People in the United States whose personal information was stored in CUSO Financial Services, L.P.'s systems during the cybersecurity incident between December 19, 2023 and January 19, 2024, and who were sent a notice in October 2024, may qualify to claim up to $599 in cash, up to $100 more as a California resident, or up to $5,000 in documented losses, plus two years of credit monitoring, from the CUSO Financial Services data breach class action settlement. Claims close November 16, 2026; the final approval hearing is set for February 18, 2027.
Current Status
Claims are open. A claim form must be submitted online or postmarked by November 16, 2026; the notice states the date without naming a time or timezone. Requests to opt out and objections are due by October 1, 2026. The California Superior Court for the County of Tulare has granted preliminary approval and scheduled the final approval hearing for February 18, 2027 at 8:30 a.m. No final approval order has been entered and no payment date has been announced. Anyone who received the October 2024 notice and wants cash, loss reimbursement or the credit monitoring should file before the deadline.Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Changed Recently?
CUSO Financial Services, L.P., a broker-dealer and investment services firm that works through credit unions, agreed to settle a class action over a cybersecurity incident at one of its vendors. According to the settlement agreement, CUSO became aware on January 19, 2024 of an incident involving a third-party service it uses to archive communications, as the Financial Industry Regulatory Authority requires. Its investigation determined that an unauthorized individual had accessed a single CUSO employee's account on that third-party service between December 19, 2023 and January 19, 2024. In October 2024, CUSO mailed notices to the people whose information may have been compromised and offered complimentary Experian IdentityWorks monitoring for 12 or 24 months.Several putative class actions followed. The named plaintiff first sued in San Diego County Superior Court, CUSO removed that case to the U.S. District Court for the Southern District of California on December 9, 2024, and the parties then went through four mediation sessions — two early neutral evaluation conferences before a magistrate judge and two private mediations before a retired judge. They reached a settlement on August 29, 2025, dismissed the federal case, and refiled in the California Superior Court for the County of Tulare as Sinitsa v. CUSO Financial Services, L.P., Case No. VCU326251. CUSO denies all material allegations, including any allegation of negligence, fault, wrongdoing or liability, and says it would have won on the merits and defeated class certification; the court has made no determination on the merits. Preliminary approval opened the claim window and the administrator mailed postcard notices to the class list.
Who Qualifies?
The settlement class is U.S. residents whose private information was stored in CUSO's systems at the time of the incident, who were affected by it, and who received a notice of the cybersecurity incident from CUSO on or about October 2024. The agreement puts the class at approximately 76,251 people. It is built from CUSO's own notification records, so it covers the people the company wrote to in 2024 rather than every customer of every credit union CUSO serves. Private information means data that can identify an individual — the agreement names names, Social Security numbers and driver's license or state identification card numbers.Within that class there are two groups. The Nationwide Class is everyone described above. The California Subclass is the members of that class who were California residents at the time of the incident, and it is the only group that can claim the statutory payment. Excluded are CUSO and its officers and directors, anyone who validly opts out, the presiding judge along with the judge's staff and family, and anyone found criminally responsible for causing or aiding the incident. The agreement also excludes non-natural persons.
How Much Can You Get?
CUSO agreed to a non-reversionary settlement fund of $1,750,000 — nothing goes back to the company, and any balance left after distribution goes to a cy pres recipient, the Privacy Rights Clearinghouse. The fund pays the class benefits, the administration expenses, the attorneys' fees and costs, and a service award, all subject to court approval. Class counsel agreed to limit the fee request to one third of the fund, or about $583,333, and will separately ask for litigation costs of up to $20,000 and a service award of up to $5,000 for the class representative. Anything the court declines to award stays in the fund and is distributed to class members instead.A class member who files a valid claim may be eligible for several benefits, and the agreement is unusual in writing the cash tiers as additive rather than as a choice:
- Two years of credit monitoring from IDX, available to every class member who submits a claim form. It covers three-bureau credit monitoring and alerts, CyberScan dark web monitoring, $1 million in reimbursement insurance, fully managed identity restoration, member advisory services and lost wallet assistance.
- Reimbursement of up to $5,000 for documented, unreimbursed out-of-pocket losses fairly traceable to the incident. The agreement lists costs from identity theft or fraud, falsified tax returns or other misuse of private information; costs incurred on or after December 19, 2023 for buying or extending credit monitoring or identity theft protection, or for accessing, freezing and unfreezing credit reports; and miscellaneous expenses such as notary, fax, postage, copying, mileage and long-distance charges.
- A California statutory cash payment of up to $100 for California Subclass members, which may be claimed in addition to or instead of documented losses.
- A residual cash payment of up to $599, which may be claimed in addition to or instead of either of the two above. This is the pro rata tier: the amount is whatever is left in the fund after credit monitoring, documented losses, California statutory payments, fees, the service award and administration costs, divided by the number of approved claims. The notice says plainly that the amount received may be less than $599, and no estimate of the final figure is available until claims are counted.
If approved claims exceed what the fund holds, payments are reduced pro rata, and benefits are paid in a set order: documented losses first, then California statutory payments, then the residual cash payment. Losses already reimbursed by another source cannot be claimed again, and credit monitoring that was provided free — either through CUSO's October 2024 Experian offer or through this settlement's IDX coverage — is not a reimbursable expense.
What Proof or Notice ID Is Required?
This is a proof-required settlement. The online claim portal opens with a login screen asking for a Claim Number and a PIN, and tells class members that both are printed on the postcard they received in the mail. The printable claim form carries the same requirement in its own section headed "Proof of Class Membership." A class member who no longer has the postcard should use the contact page on the official settlement website to ask the administrator to confirm their status and supply the credentials.Documentation is required beyond that for two of the tiers. A documented-loss claim needs supporting records, a short description of what each record shows, and a statement of whether the loss was reimbursed by another source; the claim form gives professional fees, credit-freeze costs, credit monitoring bought on or after December 19, 2023 and miscellaneous expenses as examples. Handwritten or self-prepared documents alone are not enough and will result in denial, although they may be submitted to clarify other records. A California statutory payment needs documentation of California residence on December 19, 2023, such as a utility bill, tax document or pay stub from December 2023 showing the claimant's name and California address. The residual cash payment and the credit monitoring need no documentation beyond the claim form itself. Every claim form must be signed under penalty of perjury, and the administrator screens claims for completeness and plausibility, requesting more information where a claim is incomplete.
What Is the Deadline?
November 16, 2026. A claim must be submitted online or postmarked by that date; the notice and claim form give the date without naming a cut-off time or timezone, so treat the date itself as the limit. Requests for exclusion must be postmarked or received by the administrator on or before October 1, 2026, and an exclusion request must be in writing, identify the case by name and Case No. VCU326251, state the person's full name and current address, and carry their signature. Objections must be filed with the court and copied to class counsel and CUSO's counsel by the same October 1, 2026 date. Someone who both objects and stays in the class may still file a claim; someone who opts out gets nothing from the settlement but keeps the right to sue on their own.How Do You Take Action?
File online through the official CUSO settlement claim portal, using the Claim Number and PIN from the postcard. Enter the contact details, tick the box for the two years of credit monitoring if you want it, tick the boxes for the residual cash payment and — if you were a California resident on December 19, 2023 — the statutory payment, attach records for any documented losses, and sign the attestation. A printable claim form is available from the case documents page of the official settlement website for anyone who prefers to mail it. Keep your contact details current with the administrator after filing; the settlement website explains how to report an address change.What Happens Next?
The final approval hearing is scheduled for February 18, 2027 at 8:30 a.m. before the California Superior Court for the County of Tulare in Visalia. The court will decide whether the settlement is fair, reasonable and adequate, and will rule on the fee request, the litigation costs, the service award and the administration expenses, taking any objections into account. Class members are not required to attend. The hearing can be moved without further mailed notice, so the settlement website and the court's docket are where a change would appear. If the settlement is approved and becomes effective, the administrator has 45 days to issue payments to class members with approved claims. The agreement notes that appeals, if any are filed, can add more than a year. No payment date has been announced. CUSO also has the right to walk away from the settlement if 2 percent or more of the class opts out.Sources and Verification
• Official Settlement Website: CUSO Cybersecurity Incident Settlement, administered by Analytics Consulting LLC• Official claim portal: Sinitsa v. CUSO Financial claim form — login with the Claim Number and PIN from the postcard notice
• Settlement Agreement and Release, Notice of Proposed Class Action Settlement and Claim Form (PDF) — Stan Sinitsa v. CUSO Financial Services, L.P., Case No. VCU326251 (Cal. Super. Ct., Tulare County)
• The settlement agreement at paragraph 47 reserves a different placeholder address for the settlement website than the one the administrator actually launched; the live site is CUSOCybersecurityIncident.com, linked above
• Class Counsel: Srourian Law Firm, P.C. and Edelson Lechtzin LLP. Counsel for CUSO: Constangy, Brooks, Smith & Prophete, LLP
• Open Class Actions — data breach settlements hub
Questions
Can I claim the $599, the California $100 and documented losses in the CUSO settlement?
Yes. Unlike most data breach settlements, these benefits are written as additive rather than as a choice. The agreement says California Subclass members may take the statutory payment in addition to, or instead of, a documented loss claim, and that every class member may take the residual cash payment in addition to, or instead of, either. Credit monitoring is separate again. The settlement administrator pays approved claims in a set order — documented losses first, then the California statutory payment, then the residual cash payment — and reduces the amounts pro rata if the fund runs short.
Will class members actually receive $599 from the CUSO settlement?
$599 is a ceiling, not a promise. The residual payment is calculated by dividing whatever is left in the $1.75 million fund, after credit monitoring, documented losses, California statutory payments, administration costs, attorneys' fees and the service award, by the number of approved claims. With roughly 76,251 people in the class, the figure falls as more people file and rises as fewer do, so no amount can be quoted until claims are counted. The notice says the amount received may be less than $599.
I already enrolled in the Experian credit monitoring CUSO offered in 2024. Am I still eligible?
Yes. The claim form states that someone who enrolled in the complimentary Experian IdentityWorks monitoring CUSO offered in October 2024 is still eligible for the separate two years of IDX monitoring under this settlement. The one restriction is on reimbursement: credit monitoring already provided free, whether through the 2024 Experian offer or through this settlement's IDX coverage, cannot be claimed as a documented loss.
What proves California Subclass membership for the $100 CUSO statutory payment?
Documentation of California residence on December 19, 2023, the first day of the incident window. The claim form gives utility bills, tax documents and pay stubs from December 2023 showing the claimant's name and California address as examples. A class member who was a California resident then but has moved since is still in the subclass; the date that matters is December 19, 2023, not today.
I did not receive a CUSO postcard. Can I still file a claim?
The class is built from the list of people CUSO wrote to in October 2024, and both the online portal and the paper claim form ask for the Claim Number and PIN printed on the postcard notice. Someone who believes they were notified but no longer has the postcard should use the contact page on the official settlement website to ask the administrator to confirm their status and supply the credentials. A person CUSO never notified is not in the settlement class.
