Published
August 3, 2026
Updated
November 4, 2026
Credit union members notified of the December 2023 Doxim data breach had until October 13, 2026 to claim about $100 in cash with no documentation, or up to $5,000 in documented losses. The court granted final approval of the $5.5 million settlement on November 3, 2026, and approved claims are paid after the settlement becomes final.
Current Status
Final approval granted. Judge Terrence G. Berg of the U.S. District Court for the Eastern District of Michigan approved the settlement on November 3, 2026, after a fairness hearing on October 28, and dismissed the case with prejudice. He also approved the requested attorneys' fees, costs and service awards and overruled all three objections.Claims are closed. The deadline was October 13, 2026, and the exclusion and objection deadlines passed on September 28. Benefits are paid only after the settlement becomes final, and no payment date had been announced as of November 4, 2026.
Status
Claims Closed
Claim Deadline
October 13, 2026
Estimated Payout
~$100 or up to $5,000
Estimated $100 alternative cash with no documentation, or up to $5,000 in documented losses · plus 1 year of credit monitoring · $5.5M fund · subject to pro rata adjustment
Proof Required
Yes
Unique ID & PIN from your mailed notice to file online, optional on the mailed paper form · receipts or records for the up-to-$5,000 documented-loss tier
What Changed Recently?
On November 3, 2026, the Court granted final approval in In re Doxim, Inc. Data Security Incident Litigation, Case No. 2:24-cv-11550, in the U.S. District Court for the Eastern District of Michigan, Southern Division. The order says the Settlement Administrator, Epiq, delivered postcard notice to 1,004,615 of the 1,075,803 identified class members, about 93.3%, and had received 53,618 claim forms, a claims rate of about 4.98%, with more paper claims still arriving. Nineteen people opted out, and three objected.The Court overruled all three objections. One objector wanted to stay in the settlement while keeping the right to sue later for more; the order says that required opting out instead. The others argued the payments, fees and credit monitoring were too small, or that family members should have been in the class. The judge found none of them a reason to reject the settlement. The amended settlement agreement was signed at the end of April 2026, and the Court granted preliminary approval on June 5, 2026.
The case reached this point over about two years. Six materially identical putative class actions were filed starting June 13, 2024, after Doxim and the credit unions began notifying affected individuals on May 31, 2024; the federal cases were consolidated in October 2024, and a consolidated complaint alleging negligence, negligence per se, unjust enrichment, breach of contract, breach of fiduciary duty, breach of third-party beneficiary contract, and declaratory and injunctive relief was filed that December. Each defendant moved to dismiss. Before the Court ruled, the parties mediated in November 2025 and agreed on settlement terms.
The defendants — Doxim, Inc., Credit Union ONE, and Beacon Credit Union — deny the legal claims and deny any wrongdoing or liability, and the Court has not decided that any of them did anything wrong or that any law was violated. The parties agreed to settle to avoid the risk, cost, and time of continuing the lawsuit.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
Who Qualifies?
The settlement class is all living individuals residing in the United States who were identified by Doxim and who were sent notice by Doxim or one of Doxim's Credit Union Clients that their private information was impacted in the data incident. If a notice about this settlement reached you by mail, you have been identified as a class member.Doxim is a third-party service provider that helps credit unions prepare account statements and income tax forms for their members, so the information at issue was collected or maintained by Doxim or by the credit unions it serves. "Doxim's Credit Union Clients" is defined broadly as every credit union that directly or indirectly gave class members' private information to Doxim that was subject to unauthorized access in the incident, including but not limited to the two credit unions named as defendants, Credit Union ONE and Beacon Credit Union. The information involved may include names, addresses, financial account numbers, and Social Security numbers.
Excluded from the class are directors, officers, and employees of the defendants; the judge assigned to the case, that judge's immediate family, and court staff; and anyone who timely and validly excludes themselves from the settlement.
How Much Can You Get?
Doxim has agreed to pay a non-reversionary settlement fund of $5,500,000. No money goes back to the defendants; the fund pays class member benefits, settlement administration costs, court-approved attorneys' fees and costs, and service awards. There are two cash options, and you choose one of them, plus a credit monitoring benefit you can claim on top of either.Cash Payment A — documented losses, up to $5,000. If you can document fraud or identity theft losses reasonably traceable to the data incident, you can be reimbursed up to $5,000. The claim form breaks these into three categories: professional fees incurred to address identity theft or fraud, such as falsified tax returns or account fraud; other losses or costs resulting from identity theft or fraud; and other expenses such as notary, fax, postage, copying, mileage, or long-distance telephone charges related to the incident. Eligible losses are those incurred on or after December 30, 2023 through the date you submit your claim. You cannot be reimbursed for expenses already covered by another source, including the credit monitoring and identity theft protection offered in the original breach notification letter.
Cash Payment B — alternative cash, estimated $100. Instead of Cash Payment A, you can check a single box and receive a cash payment in the estimated amount of $100 without providing any documentation of loss.
Credit monitoring — one year. In addition to Cash Payment A or Cash Payment B, every class member can claim one year of one-bureau credit monitoring. The settlement agreement describes the service as including dark web monitoring, high-risk transaction monitoring with real-time alerts, a security freeze, and $1 million in insurance coverage. Enrollment does not obligate you to buy anything.
The $100 figure is an estimate, not a guarantee. Cash payments may be increased or decreased pro rata on an equal percentage basis depending on the total value of all valid claims. For that calculation the Settlement Administrator pays out of the fund in a set order: credit monitoring first, then Cash Payment A documented-loss claims, then Cash Payment B alternative cash claims. If claims come in below the net fund, payments can rise; if they exceed it, payments are reduced. Any money left from uncashed checks 20 days after the 120-day check-cashing period goes to the Michigan State Bar Foundation, which the Court approved as the cy pres recipient in the final approval order.
The Court awarded class counsel attorneys' fees of one-third of the settlement fund, $1,833,333.33, plus about $23,195 in litigation costs, and a $2,500 service award to each of the six class representatives. Those amounts come out of the fund before cash payments are calculated.
What Proof or Notice ID Is Required?
This page is marked Proof Required because of how the online claim portal works. To file online you need the Unique ID and PIN printed on the notice mailed to you, and the portal asks you to verify your identity as a class member during filing. That is an administrator-issued credential, so even the no-documentation $100 tier is reached through something a class member had to receive in the mail. After you submit online, a confirmation code is emailed to you.There is a route around it. The printable paper claim form treats the Unique ID as optional and states that you may leave the field blank if you do not have one, so a claim can be mailed in without the code. If you believe you are in the class but never received a notice or cannot find it, use the contact route on the official settlement website to reach the Settlement Administrator about your Unique ID or to request a paper claim form.
Documentation is a separate question from the Unique ID. Cash Payment A requires reasonable documentation of your losses — the notice gives telephone records, receipts, and correspondence including emails as examples — and the claim form asks you to describe what you are attaching and how it relates to the data incident. Cash Payment B and the credit monitoring benefit require no documentation of loss. Every claim form is signed under penalty of perjury, and the Settlement Administrator may contact you for more information before your claim is complete.
What Is the Deadline?
• Data Incident: on or about December 30, 2023
• Exclusion (Opt-Out) Deadline: postmarked by September 28, 2026
• Objection Deadline: filed with the Court, and mailed or shipped to counsel and the administrator, by September 28, 2026
• Claim Deadline: submitted online by 11:59 p.m. Eastern time on October 13, 2026, or postmarked by October 13, 2026
• Final Approval Hearing: held October 28, 2026, in Detroit, Michigan
• Final Approval Granted: November 3, 2026
Opting out and objecting both carry a stricter signature rule than filing a claim: each must carry your own wet ink signature, and electronic signatures are not accepted. You cannot opt out by telephone or email, and group or "mass" opt-outs signed by someone else on behalf of multiple class members will not be allowed. If you opt out you get no settlement benefits but keep your right to sue over these claims on your own; if you do nothing, you get no benefits and still give up those rights.
How Do You Take Action?
Claims closed on October 13, 2026; this section describes how claims were filed. The fastest route was the online claim form at DoximDataSecuritySettlement.com, using the Unique ID and PIN from your notice. Decide before you start which cash option you want, because Cash Payment A and Cash Payment B are alternatives and the form asks you to elect one — if you are claiming documented losses, gather your receipts, statements, and correspondence first. Check the credit monitoring box as well if you want the free year; it is offered in addition to whichever cash option you pick, and the activation code is emailed to you after the settlement becomes final.You can also download and print a paper claim form from the settlement website and mail it to the Settlement Administrator, postmarked by October 13, 2026. On either version you choose how to be paid: PayPal, Venmo, or Zelle using the email or phone number tied to that account, or an ACH transfer to a checking or savings account. Selecting more than one option, or leaving the payment election blank, means you are mailed a paper check instead — and class members who receive a check have 120 days to cash it. If your mailing or email address changes after you file, it is your responsibility to tell the Settlement Administrator, or your payment may not reach you.
What Happens Next?
The final approval order was entered on November 3, 2026. Because objections were filed, the settlement becomes effective 30 days after that order if no one appeals, or 30 days after any appeal is resolved in the settlement's favor. The Settlement Administrator then has up to 45 days from the effective date to distribute benefits. If no appeal is filed, that puts the effective date around early December 2026 and payments by about mid-January 2027.No payment date had been announced as of November 4, 2026. Credit monitoring activation codes are emailed after the settlement becomes final. Uncashed checks expire after 120 days, and the remainder goes to the Michigan State Bar Foundation.
Related Data Breach Settlements
Vendor breaches in the credit union sector have produced several open claim windows at once. The Bradford-Scott Data (Sharetec) data breach settlement covers a July 2023 incident at another credit union software company and pays an estimated $100 with no documentation or up to $5,000 documented, with claims due October 7, 2026. The Heritage South Credit Union data breach settlement is a breach at the credit union itself rather than a vendor, and the OnePoint Patient Care data breach settlement uses a near-identical Cash Payment A / Cash Payment B structure on the same timeline. If you have not followed a case from breach notice to check before, our data breach class action glossary entry walks through the stages, and the open data breach settlements hub tracks which claim windows are still live, sorted by deadline.Sources and Verification
• Official settlement website, including its Frequently Asked Questions, Documents, and Submit a Claim pages: Doxim Data Security Settlement.com• Court-authorized Notice of Class Action Settlement and Claim Form, In re Doxim, Inc. Data Security Incident Litigation, Case No. 2:24-cv-11550, U.S. District Court for the Eastern District of Michigan, Southern Division (embedded below)
• Amended Settlement Agreement, ECF No. 74-2, filed May 5, 2026, including the definitions, settlement fund, settlement benefits, claim process, and release provisions
• Order granting final approval and attorneys' fees, costs and service awards, ECF No. 84 (November 3, 2026)
OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm.
Questions
Do I need my notice to file a Doxim settlement claim?
To file online, yes. The claim portal on the official settlement website asks for the Unique ID and PIN printed on the notice that was mailed to you, and you are asked to verify your identity as a class member during filing. The mailed paper claim form lets you leave the Unique ID field blank if you do not have one. Because the online route is gated on an administrator-issued code, this page treats the settlement as proof-required. If you never received a notice or cannot find it, use the contact route on the official settlement website.
What is the difference between Cash Payment A and Cash Payment B in the Doxim settlement?
Cash Payment A reimburses documented fraud or identity theft losses that can be reasonably traced to the data incident, up to $5,000 per class member, and requires reasonable supporting documentation such as receipts, telephone records, or correspondence. Cash Payment B is an alternative cash payment in the estimated amount of $100 that requires no documentation. You choose one or the other. If you elect Cash Payment A and do not submit reasonable documentation, or the Settlement Administrator finds the claim invalid and you do not cure it, the claim is processed as Cash Payment B.
Is the estimated $100 Doxim payment guaranteed?
No. The notice describes $100 as an estimate. Cash payments may be adjusted pro rata, up or down on an equal percentage basis, depending on the total value of all valid claims measured against the net settlement fund. For that calculation the Settlement Administrator pays credit monitoring first, then Cash Payment A documented-loss claims, then Cash Payment B alternative cash claims.
Can I claim both credit monitoring and a cash payment?
Yes. Credit monitoring is offered in addition to Cash Payment A or Cash Payment B, not instead of it. Every settlement class member is eligible to claim one year of one-bureau credit monitoring, which the settlement agreement describes as including dark web monitoring, high-risk transaction monitoring with real-time alerts, a security freeze, and $1 million in insurance coverage. If you check that box, an activation code is emailed to you after the settlement becomes final.
Which credit unions are covered by the Doxim settlement?
The settlement is not limited to a single credit union. Doxim's Credit Union Clients are defined as every credit union that directly or indirectly provided class members' private information to Doxim that was subject to unauthorized access in the incident, including but not limited to the two credit unions named as defendants, Credit Union ONE and Beacon Credit Union. What determines class membership is whether Doxim identified you and you were sent notice, not which credit union you belong to.
When will Doxim settlement payments be sent?
No payment date has been announced. The Court granted final approval on November 3, 2026. Because objections were filed, the settlement becomes effective 30 days after that order if no appeal is filed, and the Settlement Administrator then has up to 45 days to distribute benefits, which points to payments by about mid-January 2027 if there is no appeal. Payments are made electronically or by paper check, and class members who receive a check have 120 days to cash it.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
$5,500,000
Case Title
In re Doxim, Inc. Data Security Incident Litigation
Case Number
2:24-cv-11550
Court
U.S. District Court, Eastern District of Michigan, Southern Division (Hon. Terrence G. Berg)
Final Approval
Granted November 3, 2026
Fairness hearing held October 28, 2026 · fees, costs and service awards approved
Administrator
Epiq Class Action & Claims Solutions, Inc.
Official Website
Doxim Data Security Settlement.com
