If Lee University mailed you a breach notice last spring, you have until August 19, 2026 to claim up to $5,000 in documented losses or an estimated $100 cash payment, plus a year of credit monitoring.
What Is This Settlement About?
Lee University, a private university in Cleveland, Tennessee, agreed to a $1.75 million class action settlement to resolve claims arising from a data security incident discovered around March 22, 2024. The lawsuit — Harris et al. v. Lee University, in the U.S. District Court for the Eastern District of Tennessee — alleged the university failed to adequately protect personal information exposed through a third-party software vulnerability. A ransomware group claimed responsibility for the attack and claimed to have taken roughly 388 GB of data; that is the attacker's claim and has not been independently verified. Lee University denies wrongdoing and settled to avoid the cost and uncertainty of continued litigation.The university sent breach notices to about 136,928 people beginning March 25, 2025. The exposed information varied by person and may have included names, Social Security numbers, driver's license or government ID numbers, financial account information, and medical information. The settlement received preliminary approval in May 2026, opening the claim window that runs through August 19, 2026.
Who Qualifies?
The settlement class includes people whose personal information was involved in the Lee University data security incident — in practical terms, the roughly 136,928 individuals to whom Lee University mailed or emailed a breach notification letter beginning March 25, 2025. If you received one of those notices, you are a class member and may file a claim. Students, former students, employees, and others whose data the university held can all be included; class membership is defined by having been notified, not by any current relationship with the university.How Much Can You Get?
The settlement offers two mutually exclusive cash benefits, plus credit monitoring:- Documented losses — reimbursement of up to $5,000 for out-of-pocket losses fairly traceable to the breach, such as fraud losses, credit-repair costs, or fees, supported by third-party documentation like receipts or account statements.
- Alternative cash payment — an estimated $100 pro rata payment requiring no loss documentation. The final amount rises or falls depending on how many valid claims are filed against the fund.
- Credit monitoring — one year of free credit monitoring, available in addition to either cash benefit.
How to File a Claim
File online at the official settlement website by 11:59 p.m. ET on August 19, 2026, or download the claim form and mail it postmarked by the same date. Have the notice Lee University sent you handy — the online portal is expected to ask for the identifier printed on it — and gather documentation before starting if you are claiming the up-to-$5,000 loss tier. If you cannot locate your notice, use the contact page on the official settlement website to request your information; do not rely on third-party sites.Class members who want no part of the settlement must opt out by August 4, 2026, which preserves the right to sue individually. Objections are due the same day. Class members who do nothing receive no payment but remain bound by the settlement's release.
Frequently Asked Questions
Who qualifies for the Lee University data breach settlement?
The settlement covers people whose personal information was involved in the Lee University data security incident discovered in March 2024 — about 136,928 individuals who were sent a breach notice beginning March 25, 2025. Exposed data varied by person and may have included names, Social Security numbers, driver's license or government ID numbers, financial account information, and medical information.
How much can I get from the Lee University settlement?
Class members can claim reimbursement of up to $5,000 for documented out-of-pocket losses fairly traceable to the breach, or an estimated $100 pro rata cash payment (the exact amount depends on how many valid claims are filed). Claimants can also enroll in one year of free credit monitoring.
What is the deadline to file a Lee University settlement claim?
Claims must be submitted online by 11:59 p.m. ET on August 19, 2026, or postmarked by that date. The deadline to opt out or object is August 4, 2026, and the final approval hearing is set for September 3, 2026.
Do I need proof to file a Lee University claim?
Filing online is expected to require the identifier printed on the settlement notice you received by mail or email, and documented-loss claims require supporting records such as receipts or account statements showing losses traceable to the breach. If you cannot locate your notice information, use the contact page on the official settlement website.
What happened in the Lee University data breach?
Lee University, a private university in Cleveland, Tennessee, discovered unauthorized access to its systems around March 22, 2024, tied to a third-party software vulnerability. A ransomware group claimed responsibility and claimed to have taken roughly 388 GB of data — an attacker claim that has not been independently verified. The university notified about 136,928 people beginning March 25, 2025, and settled the resulting class action without admitting wrongdoing.
Sources
• Official settlement website — Lee University Data Breach Settlement• Bloomberg Law — Lee University's $1.75 million data breach deal gets initial nod (May 2026)
• Comparitech — Lee University breach notification reporting
