Published
August 3, 2026
This $5,500,000 settlement resolves claims over the December 2023 data incident at Doxim, Inc., the vendor that prepares account statements and tax forms for credit unions. If you were sent a notice, you can claim an estimated $100 with no documentation — or up to $5,000 for documented losses — plus a free year of credit monitoring, by October 13, 2026.
Current Status
Claims are open. Claim forms must be submitted online by 11:59 p.m. Eastern time on October 13, 2026, or mailed to the Settlement Administrator and postmarked by the same date. The deadline to exclude yourself from the settlement or to object to it is earlier: September 28, 2026. The U.S. District Court for the Eastern District of Michigan has scheduled a final approval hearing for October 28, 2026 at 10:00 a.m. before the Honorable Terrence G. Berg; no final approval order had been entered as of August 3, 2026. Benefits are provided only after the Court approves the settlement and it becomes final, and no payment date had been announced as of August 3, 2026.
Status
Claims Open
Claim Deadline
October 13, 2026
Estimated Payout
~$100 or up to $5,000
Estimated $100 alternative cash with no documentation, or up to $5,000 in documented losses · plus 1 year of credit monitoring · $5.5M fund · subject to pro rata adjustment
Proof Required
Yes
Unique ID & PIN from your mailed notice to file online, optional on the mailed paper form · receipts or records for the up-to-$5,000 documented-loss tier
What Changed Recently?
The claim window is now running. The Court authorized notice to the settlement class in In re Doxim, Inc. Data Security Incident Litigation, Case No. 2:24-cv-11550, in the U.S. District Court for the Eastern District of Michigan, Southern Division, and the Settlement Administrator has mailed postcard notices carrying each class member's Unique ID. The amended settlement agreement was signed at the end of April 2026 and filed with the Court on May 5, 2026, and it sets the deadlines below.The case reached this point over about two years. Six materially identical putative class actions were filed starting June 13, 2024, after Doxim and the credit unions began notifying affected individuals on May 31, 2024; the federal cases were consolidated in October 2024, and a consolidated complaint alleging negligence, negligence per se, unjust enrichment, breach of contract, breach of fiduciary duty, breach of third-party beneficiary contract, and declaratory and injunctive relief was filed that December. Each defendant moved to dismiss. Before the Court ruled, the parties mediated in November 2025 and agreed on settlement terms.
The defendants — Doxim, Inc., Credit Union ONE, and Beacon Credit Union — deny the legal claims and deny any wrongdoing or liability, and the Court has not decided that any of them did anything wrong or that any law was violated. The parties agreed to settle to avoid the risk, cost, and time of continuing the lawsuit.
Who Qualifies?
The settlement class is all living individuals residing in the United States who were identified by Doxim and who were sent notice by Doxim or one of Doxim's Credit Union Clients that their private information was impacted in the data incident. If a notice about this settlement reached you by mail, you have been identified as a class member.Doxim is a third-party service provider that helps credit unions prepare account statements and income tax forms for their members, so the information at issue was collected or maintained by Doxim or by the credit unions it serves. "Doxim's Credit Union Clients" is defined broadly as every credit union that directly or indirectly gave class members' private information to Doxim that was subject to unauthorized access in the incident, including but not limited to the two credit unions named as defendants, Credit Union ONE and Beacon Credit Union. The information involved may include names, addresses, financial account numbers, and Social Security numbers.
Excluded from the class are directors, officers, and employees of the defendants; the judge assigned to the case, that judge's immediate family, and court staff; and anyone who timely and validly excludes themselves from the settlement.
How Much Can You Get?
Doxim has agreed to pay a non-reversionary settlement fund of $5,500,000. No money goes back to the defendants; the fund pays class member benefits, settlement administration costs, court-approved attorneys' fees and costs, and service awards. There are two cash options, and you choose one of them, plus a credit monitoring benefit you can claim on top of either.Cash Payment A — documented losses, up to $5,000. If you can document fraud or identity theft losses reasonably traceable to the data incident, you can be reimbursed up to $5,000. The claim form breaks these into three categories: professional fees incurred to address identity theft or fraud, such as falsified tax returns or account fraud; other losses or costs resulting from identity theft or fraud; and other expenses such as notary, fax, postage, copying, mileage, or long-distance telephone charges related to the incident. Eligible losses are those incurred on or after December 30, 2023 through the date you submit your claim. You cannot be reimbursed for expenses already covered by another source, including the credit monitoring and identity theft protection offered in the original breach notification letter.
Cash Payment B — alternative cash, estimated $100. Instead of Cash Payment A, you can check a single box and receive a cash payment in the estimated amount of $100 without providing any documentation of loss.
Credit monitoring — one year. In addition to Cash Payment A or Cash Payment B, every class member can claim one year of one-bureau credit monitoring. The settlement agreement describes the service as including dark web monitoring, high-risk transaction monitoring with real-time alerts, a security freeze, and $1 million in insurance coverage. Enrollment does not obligate you to buy anything.
The $100 figure is an estimate, not a guarantee. Cash payments may be increased or decreased pro rata on an equal percentage basis depending on the total value of all valid claims. For that calculation the Settlement Administrator pays out of the fund in a set order: credit monitoring first, then Cash Payment A documented-loss claims, then Cash Payment B alternative cash claims. If claims come in below the net fund, payments can rise; if they exceed it, payments are reduced. Any residual funds left after distribution go to a court-approved cy pres recipient, proposed as the Michigan State Bar Foundation.
Class counsel will ask the Court to award attorneys' fees of up to one-third of the settlement fund plus reimbursement of costs, and service awards of up to $2,500 for each class representative. Those amounts come out of the fund, and the Court may award less than requested.
What Proof or Notice ID Is Required?
This page is marked Proof Required because of how the online claim portal works. To file online you need the Unique ID and PIN printed on the notice mailed to you, and the portal asks you to verify your identity as a class member during filing. That is an administrator-issued credential, so even the no-documentation $100 tier is reached through something a class member had to receive in the mail. After you submit online, a confirmation code is emailed to you.There is a route around it. The printable paper claim form treats the Unique ID as optional and states that you may leave the field blank if you do not have one, so a claim can be mailed in without the code. If you believe you are in the class but never received a notice or cannot find it, use the contact route on the official settlement website to reach the Settlement Administrator about your Unique ID or to request a paper claim form.
Documentation is a separate question from the Unique ID. Cash Payment A requires reasonable documentation of your losses — the notice gives telephone records, receipts, and correspondence including emails as examples — and the claim form asks you to describe what you are attaching and how it relates to the data incident. Cash Payment B and the credit monitoring benefit require no documentation of loss. Every claim form is signed under penalty of perjury, and the Settlement Administrator may contact you for more information before your claim is complete.
What Is the Deadline?
• Data Incident: on or about December 30, 2023
• Exclusion (Opt-Out) Deadline: postmarked by September 28, 2026
• Objection Deadline: filed with the Court, and mailed or shipped to counsel and the administrator, by September 28, 2026
• Claim Deadline: submitted online by 11:59 p.m. Eastern time on October 13, 2026, or postmarked by October 13, 2026
• Final Approval Hearing: October 28, 2026 at 10:00 a.m., in Detroit, Michigan
Opting out and objecting both carry a stricter signature rule than filing a claim: each must carry your own wet ink signature, and electronic signatures are not accepted. You cannot opt out by telephone or email, and group or "mass" opt-outs signed by someone else on behalf of multiple class members will not be allowed. If you opt out you get no settlement benefits but keep your right to sue over these claims on your own; if you do nothing, you get no benefits and still give up those rights.
The hearing date and time can change without further notice to the class, and the Court may hold it by video or telephone, so check the official settlement website before relying on the schedule.
How Do You Take Action?
The fastest route is the online claim form at DoximDataSecuritySettlement.com, using the Unique ID and PIN from your notice. Decide before you start which cash option you want, because Cash Payment A and Cash Payment B are alternatives and the form asks you to elect one — if you are claiming documented losses, gather your receipts, statements, and correspondence first. Check the credit monitoring box as well if you want the free year; it is offered in addition to whichever cash option you pick, and the activation code is emailed to you after the settlement becomes final.You can also download and print a paper claim form from the settlement website and mail it to the Settlement Administrator, postmarked by October 13, 2026. On either version you choose how to be paid: PayPal, Venmo, or Zelle using the email or phone number tied to that account, or an ACH transfer to a checking or savings account. Selecting more than one option, or leaving the payment election blank, means you are mailed a paper check instead — and class members who receive a check have 120 days to cash it. If your mailing or email address changes after you file, it is your responsibility to tell the Settlement Administrator, or your payment may not reach you.
What Happens Next?
The Court will hold the final approval hearing on October 28, 2026 at 10:00 a.m. before Judge Terrence G. Berg at the federal courthouse in Detroit. At that hearing the Court will consider whether the settlement is fair, reasonable, and adequate, and will rule on the application for attorneys' fees, costs, and service awards. Any objections filed by the September 28, 2026 deadline will be considered, and an objector who asks to speak may be heard at the Court's discretion. You do not have to attend.If the Court grants final approval, the settlement becomes effective five days after the approval order when no objections were filed. If objections were filed, the effective date is 30 days after the order when no appeal is taken, or 30 days after the last appellate ruling affirming it or the dismissal of an appeal. The Settlement Administrator then has up to 45 days from the effective date to distribute benefits. No payment date had been announced as of August 3, 2026, and a scheduled hearing is not an approval — check the official settlement website for the ruling and any schedule changes.
Related Data Breach Settlements
Vendor breaches in the credit union sector have produced several open claim windows at once. The Bradford-Scott Data (Sharetec) data breach settlement covers a July 2023 incident at another credit union software company and pays an estimated $100 with no documentation or up to $5,000 documented, with claims due October 7, 2026. The Heritage South Credit Union data breach settlement is a breach at the credit union itself rather than a vendor, and the OnePoint Patient Care data breach settlement uses a near-identical Cash Payment A / Cash Payment B structure on the same timeline. If you have not followed a case from breach notice to check before, our data breach class action glossary entry walks through the stages, and the open data breach settlements hub tracks which claim windows are still live, sorted by deadline.Sources and Verification
• Official settlement website, including its Frequently Asked Questions, Documents, and Submit a Claim pages: Doxim Data Security Settlement.com• Court-authorized Notice of Class Action Settlement and Claim Form, In re Doxim, Inc. Data Security Incident Litigation, Case No. 2:24-cv-11550, U.S. District Court for the Eastern District of Michigan, Southern Division (embedded below)
• Amended Settlement Agreement, ECF No. 74-2, filed May 5, 2026, including the definitions, settlement fund, settlement benefits, claim process, and release provisions
OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm.
Questions
Do I need my notice to file a Doxim settlement claim?
To file online, yes. The claim portal on the official settlement website asks for the Unique ID and PIN printed on the notice that was mailed to you, and you are asked to verify your identity as a class member during filing. The mailed paper claim form lets you leave the Unique ID field blank if you do not have one. Because the online route is gated on an administrator-issued code, this page treats the settlement as proof-required. If you never received a notice or cannot find it, use the contact route on the official settlement website.
What is the difference between Cash Payment A and Cash Payment B in the Doxim settlement?
Cash Payment A reimburses documented fraud or identity theft losses that can be reasonably traced to the data incident, up to $5,000 per class member, and requires reasonable supporting documentation such as receipts, telephone records, or correspondence. Cash Payment B is an alternative cash payment in the estimated amount of $100 that requires no documentation. You choose one or the other. If you elect Cash Payment A and do not submit reasonable documentation, or the Settlement Administrator finds the claim invalid and you do not cure it, the claim is processed as Cash Payment B.
Is the estimated $100 Doxim payment guaranteed?
No. The notice describes $100 as an estimate. Cash payments may be adjusted pro rata, up or down on an equal percentage basis, depending on the total value of all valid claims measured against the net settlement fund. For that calculation the Settlement Administrator pays credit monitoring first, then Cash Payment A documented-loss claims, then Cash Payment B alternative cash claims.
Can I claim both credit monitoring and a cash payment?
Yes. Credit monitoring is offered in addition to Cash Payment A or Cash Payment B, not instead of it. Every settlement class member is eligible to claim one year of one-bureau credit monitoring, which the settlement agreement describes as including dark web monitoring, high-risk transaction monitoring with real-time alerts, a security freeze, and $1 million in insurance coverage. If you check that box, an activation code is emailed to you after the settlement becomes final.
Which credit unions are covered by the Doxim settlement?
The settlement is not limited to a single credit union. Doxim's Credit Union Clients are defined as every credit union that directly or indirectly provided class members' private information to Doxim that was subject to unauthorized access in the incident, including but not limited to the two credit unions named as defendants, Credit Union ONE and Beacon Credit Union. What determines class membership is whether Doxim identified you and you were sent notice, not which credit union you belong to.
When will Doxim settlement payments be sent?
No payment date has been announced. The notice states that benefits are provided after the Court approves the settlement and it becomes final, and the settlement agreement gives the Settlement Administrator up to 45 days after the Effective Date to distribute them. As of August 3, 2026 the final approval hearing, set for October 28, 2026, had not been held and no final approval order had been entered. Payments are made electronically or by paper check, and class members who receive a check have 120 days to cash it.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
$5,500,000
Case Title
In re Doxim, Inc. Data Security Incident Litigation
Case Number
2:24-cv-11550
Court
U.S. District Court, Eastern District of Michigan, Southern Division (Hon. Terrence G. Berg)
Final Approval Hearing
October 28, 2026 at 10:00 a.m.
Theodore Levin U.S. Courthouse, Detroit, Michigan — date and time subject to change
Administrator
Epiq Class Action & Claims Solutions, Inc.
Official Website
Doxim Data Security Settlement.com
