About 25,593 people whose names, Social Security numbers, and dates of birth were exposed in a November 2024 cyberattack on Cleveland accounting firm Ciuni & Panichi can file for up to $5,000 in documented losses plus an estimated $125 cash payment.
What Is This Settlement About?
Ciuni & Panichi, Inc., a Cleveland, Ohio-based public accounting and business advisory firm, experienced a cybersecurity incident in November 2024 in which an unauthorized party accessed a company database. Ciuni & Panichi later notified affected individuals that their personal information may have been involved.A proposed class action followed, alleging the firm failed to implement and maintain reasonable security measures to protect the personally identifiable information in its care. Ciuni & Panichi denies any wrongdoing, and the court has not decided who is right; the parties agreed to a settlement to avoid the cost and risk of continued litigation. Ciuni & Panichi agreed to establish a $592,500 settlement fund. The case is In re Ciuni & Panichi, Inc. Data Breach Litigation, Case No. 1:25-cv-00669, in the U.S. District Court for the Northern District of Ohio.
Eligible class members can now file a claim for cash. The deadline to file is August 18, 2026. This page explains who qualifies, how much you can get, and how to file.
Who Qualifies?
The settlement class is everyone who was mailed a notice that their personal information may have been compromised in the November 2024 Ciuni & Panichi data incident. About 25,593 people were notified.Excluded from the class are anyone who timely and validly opts out, the judge assigned to the case and court staff, Ciuni & Panichi's officers and directors, and any person found by a court to have caused or aided the data incident. If you received a mailed notice about this incident, you are a class member.
The settlement offers two types of relief, and you can claim both on the same form:
Documented Out-of-Pocket Losses — up to $5,000 in reimbursement for actual, documented losses or expenses fairly traceable to the data incident and incurred in or after November 2024. Eligible expenses can include unreimbursed losses relating to fraud or identity theft, professional fees (attorney, accountant, or credit-repair), credit-freeze or unfreeze costs, credit-monitoring costs incurred after the incident, and miscellaneous costs such as notary, postage, copying, and mileage. You will need supporting documentation, such as receipts, bank or credit card statements, or invoices — self-prepared documents like handwritten receipts are not sufficient on their own.
Pro Rata Cash Payment — an estimated $125 cash payment that requires no proof of loss, available to every class member whether or not they had out-of-pocket losses. The settlement administrator estimated this figure assuming a claims rate of about 10% of the roughly 25,593-person class; the actual amount will be adjusted up or down based on the money remaining in the $592,500 fund after attorneys' fees, costs, administrative expenses, service awards, and valid out-of-pocket loss claims are paid.
What Data Was Exposed?
According to the litigation, the personal information involved in the November 2024 incident may have included:- Full name
- Social Security number
- Date of birth
Not every affected individual had all of these data types exposed; the exact categories varied by person based on what Ciuni & Panichi stored.
How to File a Claim
The claim deadline is August 18, 2026. File through the official settlement website at CPDataSettlement.com, where you can submit a claim online or download a paper claim form to complete and mail. To file you will need the Login ID printed on the front of the postcard notice you were mailed.On the form you can claim the pro rata cash payment, the documented out-of-pocket losses, or both. If you claim documented losses, attach copies of your supporting records. If you cannot find your notice or need a paper claim form, you can request help through the official settlement website's contact page.
Key Deadlines
- Exclude yourself (opt out) or object: July 20, 2026
- File a claim: August 18, 2026
- Final approval hearing: September 23, 2026 at 9:00 a.m. ET
If you do nothing, you remain in the class and give up your right to sue Ciuni & Panichi over this incident, but you will not receive a payment unless you file a claim by the deadline. Settlement payments are typically issued a few months after final approval, assuming no appeals are filed.
Frequently Asked Questions
Who qualifies for the Ciuni & Panichi data breach settlement?
You qualify if you were mailed a notice that your personal information may have been compromised in the November 2024 Ciuni & Panichi data incident. About 25,593 people were notified and make up the settlement class.
How much money can I get from the Ciuni & Panichi settlement?
You can claim up to $5,000 in reimbursement for documented out-of-pocket losses traceable to the breach, plus an estimated $125 pro rata cash payment that requires no documentation — the two can be combined on the same claim form. The cash amount may rise or fall depending on how many valid claims are filed against the $592,500 settlement fund.
What is the deadline to file a claim?
The claim deadline is August 18, 2026. The deadline to opt out or object is July 20, 2026, and the final approval hearing is scheduled for September 23, 2026. Late claims are typically not accepted.
Do I need proof to file a Ciuni & Panichi claim?
To file online you need the Login ID printed on the front of the postcard notice you were mailed, so the settlement is treated as proof-required. No receipts are needed for the estimated $125 cash payment, but the up-to-$5,000 documented-losses option requires supporting records such as bank statements or receipts. If you cannot find your notice, request help through the official settlement website.
What personal data was exposed in the Ciuni & Panichi breach?
According to the litigation, the information accessed in the November 2024 incident may have included names, Social Security numbers, and dates of birth. The exact categories varied by individual based on what Ciuni & Panichi stored.
Watch Out for Scams
Legitimate settlement administrators do not charge a fee to release a class action payment, and they do not ask for your full Social Security number, banking passwords, or a "processing payment" by text or phone. File only through the official settlement website linked on this page, and ignore unsolicited messages demanding money or sensitive credentials to "release" your check. To compare this case with others, see our roundup of open data breach settlements, our explainer on how a data breach class action works, and our writeup of the Complete Payroll Solutions data breach settlement — another professional-services records breach with a cash-or-documented-loss claim.Sources
- In re Ciuni & Panichi, Inc. Data Breach Litigation — Official Settlement Website
- JD Supra: CPA Firm Ciuni & Panichi Files Official Notice of Data Breach
