.png)
Individuals who received a notice stating the December 2024 Cross Valley Federal Credit Union data breach potentially compromised their private information may be eligible to claim up to $5,000 and credit monitoring from a class action settlement.
Cross Valley Federal Credit Union agreed to settle a class action lawsuit claiming a cyberattack exposed certain files containing personal information, such as names, addresses and Social Security numbers. The lawsuit alleged CVFCU failed to adequately protect members’ private information, leading to the incident.
Who can file a claim?
The settlement class includes all individuals whose private information the December 2024 data incident potentially accessed, including anyone who received notification regarding the incident.
How much is the data breach payout?
Class members may be eligible for two types of benefits: credit monitoring and a cash payment.
- Documented losses: Class members who incurred actual, documented out-of-pocket losses between Dec. 4, 2024, and July 18, 2026, as a result of the data incident can claim reimbursement up to $5,000. Covered expenses include:
- Losses due to identity theft or fraud
- Fees for credit reports, credit monitoring or freezing/unfreezing credit
- Costs to replace IDs
- Postage to contact banks by mail
- Alternative cash payment: Class members who do not have documented losses may claim a pro rata alternative cash payment of up to $50. The settlement administrator will determine the final amount by the number of claims submitted.
- Credit monitoring: All class members can enroll in two years of CyEx Financial Shield Complete, which includes $1 million in financial fraud insurance and monitoring for identity theft, unauthorized transactions and high-risk activity. Class members will also have access to a fraud resolution agent if the program detects suspicious activity.
How to claim a settlement payment
Class members can file a claim online or download, print and complete a PDF claim form and mail or email it to the settlement administrator.
Settlement administrator's mailing address: CVFCU Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958
Settlement administrator's email address: info@CVFCUDataSettlement.com
All class members should have received a code to enroll in credit monitoring with their settlement notice. They can use that code to enroll after the settlement receives final approval. Check the settlement website after Aug. 13, 2026, for updates.
What proof or documentation is required to submit a claim?
- For reimbursement of documented losses, class members must provide proof, such as receipts, bank statements or other supporting documents. They may include self-prepared notes for explanation, but these are not sufficient on their own. Expenses a third party already reimbursed are not eligible.
- For the alternative cash payment, no proof is required. Class members must simply attest that they are a class member and select the appropriate option on the claim form.
- For online claims, class members must log in with the unique ID and PIN from the settlement notice they received.
Payout options
- PayPal (provide email address)
- Venmo (provide phone number)
- Zelle (provide email address or phone number)
- Virtual prepaid card (provide email address)
- Physical check (provide mailing address)
Settlement fund breakdown
The settlement fund covers:
- Settlement administration costs: To be determined
- Attorneys' fees and litigation costs: $215,000
- Service awards to class representatives: $2,500 each for two representatives ($5,000 total)
- Payments to class members: The remainder of the fund
Important dates
- Opt-out deadline: July 18, 2026
- Claim deadline: July 18, 2026
- Final approval hearing: Aug. 13, 2026
When is the Chapple v. Cross Valley Federal Credit Union payout date?
The settlement administrator will issue payments to approved claimants within 14 days after it approves all valid claims or within 35 days after the court resolves any appeals and grants final approval of the settlement, whichever is later.
Why did this class action settlement happen?
The class action lawsuit alleged a cyberattack on CVFCU’s computer systems in December 2024 allowed unauthorized access to files containing private information, including names, addresses and Social Security numbers.
CVFCU denies any wrongdoing but agreed to settle to avoid the costs, risks and uncertainties of continued litigation.
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.svg)