. Class notice
  2. Settlement website FAQ page
  3. Claim form
  4. Settlement agreement
Settlement Open for Claims
Award:
Up to $3,000 plus credit monitoring
Deadline:
January 14, 2027
SUBMIT CLAIM