Institute for Human Resources and Services Data Breach Settlement

Individuals whose private information the August 2025 data breach involving Institute for Human Resources and Services may have compromised could be eligible to claim up to $2,000 from a class action settlement. The settlement class includes approximately 3,307 people.

Institute for Human Resources and Services Inc. agreed to settle a class action lawsuit alleging a targeted cyberattack exposed sensitive personal data. The exposed files may have included names, dates of birth, Social Security numbers or individual taxpayer identification numbers, and information about medical history, conditions, treatments or diagnoses.

Who can file a claim for a data breach payout?

Class members are individuals in the United States whose private information the August 2025 Institute for Human Resources and Services data breach exposed.

How much are settlement payments?

Class members have the following benefit options:

• Cash payment A – Documented losses: Class members can claim up to $2,000 for actual, documented out-of-pocket losses that occurred between Aug. 13, 2025, and Dec. 2, 2026, and are traceable to the data breach. This includes monetary losses from identity theft or fraud, fees for credit reports or credit monitoring, costs to replace IDs and postage for contacting financial institution.
• Cash payment B – Alternative cash payment: Class members who do not submit a documented losses claim can submit a claim to receive a one-time $45 cash payment.
• Credit monitoring: All class members can elect to receive two years of CyEx Financial Shield Complete, which includes $1 million in financial fraud insurance, monitoring for identity theft, unauthorized transactions and high-risk activity, and access to a fraud resolution agent if needed.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print and complete the PDF claim form and mail or email it to the settlement administrator.

Settlement administrator's mailing address: IHRS Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

Settlement administrator's email address: info@InstituteHRDataSettlement.com

The claim deadline is Dec. 2, 2026.

Required proof and claim information

• To submit a claim online, class members must provide the LoginID and PIN from the settlement notice they received.
• To submit a documented losses claim, class members must provide supporting documentation, such as receipts, bank or credit card statements and other of proof of identity theft or fraud.

Payout options

• Electronic payment
• Paper check mailed to the address provided

Settlement fund breakdown

The settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys’ fees and costs: $120,000
• Service award to class representative: $1,500
• Credit monitoring: Cost determined by number of claims filed
• Payments to eligible approved claimants: Total determined by number of claims filed

Important dates

• Opt-out deadline: Nov. 2, 2026
• Deadline to file a claim: Dec. 2, 2026
• Final approval hearing: Dec. 17, 2026

When is the Institute for Human Resources and Services data breach payout date?

The settlement administrator will issue payments to approved claimants approximately 85 days after the court grants final approval of the settlement.

Why is there a class action settlement?

The class action lawsuit claimed a targeted cyberattack impacted IHRS’s computer systems in August 2025. The breach resulted in unauthorized access to files containing sensitive personal and medical information. The plaintiff alleged IHRS failed to adequately protect this data.

IHRS denies the allegations but agreed to settle to avoid the expense and risk of continued litigation.

Sources

1. Claim form
2. Settlement notice
3. Settlement agreement
4. Settlement website FAQ page