Data Breach · Claims Open

Chimienti & Associates $650,000 Data Breach Settlement: Up to $100 Cash or $5,000 in Documented Losses

Published October 20, 2026

People whose information was involved in the March 2024 data breach at Chimienti & Associates, an employee benefits agency, can claim pro rata cash of up to $100 or reimbursement of up to $5,000 in documented losses, plus two years of credit monitoring, from a $650,000 class action settlement by December 28, 2026.

Data breach illustration for the Chimienti & Associates class action settlement

Current Status

Claims are open, and the deadline is December 28, 2026, submitted online or postmarked. Judge Bret D. Hillman of the Tulare County Superior Court granted preliminary approval on June 4, 2026, and notices were mailed July 2, 2026. The final approval hearing is January 12, 2027 at 8:30 a.m. Pacific Time. Benefits are distributed within 45 days after the settlement becomes final.

Status Claims Open preliminary approval June 4, 2026 · final approval hearing Jan. 12, 2027
Claim Deadline December 28, 2026 online or postmarked · opt-outs and objections due Dec. 14, 2026
Estimated Payout Up to $100 or $5,000 pro rata cash up to $100 · or up to $5,000 documented · plus 2 years of monitoring
Proof Required Yes — Login ID + PIN LoginID and PIN from the mailed notice to file online · receipts only for the $5,000 option

What Changed Recently?

The settlement in Fonseca et al. v. Chimienti & Associates, Consolidated Case No. VCU315048, resolves four lawsuits filed in Tulare County Superior Court in late 2024 and early 2025 after Chimienti & Associates, a managing general agency that provides employer-paid benefit solutions, disclosed a data breach. According to the settlement agreement, an unauthorized actor viewed or copied data from one internal email account between March 22 and March 26, 2024. Chimienti began notifying individuals on October 24, 2024. The information involved may include names, Social Security numbers, dates of birth, state-issued identification numbers, financial account information and health information.

The consolidated complaint alleged negligence, breach of contract, unjust enrichment and violations of California privacy and consumer protection laws. Chimienti denies that it did anything wrong, and the court has not decided who is right.

Who Qualifies?

The class is all living individuals residing in the United States whose private information was impacted in the data incident. Chimienti’s directors, officers and employees, the assigned judge and court staff, and anyone who opts out are excluded. Class members were identified from Chimienti’s records and sent notices. The settlement documents do not state how many people are in the class.

How Much Can You Get?

Every class member can claim two years of CyEx Financial Shield Complete one-bureau credit monitoring with $1 million in fraud insurance, plus one of two cash options:

• Cash Payment A, documented losses: reimbursement of up to $5,000 for out-of-pocket losses fairly traceable to the breach and incurred from March 22, 2024 through December 28, 2026, such as identity theft losses, fees for credit reports, monitoring or freezes, and ID replacement costs. Third-party documentation is required, and a rejected Payment A claim is converted to Payment B.
• Cash Payment B, alternative cash: a one-time pro rata payment of up to $100, with no documentation needed.

The $650,000 fund is non-reversionary and also pays notice and administration costs, attorneys’ fees of up to 33.33% ($216,666.66) plus costs, and service awards of $2,500 for each class representative. Credit monitoring is paid first, then Payment A claims, and Payment B amounts are adjusted up or down from what remains. Chimienti also says it has made data security improvements costing more than $75,000 a year, paid separately from the fund. Payments can be received by PayPal, Venmo, Zelle, virtual prepaid card or check. There is no lost-time or California statutory payment in this settlement.

What Proof or Notice ID Is Required?

The online claim form opens only with the LoginID and PIN printed on the notice mailed to class members. The paper claim form has a field for the Login ID “if known.” Cash Payment B requires no documentation; Cash Payment A requires receipts or other third-party records, and a self-prepared statement alone is not enough.

What Is the Deadline?

Claims are due December 28, 2026, submitted online or postmarked. Requests for exclusion must be postmarked, and objections filed with the court, by December 14, 2026.

How Do You Take Action?

The official settlement website, run by the administrator, Simpluris, has the online claim form, the notice, the paper claim form, the settlement agreement and the preliminary approval order, in English and Spanish.

What Happens Next?

The final approval hearing is January 12, 2027 at 8:30 a.m. Pacific Time in Department 02 of the Tulare County Superior Court. Benefits are distributed no later than 45 days after the settlement becomes final, after any appeals. Money left over goes to the Electronic Privacy Information Center.

Sources and Verification

• Official settlement website, including the FAQ, important dates, the long-form notice, the claim form and the online claim login
• Settlement agreement and order granting preliminary approval (June 4, 2026), Fonseca et al. v. Chimienti & Associates, Consolidated Case No. VCU315048 (Superior Court of California, County of Tulare)
• Chimienti & Associates notice of data event filed with the California Attorney General

Questions

Who qualifies for the Chimienti & Associates data breach settlement?

Living individuals residing in the United States whose private information was impacted in the March 2024 data incident at Chimienti & Associates. Class members were identified from Chimienti’s records and mailed notices.

How much can I get from the Chimienti settlement?

Each class member can claim two years of credit monitoring plus either pro rata cash of up to $100 with no documentation, or reimbursement of up to $5,000 in documented losses. Payments may be adjusted based on the number of claims.

Do I need a notice ID to file a Chimienti claim?

The online claim form requires the LoginID and PIN printed on the mailed notice. The paper claim form asks for the Login ID if known.

What is the deadline for the Chimienti data breach settlement?

Claims are due December 28, 2026, online or postmarked. Opt-outs and objections are due December 14, 2026, and the final approval hearing is January 12, 2027.


For more class actions keep scrolling below.
Settlement Amount $650,000
Case Title Fonseca et al. v. Chimienti & Associates
Case Number VCU315048 (consolidated)
Court Superior Court of California, County of Tulare
Final Approval Hearing January 12, 2027 at 8:30 AM PT Department 02 · Judge Bret D. Hillman
Administrator Simpluris
Official Website Chimienti Data Settlement

More Data Breach Settlements