Ernst & Young MOVEit Data Breach Settlement

This settlement resolves claims against Ernst & Young and Bank of America stemming from the 2023 mass exploitation of Progress Software's MOVEit transfer tool, which exposed personal data EY held. A $2.5 million fund pays documented ordinary losses up to $2,500 and extraordinary losses up to $10,000, with a $100 flat option for those without records, and two years of identity protection is open to everyone in the class. Claims must be filed or postmarked by October 8, 2026. Judge Allison Burroughs will hold the final approval hearing in Boston on October 15, 2026.

Living US residents whose personally identifiable information sat in files compromised through the MOVEit file-transfer software incident tied to Ernst & Young's systems, including Bank of America-related data handled by EY.

Reimbursement of documented ordinary losses up to $2,500 and extraordinary losses up to $10,000, or a $100 alternative cash payment (all subject to pro rata adjustment), plus two years of identity theft protection for all class members..

No payment amount is ever guaranteed. Pro rata payouts shrink as more valid claims come in, and every payment waits on final court approval and any appeals.

Partial proof: the base payment does not require documents, but higher payment tiers (such as documented-loss reimbursement) do. You can usually file the simple tier with just the claim form, or attach records to claim more.