People who received an October 2026 notice that their Social Security numbers and other data were in files copied from Computer Task Group (CTG)’s network on September 26, 2026 may be covered by three proposed class actions filed over the incident in federal court in Buffalo, New York. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes class action complaints. Any claims in them are unproven allegations. Computer Task Group has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
Computer Task Group, Incorporated, an IT services and staffing company headquartered in Amherst, New York, told state regulators on October 19, 2026 that an unauthorized party had copied files from its network on September 26, 2026, and began mailing notices to affected people the same day. Within three days, three proposed class actions were filed against the company in the U.S. District Court for the Western District of New York. The first, Hall v. Computer Task Group, Incorporated, No. 1:26-cv-02384, was filed October 20, 2026, followed by two more on October 21 and October 22.The complaints had not been made public as of November 13, 2026, so the specific claims, the proposed class definitions and the relief requested are not yet known. CTG has not responded to them in any public filing, and no court has decided whether the claims have merit.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Did CTG Report?
According to the notification CTG’s outside counsel sent to the New Hampshire Attorney General on October 19, 2026, an unauthorized party accessed certain systems on CTG’s network on September 26, 2026, and an investigation found that the same day an unauthorized actor copied certain files. CTG says it secured the systems, brought in cybersecurity professionals and reported the incident to law enforcement. On October 2, 2026, after reviewing the copied files, it determined that they contained personal information.The notice letter lists the information involved as names, Social Security numbers, direct deposit account information, driver’s license or other government identification numbers, and health insurance member ID numbers or other health plan data. Not every person had every type of information exposed. CTG mailed the letters by first-class mail on October 19, 2026 and is offering one year of single-bureau credit monitoring, fraud consultation and identity theft restoration through Cyberscout, with enrollment open for 90 days from the date of the letter.
State filings show the notices went to people in several states: 26 New Hampshire residents, 48 in Vermont, according to the Vermont Attorney General’s breach list, and 7 in Rhode Island, according to the notice letter. CTG had not published a nationwide total in a source that could be confirmed as of November 13, 2026. The notice letters do not say whether the affected people are employees, contractors or others.
Who Is Computer Task Group?
CTG provides IT consulting, staffing, application, cloud, testing and cybersecurity services to clients in health care, financial services, government and other sectors, according to its company website. Belgian IT company Cegeka agreed to acquire CTG in August 2023 for $10.50 a share, as CTG announced in an SEC filing, and completed the deal in December 2023, after which CTG’s shares were delisted from Nasdaq. CTG now describes itself as a Cegeka company.What Happens Next?
When several proposed class actions over the same breach are filed in one court, the cases are often consolidated under a single caption with interim lead counsel, followed by a consolidated complaint and a motion to dismiss. No consolidation order in the CTG cases had been made public as of November 13, 2026. Nothing can be claimed unless the cases settle or end in a judgment for a class; any settlement would come with its own notice, website and claim deadline.Questions
Is there a CTG data breach settlement to claim?
There is nothing to claim. The lawsuits are at the complaint stage: no class has been certified, no settlement has been reached and no court has found that Computer Task Group did anything wrong. A claim process would exist only if the cases settled or ended in a judgment for the class.
What information was involved in the CTG data breach?
According to CTG’s October 19, 2026 notice letter, the copied files contained names, Social Security numbers, direct deposit account information, driver’s license or other government ID numbers, and health insurance member ID numbers or other health plan data. The elements involved differ from person to person. CTG is offering one year of Cyberscout credit monitoring and identity restoration to people it notified.
Where were the CTG lawsuits filed?
All three were filed in the U.S. District Court for the Western District of New York in Buffalo between October 20 and October 22, 2026. The first, Hall v. Computer Task Group, Incorporated, is No. 1:26-cv-02384.
What is Computer Task Group?
Computer Task Group, Inc. is an IT services and staffing company headquartered in Amherst, New York, a Buffalo suburb. Belgian IT firm Cegeka acquired it in December 2023, after which its stock was delisted from Nasdaq. CTG now describes itself as a Cegeka company.
Sources
- Hall v. Computer Task Group, Incorporated, No. 1:26-cv-02384 (W.D.N.Y.), docket
- No. 1:26-cv-02410 (W.D.N.Y.), docket and No. 1:26-cv-02418 (W.D.N.Y.), docket
- CTG notification to the New Hampshire Attorney General, with notice letter template (Oct. 19, 2026)
- Vermont Attorney General, security breach notices
- CTG, About Us
- CTG Form 8-K exhibit announcing the Cegeka acquisition agreement (August 2023)
