RBA Inc. Data Breach Class Action Settlement

Current and former employees in the United States who received notice that their personal information was compromised in the May 2024 RBA Inc. data breach, may qualify to submit a claim for up to $4,000 in reimbursement or a $60 cash payment, and free credit monitoring from a class action settlement.

RBA Inc. has agreed to pay up to $200,000 to settle a class action lawsuit stemming from a cyberattack on its computer systems that occurred on or around May 25, 2024. The lawsuit alleges that the breach exposed files containing sensitive employee information, including names, addresses, Social Security numbers, dates of birth and limited benefits information.

Who is eligible for a data breach payout?

Class members meet the following criteria:

• Current and former employees in the United States at the time of the breach
• Their personally identifiable information (PII) was compromised in the RBA Inc. data breach that occurred on or around May 2024
• They received notice of the data breach from RBA Inc.

How much is the class action settlement payment?

Class members have the following claim options:

• Credit monitoring services: All class members can select to receive three years of one bureau credit monitoring services which includes dark web monitoring, identity theft insurance for up to $1,000,000 and identity recovery services.
• Documented losses: Claimants may submit for up to $4,000 in actual, unreimbursed monetary losses as a result of the data breach. Eligible expenses include unreimbursed losses due to fraud or identity theft, professional fees, costs for credit repair services or freezing/unfreezing credit, and other fees or expenses related to the cybersecurity incident.
• Lost time: Class members can submit for up to five hours at $25 per hour, maximum $125. Lost time may be claimed in addition to documented losses, but the total combined claim cannot exceed $4,000.
• Alternate cash payment: Class members that do not submit a documented losses or lost time claim may submit for a $60 alternate cash payment.

How to claim a class action rebate

To receive a settlement payment, class members must submit a claim form by the deadline of Sept. 29, 2025. Individuals can file a claim online or download a PDF claim form and mail it to the settlement administrator.

Settlement administrator's mailing address: RBA Data Security Incident Settlement, c/o Settlement Administrator, PO Box 25226, Santa Ana, CA 92799

Required proof and claim information

• Unique ID and PIN from settlement notice required to submit an online claim.
• Documented losses claims require supporting documentation such as receipts, bank or credit card statements showing unreimbursed fees or fraudulent charges, invoices for services, police report and other proof of fraudulent activity or identity theft traceable to the data breach.
• Lost time claims require a description of how the time was spent dealing with the data breach.

Payout options

Class members can choose one of these payment options:

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Paper check mailed to the address provided

$200K Data breach settlement fund

The settlement fund of $200,000 will cover documented losses, lost time, and alternate cash payment claims.

The remaining settlement costs and fees will be paid for separately by RBA Inc.:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $125,000
• Service award to class representative: Not to exceed $2,500
• Credit monitoring services: Cost determined by the number of claims filed

Important dates

• Opt-out deadline: Sept. 15, 2025
• Deadline to file a claim: Sept. 29, 2025
• Final approval hearing: Oct. 30, 2025

When is the RBA data breach settlement payout date?

Payments will be issued to approved claimants after the court grants final approval of the settlement and claim processing is complete.

Why did this class action settlement happen?

This class action lawsuit was filed after a targeted cyberattack on RBA Inc.'s computer systems in May 2024. The breach exposed files containing sensitive personal information of employees.

The plaintiff alleged that RBA Inc. failed to adequately protect this information. RBA Inc. denies any wrongdoing but agreed to settle to avoid the expense and uncertainty of further litigation.

Sources

1. Official settlement website notice
2. Settlement website FAQ page
3. Settlement claim form