Idaho National Laboratory Data Breach Class Action Settlement

Individuals in the United States whose private information the December 2023 Idaho National Laboratory data breach compromised may be eligible to submit a claim for up to $5,000 plus additional benefits from a class action settlement.

Idaho National Laboratory, operated by Battelle Energy Alliance LLC, agreed to settle a class action lawsuit related to a targeted cyberattack that exposed sensitive personal information. The data breach compromised personal information belonging to approximately 44,000 people.

Who can file a claim for a data breach payout?

There are two class member groups:

Group 1: Individuals residing in the United States whose private information, including their Social Security number, the Idaho National Laboratory data breach disclosed on or about Dec. 12, 2023, compromised

Group 2: Individuals residing in the United States whose private information, but not their Social Security number, the Idaho National Laboratory data breach disclosed on or about Dec. 12, 2023, compromised

How much is the class action settlement payment?

Both Group 1 and Group 2 class members can submit a claim to receive one year of three-bureau credit monitoring services, which includes $1 million in identity theft insurance, real-time credit file monitoring, dark web scanning, comprehensive public records monitoring and access to fraud resolution agents.

Group 1 class members can submit a claim to receive one or more of the following cash benefits:

• Extraordinary expenses: Class members can claim up to $5,000 for documented losses due to identity theft or fraud that are traceable to the data breach. The losses must have occurred between Dec. 12, 2023, and Feb. 28, 2026, and must not have been reimbursed by another party.
• Ordinary expenses: Class members can claim up to $1,000 for documented out-of-pocket expenses related to the data breach, such as fees for credit reports, credit monitoring, freezing or unfreezing credit, replacing IDs or postage. These losses must have occurred between Dec. 12, 2023, and Feb. 28, 2026.
• Flat cash payment: All Group 1 class members can submit a claim to receive a one-time payment of $75.

How to claim a class action rebate

To receive a cash payment or credit monitoring, class members must file a claim online or download and print a PDF claim form to mail or email to the settlement administrator.

Settlement administrator's mailing address: INL Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226 Santa Ana, CA 92799-9958

Settlement administrator's email address: info@INLDataSettlement.com

Required proof and claim information

• To submit an online claim, class members must provide the notice ID and PIN from their settlement notice.
• To submit an extraordinary expenses or ordinary expenses claim class members must provide supporting documentation, which may include receipts, invoices for services, bank or credit card statements showing unreimbursed fees for fraudulent charges and other third-party records showing losses due to identity theft.

Payout options

• Electronic payment
• Paper check mailed to the address provided

Data breach settlement fund breakdown

The settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees and costs: Up to $175,000
• Service award payment to the class representative: Up to $5,000
• Credit monitoring services: Cost determined by number of claims filed
• Payments to approved claimants: Total determined by number of claims filed

Important dates

• Opt out deadline: Jan. 29, 2026
• Claim deadline: Feb. 28, 2026
• Final approval hearing: March 19, 2026, at 9 a.m. Mountain Time (via Zoom)

When is the Idaho National Laboratory data incident settlement payout date?

The settlement administrator will issue payments and credit monitoring enrollment information to class members with valid claims approximately 30 days after it completes claim processing or 40 days after the court grants final approval of the settlement , whichever is later.

Why is there a class action settlement?

The class action lawsuit alleged a targeted cyberattack on Idaho National Laboratory’s computer systems in December 2023 exposed files containing sensitive personal information, including names, Social Security numbers, dates of birth and medical and insurance information.

The plaintiff claimed that Idaho National Laboratory failed to adequately protect this information. INL denied the allegations, but both sides agreed to settle to avoid the expense and uncertainty of continued litigation.

Sources

1. Official class notice
2. Settlement website FAQ page
3. Settlement claim form