Published
August 2, 2026
This $1,050,000 settlement resolves claims over the September 2023 data incident at the accounting and advisory firms EisnerAmper LLP and Eisner Advisory Group LLC, where names, Social Security numbers, financial account information, dates of birth and medical or health insurance information may have been exposed. If you were notified, you can claim an estimated $100 cash payment, up to $5,000 in documented losses, and two years of credit monitoring by October 8, 2026 — and California residents can add a $50 CCPA payment on top.
Current Status
Claims are open. The deadline to file is October 8, 2026 — Claim Forms must be submitted online or postmarked by that date. Judge Laura M. Provinzino granted preliminary approval on June 11, 2026, and the Final Approval Hearing is scheduled for October 13, 2026 at 2:00 p.m. CDT in St. Paul, Minnesota. No final approval order has been entered and no payment date had been announced as of August 2, 2026. If you received a postcard or email notice, it carries the Claim ID and PIN you need to file online.
Status
Claims Open
preliminary approval granted June 11, 2026 · final approval hearing October 13, 2026
Claim Deadline
October 8, 2026
submitted online or postmarked by that date · opt out or object by September 8, 2026
Estimated Payout
~$100 or up to $5,000
pro rata cash estimated at $100 · documented losses up to $5,000 · 2 years of credit monitoring · +$50 for California residents
Proof Required
Yes
Claim ID and PIN from your notice to file online · third-party documentation for loss claims
What Changed Recently?
The settlement reached the claims stage this summer. The parties signed the Settlement Agreement dated May 1, 2026 and filed it on May 13, 2026; Judge Provinzino granted preliminary approval on June 11, 2026, certified the Settlement Class and a California Subclass for settlement purposes only, appointed Verita Global as Claims Administrator, and set the notice, opt-out, objection and claim deadlines. Notice went out to the class in July 2026 by postcard and email, each carrying a Claim ID and PIN.The case itself is a consolidation. According to the Settlement Agreement, the first complaint was filed in Minnesota on April 8, 2025, the day Eisner began sending breach notices, and four more Minnesota cases followed; they were consolidated in May 2025. A parallel group of four cases was filed in the Southern District of New York starting April 11, 2025 and consolidated there. Eisner moved to transfer the New York cases to Minnesota in December 2025, the New York plaintiffs did not oppose, and the transfer was granted February 25, 2026. A consolidated amended complaint covering both groups was filed April 8, 2026. The parties mediated on September 25, 2025 before a retired federal magistrate judge, did not settle that day, and reached terms in the months that followed.
Eisner denies each of the claims and denies any liability or wrongdoing. The Settlement Agreement states expressly that it is not an admission, and the Court has not decided the merits.
Who Qualifies?
The Settlement Class covers all people who were affected by the Data Incident, including — but not limited to — anyone who was sent a notice letter by Eisner about the data incident discovered in September 2023. A California Subclass covers those class members in California, who are eligible for an extra payment under the California Consumer Privacy Act.The incident itself was narrow in time and broad in content. Eisner became aware of suspicious activity on or around September 9, 2023 and its investigation determined that there was unauthorized access to a limited set of information between September 4 and September 9, 2023. The types of personally identifiable information that could have been affected include name, Social Security number, financial account information, date of birth, medical information and health insurance information.
The Settlement Agreement states that Eisner identified approximately 82,459 individuals whose information may have been impacted, with notice mailed beginning April 8, 2025. The consolidated complaint alleged the breach affected more than 85,000 people; the 82,459 figure is the one Eisner identified.
Because EisnerAmper is an accounting, tax and advisory firm rather than a consumer business, a lot of class members will not think of themselves as customers. The records involved can include employees and former employees of the firm's business clients, individuals whose information arrived through a tax or audit engagement, and Eisner's own personnel. What matters is whether your information was affected, not whether you ever hired the firm.
Excluded from the class are Eisner and entities it controls, along with its officers, directors, legal representatives, successors, subsidiaries and assigns; the judges presiding over the case, their immediate families and judicial staff; anyone who timely opts out; the attorneys for the parties; and anyone found guilty under criminal law of initiating, causing, aiding or abetting the data incident.
How Much Can You Get?
The settlement creates a non-reversionary common fund of $1,050,000 — non-reversionary meaning no unclaimed portion goes back to Eisner. Four benefits are available, and the Claim Form lets you select more than one.Documented monetary losses — up to $5,000. Reimbursement for unreimbursed losses fairly traceable to the data incident, capped at $5,000 per class member. The settlement's examples include unreimbursed fraud or identity theft losses, out-of-pocket credit monitoring bought on or after September 4, 2023, credit freeze and unfreeze fees, professional fees for identity repair or for refiling a fraudulent tax return, and miscellaneous costs such as postage, notary fees, copying, mileage and long-distance calls. The list is illustrative rather than exhaustive.
Credit monitoring. Two years of single-bureau credit monitoring with at least $1,000,000 of identity theft insurance. You have to ask for it on the Claim Form; activation codes are then sent to the email or mailing address you provide.
Pro rata cash payment — estimated at $100. A cash payment with no documentation required. The $100 is an estimate, not a fixed amount, and there is no maximum. The administrator pays valid claims in a set order — documented monetary losses first, then credit monitoring, then the CCPA payments — and the remainder of the net fund is divided among everyone who claimed the cash payment. If claims come in light, the per-person amount rises; if they come in heavy, it falls. Any increase or decrease is applied on an equal percentage basis. (For how this arithmetic works generally, see our explainer on pro rata distribution.)
CCPA payment — $50 for California residents. California Subclass members can claim an additional $50 cash payment for the claim brought under the California Consumer Privacy Act. It sits on top of the other benefits, and it can be reduced pro rata if the fund runs short after the fee award, service awards, administration costs, documented-loss claims and credit monitoring are paid.
The fund also pays the costs of notice and administration, service awards of up to $2,500 for each class representative, and attorney fees of up to one-third of the fund — $350,000 — plus reimbursement of litigation expenses. The Court rules on those amounts at the Final Approval Hearing, and what is left after them is what funds the class payments.
Separately, the settlement includes non-monetary relief: Eisner has adopted, paid for and agreed to maintain information-security changes to safeguard personal information on its systems, detailed to Class Counsel in a confidential declaration.
Payments are issued by check or electronically; the Claim Form offers check, PayPal and Venmo. Checks are void 90 days after issuance, and reissued checks are valid for 45 days. If money is left in the fund after distribution, it goes out in a second pro rata round to the cash-payment claimants, unless that would come to less than $5.00 each, in which case it is distributed as state law requires or to a cy pres recipient.
What Proof or Claim ID Is Required?
Two different requirements apply, depending on which benefit you claim.To file at all, you need the credential the administrator assigned you. The online claim portal opens on a screen that asks you to confirm you have a Claim ID and PIN, and the mailed postcard prints both on the address panel. The long-form Claim Form has a Class Member ID field with the same instruction: if your notice came by mail the ID is on the envelope or postcard, and if it came by email the ID is in the email. Because filing is gated on a code that only appears in the notice, this page treats the settlement as Proof Required: Yes, even though the cash payment itself asks for no documentation.
To claim documented monetary losses you need substantiation on top of that. The settlement requires reasonable third-party documentation for each claimed loss — account statements showing unauthorized charges, correspondence from a bank or the IRS, receipts for credit monitoring or a credit freeze, professional invoices, and so on — plus an attestation that the loss resulted from the data incident. The agreement states that self-prepared documents such as handwritten receipts are not sufficient by themselves, though they can be submitted to clarify other documentation.
If a loss claim comes in short, the administrator notifies you and gives you 21 days to cure the deficiency. A documented-loss claim that is ultimately rejected is treated as if you had elected the pro rata cash payment only, so a failed loss claim does not cost you the cash payment.
If no notice reached you, or you no longer have it, use the Contact Us page on the official settlement website to ask the administrator whether you are on the class list and how to obtain a Claim ID.
What Is the Deadline?
Claim Forms are due October 8, 2026, submitted online or postmarked by that date. Requests for exclusion and objections are both due September 8, 2026.One note on the dates. The Court's preliminary approval order lists the claim deadline as October 9 and the opt-out and objection deadlines as September 9, while the mailed notice, the Claim Form and the settlement website all print October 8 and September 8. The earlier dates are the ones printed on what class members actually received, and acting by them satisfies either version — so treat October 8 and September 8 as your deadlines rather than counting on the extra day.
How Do You File a Claim?
Filing online is the most direct route. Open the official settlement website, EisnerDataSettlement.com, go to File Claim, and enter the Claim ID and PIN from your postcard or email notice. From there you select which benefits you want — the cash payment, the credit monitoring, the CCPA payment if you are a California resident, and documented monetary losses — attach documentation for any loss claim, choose a payment method, and sign electronically.There are two paper routes as well. The postcard notice carries a tear-off summary claim form with prepaid postage that lets you claim the cash payment, the credit monitoring and the CCPA payment by filling in circles and signing. A full paper Claim Form can also be downloaded from the settlement website and mailed to the administrator at the address printed on it. Documented monetary losses have to be filed online, per the instruction on the postcard.
Whichever route you take, keep a copy of what you submit and of any documentation you attach.
What If You Want Out — or Want to Object?
Opting out means you get nothing from the settlement but keep the right to sue Eisner yourself over the data incident. A Request for Exclusion has to be individually signed and mailed to the administrator, postmarked by September 8, 2026, and must include your full name, current address, telephone number, email address, your personal signature, and the words "Request for Exclusion" or a comparable statement at the top. Nobody can opt out on someone else's behalf or opt out a group on one paper.Objecting means you stay in the class and tell the Court why it should not approve the settlement. A written objection has to be filed with the Court and copies mailed to Class Counsel, defense counsel and the administrator, by September 8, 2026. It must include your full name, address, telephone number and email; proof that you are a class member, such as a copy of the notice; a written statement of every ground for the objection with any legal support; whether the objection applies to you alone, a subset of the class, or the whole class; the identity of any counsel representing you; whether you or your counsel will appear at the hearing; a list of every settlement you or your counsel have objected to in the past three years; and your signature. Objectors also have to make themselves available to be deposed about the objection.
Two practical points. If you object and still want a payment, you must file a Claim Form as well — objecting does not preserve your claim. And anyone who both objects and opts out is treated as having opted out, which voids the objection.
If you do nothing, you get no benefits and you are still bound by the release if the settlement is approved.
What Happens Next?
The opt-out and objection windows close September 8, 2026 and the claims period closes October 8, 2026. Class Counsel's motion for attorney fees, expenses and service awards is due September 8, 2026, and the motion for final approval is due September 29, 2026. The Final Approval Hearing is set for October 13, 2026 at 2:00 p.m. CDT in Courtroom 3A of the Warren E. Burger Federal Building in St. Paul, where the Court will decide whether the settlement is fair, reasonable and adequate and will rule on the fee and service-award requests.The settlement website's homepage currently lists October 12 for the hearing while the Court's order sets October 13; the order also notes the hearing can be moved without further notice to the class, so the settlement website is the place to confirm the date if you plan to attend.
Payments follow the Effective Date, which arrives only after final approval is granted and the time to appeal has run or any appeals are resolved. Under the agreement, payments then issue within 30 days of the Effective Date or 21 days after a claim is approved, whichever is later. A hearing being held is not the same as approval being granted, and approval being granted is not the same as money going out. No payment date had been announced as of August 2, 2026.
One term worth knowing about: Eisner may terminate the settlement at its discretion if more than 100 class members opt out.
Sources and Verification
• Official settlement website — In re Eisner Advisory Group Data Breach Litigation• Settlement Agreement and Release, Long Form Notice, Claim Form and proposed orders (PDF)
• Preliminary Approval Order entered June 11, 2026 (ECF No. 66) — Justia Dockets
• Case docket, In re Eisner Advisory Group Data Breach Litigation, No. 0:25-cv-01409 (D. Minn.) — GovInfo
• California Consumer Privacy Act — California Attorney General
Questions
I was never an EisnerAmper client. Why did I get a notice?
EisnerAmper is an accounting, tax and advisory firm, so the records on its systems can include people who never hired it directly — employees and former employees of its business clients, people whose information came in through a tax or audit engagement, and the firm's own personnel. The class is defined by whether your information was affected by the September 2023 Data Incident, not by whether you were a customer.
Can I claim more than one benefit?
Yes. The Claim Form lets you select the pro rata cash payment, the credit monitoring, and documented monetary losses, and California Subclass members can additionally claim the $50 CCPA payment. The pro rata cash payment and the CCPA payment are both cash, so a California class member who claims both would receive both, subject to the pro rata adjustments described in the settlement.
Could the estimated $100 payment change?
Yes, in either direction. The $100 figure is an estimate. The administrator pays documented monetary losses first, then credit monitoring, then the CCPA payments, and whatever remains in the fund is divided among the pro rata cash claims. If claims are light the per-person amount rises; if they are heavy it falls. There is no cap on the pro rata cash payment.
What counts as a documented monetary loss?
Losses fairly traceable to the Data Incident and not already reimbursed elsewhere — unreimbursed fraud or identity theft losses, credit monitoring you bought on or after September 4, 2023, credit freeze or unfreeze fees, professional fees for identity repair or refiling a fraudulent return, and miscellaneous costs such as postage, notary, mileage and long-distance calls. You must attach reasonable third-party documentation; the settlement states that self-prepared documents such as handwritten receipts are not sufficient on their own.
What happens if my documented-loss claim is rejected?
The administrator notifies you of the deficiency and gives you 21 days to cure it. If a documented-loss claim is ultimately rejected, the settlement provides that the claim is treated as if you had elected the pro rata cash payment only, so a rejected loss claim does not wipe out your cash payment.
When would payments go out?
Under the Settlement Agreement, payments are issued within 30 days of the Effective Date or 21 days after a claim is approved, whichever is later, and the Effective Date does not arrive until final approval is granted and any appeals are resolved. The Final Approval Hearing is set for October 13, 2026. No payment date had been announced as of August 2, 2026.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
$1,050,000
non-reversionary common fund
Case Title
In re Eisner Advisory Group Data Breach Litigation
Case Number
0:25-cv-01409-LMP-DTS
Court
U.S. District Court, District of Minnesota
Final Approval Hearing
October 13, 2026 at 2:00 PM CDT
Courtroom 3A, Warren E. Burger Federal Building, St. Paul, MN · may be moved without further notice
Administrator
Verita Global, LLC
Official Website
Eisner Data Settlement
