On Q Financial Data Breach Settlement: $50 or Up to $5,000
Data Breach · Claims Open HOT
On Q Financial Data Breach Settlement: About $50 Cash or Up to $5,000 Documented, Plus a Year of Identity Monitoring
PublishedAugust 20, 2026
This settlement resolves claims against On Q Financial, the Arizona mortgage lender, over a February 2024 data security incident that exposed clients' names and Social Security numbers. If you were sent a notice about it, you can claim a cash payment estimated at $50 with no documentation, up to $5,000 for documented out-of-pocket losses, and a year of identity theft and fraud monitoring — but only if you file by October 28, 2026, because nothing here is paid automatically.
Source: Feathers et al. v. On Q Financial, LLC (court-approved settlement notice)
Claims are open. A Claim Form must be submitted online by 11:59 p.m. Eastern Time on October 28, 2026, or mailed so that it is postmarked by that date. The separate deadline to opt out or to object is a month earlier, September 28, 2026. The court has authorized notice to the class but has not yet decided whether to approve the settlement: the final approval hearing is scheduled for November 16, 2026 at 10:00 a.m. Mountain Time in Phoenix, and the notice warns the date and time may change without further notice. No payments have been issued and no payment date has been announced. If you were sent a notice about the On Q data security incident, the step to take now is to file — nothing in this settlement is paid automatically, so a class member who does nothing receives nothing and is still bound by the release.
StatusClaims OpenNotice underway · final approval hearing November 16, 2026 · no ruling yet
Claim DeadlineOctober 28, 202611:59 p.m. Eastern Time online · mailed claims postmarked by the same date · opt-out and objection deadline is earlier, September 28, 2026
Estimated Payout~$50 or up to $5,000An alternative cash payment estimated at $50 with no documentation, or documented out-of-pocket losses up to $5,000, from a $1,250,000 fund and adjustable pro rata · plus one year of expanded identity theft and fraud monitoring
Proof RequiredYesA Class Member ID from your notice is required to log in and file online · the $5,000 tier also needs reasonable documentation of each loss
What Changed Recently?
A settlement was reached with On Q Financial, LLC, the court authorized notice to the settlement class, and the claim process opened with an October 28, 2026 deadline. That is what is new here — this page covers a settlement that has just become claimable, not a later development in one. The case is Feathers et al. v. On Q Financial, LLC, No. CV2025-037770, in the Maricopa County Superior Court in Arizona.
On Q denies all of the plaintiffs' claims and maintains that it did not do anything wrong. The notice states that the court did not decide in favor of either side, and that the parties agreed to settle to avoid the costs and risks of a trial. No court has found On Q liable.
What Is This Settlement About?
On Q Financial is an Arizona-based residential mortgage lender. According to the court-approved notice, on or around February 20, 2024 the company received notification that a vulnerability was present in the product of a software and IT management provider, and later discovered that a threat actor had exploited that vulnerability and potentially accessed files containing clients' Private Information. The notice describes that information as clients' names and Social Security numbers.
On or around March 29, 2024, On Q began notifying potentially impacted individuals. Public breach-notification filings at the time reported that the incident affected roughly 211,650 people. That figure comes from the company's regulatory breach reporting rather than from the settlement documents, which do not state a class size.
The settlement notice does not name the software vendor whose product was involved. The date it gives lines up with the disclosure window of a widely exploited authentication-bypass flaw in ConnectWise's ScreenConnect remote-management software, catalogued as CVE-2024-1709, which ConnectWise disclosed on February 19, 2024 and which CISA added to its Known Exploited Vulnerabilities catalog on February 22, 2024. Because the settlement documents do not identify the product, treat that as timeline context rather than a confirmed link.
The plaintiffs allege injuries arising from the incident. A name paired with a Social Security number is the combination that makes a breach durable — an address or a card number can be changed, and a Social Security number generally cannot — which is why the settlement's non-cash benefit is monitoring rather than a one-time fix.
The settlement class consists of individuals whose Private Information may have been compromised in the data security incident on or around February 20, 2024. Membership turns on whether your information may have been involved, not on whether you can show you were harmed — and in practice the administrator worked from the notice list, which is why a Class Member ID is what unlocks the online filing process.
Four groups are excluded: the judges presiding over the state court lawsuit, along with members of their immediate families and their staff; On Q and its subsidiaries, parent companies, successors, predecessors and any entity in which On Q has a controlling interest; anyone who properly executes and submits a Request for Exclusion by September 28, 2026; and the successors or assigns of any such excluded person.
How Much Can You Get?
On Q will pay $1,250,000 into a settlement fund. That fund covers the cash payments and the monitoring benefit for class members, plus administrative expenses, the attorneys' fee award and costs, and service awards. There are three benefits on the Claim Form.
Documented Loss Payment — up to $5,000. Reimbursement of actual out-of-pocket unreimbursed losses and consequential expenses that are more likely than not a result of the data security incident, including time spent dealing with it, and that were incurred on or after February 20, 2024. Reasonable documentation must be provided. The notice's list of qualifying costs includes long-distance telephone charges; cell phone minutes, if you are charged by the minute; internet usage charges, if charged by the minute or incurred solely because of the incident; the cost of credit reports purchased between February 20, 2024 and October 28, 2026; documented amounts paid for credit monitoring or fraud resolution services purchased in that same window, supported by a sworn statement that you bought them primarily because of this incident; documented expenses directly associated with dealing with identity theft or identity fraud related to the incident; and other documented losses fairly traceable to the incident as determined by the settlement administrator.
Alternative Cash Payment — estimated at $50. No documentation is required. The notice is explicit that $50 is an estimate: the amount will be determined by the number of valid claims and may be adjusted on a pro rata basis depending on what is left in the fund after administrative costs, attorneys' fees and costs, service awards, and the cost of approved claims for monitoring and documented losses are deducted. Against a class reported at roughly 211,650 people and a $1,250,000 fund, that ordering matters — the alternative cash payment is the residual benefit, so the figure you actually receive can land below $50.
Expanded Identity Theft and Fraud Monitoring — one year. Any class member may claim a code to enroll in an identity theft and fraud monitoring program with single-bureau credit monitoring for one year, offering up to $1,000,000 in insurance for losses due to fraud or identity theft during that period, plus access to a dedicated fraud and identity theft rehabilitation specialist. No documentation is required to select it. Class members who accepted On Q's original 2024 offer of monitoring can receive an additional year by claiming this benefit; the fund pays for the expanded year, not for the original offer.
The Claim Form instructs class members to check one or both of the two payment boxes and prints AND/OR between them, so the documented loss and alternative cash options can be selected together, and the monitoring checkbox sits separately below both. If you file for a documented loss, fail to supply sufficient documentation and do not cure the claim, the notice says it will be treated as a claim for the Alternative Cash Payment instead — so a weak documentation package does not leave you with nothing.
Class Counsel will ask the court to approve attorneys' fees of up to 35 percent of the fund, which is $437,500, plus litigation expenses and costs of up to $30,000, and a $2,500 service award to each of the four class representatives. If approved, those amounts come out of the $1,250,000 before class member payments are made.
What Proof or Notice ID Is Required?
This page is marked proof-required, and the reason is the login screen rather than the benefit description. The online claim portal opens by asking for a Class Member ID before anything else can be entered. That ID is printed on the notice you were sent — the paper Claim Form shows it as a twelve-digit number beginning 83439 — so someone who never received a notice, or who threw it away, cannot simply file online.
That is true even though the Alternative Cash Payment itself needs no documentation. "No documentation" is not the same as "no proof": the administrator-issued ID is what establishes that you are in the class, so a settlement with a documentation-free cash tier can still be gated.
If you cannot locate your Class Member ID, the contact page on the official settlement website is the route to request it or to have a paper Claim Form sent.
The $5,000 tier needs documentation on top of the ID. The notice defines reasonable documentation as records supporting the claimed loss, including credit card statements, bank statements, invoices, telephone records and receipts. The paper Claim Form asks you to list each cost with its type, approximate date and amount, and to describe what you are attaching and why. Credit monitoring or fraud resolution purchases also need a sworn statement that you bought the service primarily because of this incident and not for other purposes.
What Is the Deadline?
October 28, 2026 is the claim deadline. Online Claim Forms must be submitted by 11:59 p.m. Eastern Time that day; mailed forms must be postmarked by the same date.
Important: the deadlines here are not all the same date, which is unusual enough to be worth spelling out. September 28, 2026 is the deadline both to exclude yourself from the class by submitting a Request for Exclusion and to object to the settlement — a full month before the claim deadline. Objecting and opting out are not the same thing: if you opt out you keep the right to sue On Q separately and receive no settlement benefits, while if you object you stay in the class, can still submit a Claim Form, and simply tell the court what you dislike about the deal.
One discrepancy is worth flagging before you file. The mailed paper Claim Form carries a submit-by stamp reading October 21, 2026, while the General Instructions printed on that same form state that the Claims Deadline is October 28, 2026 — the date the court-approved notice gives throughout. The October 21 stamp appears to be an error. Filing by the earlier of the two dates removes the question; if you cannot, it is worth confirming through the contact page on the official settlement website before the deadline.
How Do You Take Action?
File on the official settlement website, On Q Settlement. Log in with the Class Member ID from your notice, confirm your name and contact information, check the box for the Documented Loss Payment and/or the Alternative Cash Payment, check the monitoring box if you want the year of coverage, list each documented cost with its date and amount and upload the supporting records if you are claiming losses, choose your payment method, then sign the attestation.
The site also offers an electronic payment option with a step-by-step guide, which is only available when you file online rather than by mail. A paper Claim Form may be mailed instead, and the site's contact page handles a lost Class Member ID, a paper form request, or an address change after filing. Keep a copy of whatever you submit.
What Happens Next?
The claim window closes October 28, 2026. The court then holds the final approval hearing on November 16, 2026 at 10:00 a.m. Mountain Time at the Superior Court of Arizona, Maricopa County, in Phoenix, where it will decide whether to approve the settlement, the fee award and costs for Class Counsel, and the service awards. A hearing taking place is not the same as approval being granted, and the notice says the date and time may change without further notice.
You do not have to attend. Class Counsel will answer the court's questions, and a class member who filed a timely written objection will have it considered whether or not they appear.
If the court approves the settlement, there may be appeals, and the notice is candid that it is always uncertain whether appeals will be filed or how long they take to resolve. Settlement benefits are distributed as soon as possible if and when final approval is granted and after any appeals are resolved. No payment date had been announced as of August 20, 2026.
Sources and Verification
This page is based on the official settlement website and the court-approved settlement documents:
OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm.
Questions
Can I claim the $50 cash payment and the documented loss payment at the same time?
The official Claim Form tells class members to check one or both boxes and prints AND/OR between the Documented Loss Payment and the Alternative Cash Payment, so both can be selected on the same form. The monitoring benefit is a separate checkbox that can be added to either one. Question 7 of the long form notice describes the two payments as options a class member may choose one or both of, so if you have documented losses it is worth selecting both rather than assuming they are mutually exclusive.
Why does the paper Claim Form show October 21, 2026 when everything else says October 28?
The mailed Claim Form carries a submit-by stamp reading October 21, 2026, but the General Instructions printed on that same form state that the Claims Deadline is October 28, 2026, and the court-approved long form notice gives October 28, 2026 at 11:59 p.m. Eastern Time for online filing and the same date for a postmark. The October 21 stamp appears to be an error. Filing by the earlier of the two dates removes the question entirely, and anyone who cannot is best served confirming with the settlement administrator through the contact page on the official settlement website before the deadline.
Is the estimated $50 payment guaranteed?
No. The notice calls it an alternative cash payment estimated to be $50 and says the amount will be determined by the number of valid claims and may be adjusted on a pro rata basis. The $1,250,000 fund pays the documented loss claims, the monitoring benefit, administration expenses, attorneys' fees and costs and service awards first, and the alternative cash payments come out of what is left. A high claim rate reduces the per-person figure below $50.
I already accepted the free monitoring On Q offered in 2024. Can I still claim this benefit?
Yes. The notice states that class members who accepted the defendant's original offer of identity theft and fraud monitoring can receive an additional one year of the Expanded Identity Theft and Fraud Monitoring if they claim this benefit. The settlement fund pays for the expanded year but not for the original offer. No documentation is required to select it.
What happens if I do nothing at all?
You receive no settlement benefits, and you still give up your right to start or continue a lawsuit against the defendant and the released parties over the legal issues this settlement resolves. There is no automatic payment in this settlement, so a class member who files nothing by the deadline gets nothing while remaining bound by the release. The only way to keep the right to sue separately is to submit a Request for Exclusion by September 28, 2026, which also means giving up all settlement benefits.
Official Settlement Notice
For more class actions keep scrolling below.
Settlement Amount
$1,250,000 Non-reversionary common fund covering cash payments, the monitoring benefit, administrative expenses, attorneys' fees and costs, and service awards
Case Title
Feathers et al. v. On Q Financial, LLC
Case Number
CV2025-037770
Court
Maricopa County Superior Court, Arizona
Final Approval Hearing
November 16, 2026 at 10:00 AM MT Central Court Building, Phoenix, Arizona — the date and time may change without further notice
NJ Lenders Data Breach Settlement: The closest comparison — another mortgage lender breach, with cash and credit monitoring for people sent notice. See who qualifies →
Doxim Data Breach Settlement: About $100 in cash or up to $5,000 documented, plus credit monitoring, for the banking vendor breach. Check the claim tiers →
Heritage South Credit Union Data Breach Settlement: Cash plus monitoring for members whose information was caught up in the credit union breach. Read more →
Bradford-Scott Data (Sharetec) Settlement: A core-banking software vendor breach that reached credit union members across several states. See the claim tiers →
Data Breach Settlements Tracker: Every open data breach claim window OCA is tracking, sorted by deadline. View the tracker →