First Financial Security $1.2 Million Data Breach Settlement
First Financial Security $1.2 Million Data Breach Settlement

People who received a data incident notification letter from First Financial Security Inc. on or about Oct. 17, 2023, may be eligible to claim up to $500 in cash reimbursement and/or two years of free credit and medical monitoring from a class action settlement.

First Financial Security Inc. agreed to pay up to $1,200,000 to settle a class action lawsuit alleging that, in 2023, cybercriminals bypassed its cybersecurity systems, leading to a ransomware attack that exposed personal and health information of consumers.

Who can file a claim?

Class members must meet the following criteria:

  • They received a notification from First Financial Security Inc. about the data incident that occurred on or around Oct. 17, 2023, via email or mail.
  • The breach compromised their personal information, which may include names, dates of birth or Social Security numbers, or protected health information.

How much can class members get?

  • Ordinary expense reimbursement: Up to $500 per class member for documented out-of-pocket expenses, fraudulent charges and lost time resulting from the data incident. Expenses may include:
    • Unreimbursed bank fees, card reissuance fees, overdraft fees, late fees and over-limit fees
    • Long-distance and cell phone charges (if charged by the minute), internet usage charges (if charged by the minute or incurred solely due to the incident) and text messages (if charged by the message and incurred solely due to the incident)
    • Postage, gasoline for travel and other incidental expenses
    • Interest on payday loans due to card cancellation or over-limit situations
    • Up to three hours of documented lost time spent dealing with the data incident paid at $20 per hour (for a maximum of $60)
    • Costs of credit reports, credit monitoring or identity theft insurance purchased between Oct. 17, 2023, and April 28, 2026
  • Credit and medical monitoring: Two years of CyEx Medical Shield Complete, which includes credit and medical monitoring services

How to claim a settlement payment

Class members can submit the online claim form or download the PDF claim form, complete it and mail it to the settlement administrator.

Settlement administrator's mailing address: First Financial Data Incident Settlement, Claims Administrator, P.O. Box 25226, Santa Ana, CA 92799

The claim deadline is July 20, 2026.

To enroll in CyEx Medical Shield Complete, class members must use the enrollment code provided in the notification letter they received.

What proof or documentation is necessary to submit a claim?

  • Extraordinary losses: Documentation showing the breach most likely caused the loss
  • Ordinary expenses: Receipts, account statements or other documentary proof. For credit monitoring reimbursement, proof of purchase and affirmation that the class member bought it because of the data incident
  • Lost time: Written description of time spent

Payout options

The settlement administrator will mail checks to eligible claimants.

$1.2 million settlement fund breakdown

The $1,200,000 settlement fund covers:

  • Notice and administration costs: To be determined
  • Attorneys' fees: Up to $396,000
  • Attorneys' costs: To be determined
  • Service award to class representative: $5,000
  • Payments to eligible class members: Remainder of the fund

Important dates

  • Deadline to file a claim: July 20, 2026
  • Opt-out deadline: Sept. 18, 2026
  • Final approval hearing: Nov. 9, 2026

When is the First Financial Security settlement payout date?

The settlement administrator will mail checks to eligible class members approximately 30 days after the court grants resolves any appeals and grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit alleged First Financial Security Inc. failed to prevent a ransomware attack in 2023, which resulted in unauthorized access to personal and health information. The lawsuit claimed the company was responsible for the data breach and resulting harm to consumers.

First Financial Security Inc. denies any wrongdoing but agreed to settle to avoid the risks and costs of continued litigation.

Sources

  1. Claim form
  2. Class notice
  3. Settlement agreement
  4. Settlement FAQ
  5. Important dates
Settlement Open for Claims
Award:
Up to $500 plus credit monitoring
Deadline:
July 20, 2026
SUBMIT CLAIM