Highline School District $650,000 Data Breach Settlement

Individuals who received notice that the September 2024 data security incident at Highline School District No. 401 may have impacted their private information could be eligible to claim up to $5,000 from a class action settlement.

Highline agreed to pay $650,000 to settle a class action lawsuit alleging a cyberattack exposed the sensitive personal information of students and employees. The lawsuit claimed negligence, violation of the Washington Data Breach Disclosure Law, unjust enrichment, breach of implied contract and invasion of privacy.

Who can file a claim?

Individuals are considered class members if:

• They reside in the United States.
• They received a notice stating the data security incident Highline School District No. 401 experienced in or around September 2024 potentially impacted their private information.

The class is estimated to include approximately 94,102 individuals. The settlement administrator will verify eligibility against the list of those who received a notice.

How much can class members get?

Eligible class members can claim reimbursement for documented out-of-pocket losses up to $5,000 per person. These losses must be directly related to the data security incident, and a third party cannot have previously reimbursed them.

Out-of-pocket losses may include:

• Unreimbursed losses from fraud or identity theft
• Unreimbursed costs of credit monitoring incurred between the data incident and the claim submission
• Costs for bank fees, postage, gasoline for travel, copying, scanning, faxing, parking, notary, research, cell phone use (if charged by the minute), long distance phone calls, data (if charged by the amount used), text messages (if charged by the message), accountant fees and attorneys’ fees

If there are remaining funds after the settlement administrator pays all other payments and expenses, it may conduct a pro rata distribution of residual funds to class members who submitted a claim for any settlement benefit. If total approved claims exceed $650,000, the settlement administrator will reduce all payments proportionally so the total does not exceed the settlement fund.

How to claim a Highline payout

Class members can file a claim online or download, print and complete a PDF claim form to mail to the settlement administrator. The claim deadline is April 20, 2026.

Settlement administrator's mailing address: Solis v Highline School District No. 401, c/o CPT Group Inc., PO Box 19504, Irvine, CA 92623

What proof or documentation is necessary to submit a claim?

• To file a claim, class members must provide the CPT ID located on the settlement notice they received. Those filing an online claim must also provide the passcode from the same notice. If an individual does not have a CPT ID and/or passcode, they should email hsddataincident@cptgroup.com.
• To file an out-of-pocket losses claim, class members must provide third-party documentation of their out-of-pocket losses. This may include receipts, account statements or other evidence showing the amount and nature of the expenses. Class members may redact unrelated transactions on their statements.
• To file a pro rata cash payment claim, class members must indicate their request on the claim form.

Payout options

• Check
• Electronic payment

$650,000 settlement fund breakdown

The $650,000 settlement fund covers.

• Settlement administration costs: To be determined
• Attorneys' fees: $216,666.67
• Attorneys' expenses: To be determined
• Service awards to class representatives: Up to $15,000 total
• Payments to eligible class members: Remaining balance

Important dates

• Deadline to opt out of the settlement: March 20, 2026
• Deadline to submit a claim form: April 20, 2026
• Final fairness approval hearing: April 24, 2026

When is the Highline School District No. 401 settlement payout date?

The settlement administrator will issue payments within 30 days of claim approval or 60 days after the court grants final approval to the settlement, whichever is later.

Why is there a class action settlement?

The class action lawsuit alleged a cyberattack in September 2024 allowed unauthorized parties to access files containing personal information of current and former Highline School District No. 41 students and employees. The plaintiffs claimed Highline failed to adequately protect this information, leading to claims of negligence, violation of the Washington Data Breach Disclosure Law, unjust enrichment, breach of implied contract and invasion of privacy.

Highline denied all claims but agreed to settle to avoid the risks and costs of litigation.

Sources

1. Class notice
2. Claim form
3. Settlement agreement
4. Important dates