Payout: Up to $5,000 for identity theft + $500 for expenses/time + 2 years credit monitoring with $1M insurance
Who Qualifies: Current and former Simpson Strong-Tie employees who received a breach notice about the October 2023 cyber attack
If you work for Simpson Strong-Tie — or used to — and received a letter about a data breach, you can file a claim for cash and free credit monitoring. The deadline is February 19, 2026.
In October 2023, hackers broke into Simpson Strong-Tie's computer systems and downloaded files containing personal information belonging to current and former employees. A class action settlement has been reached, and there are several ways you can get paid.
What Is Simpson Strong-Tie?
If you're reading this and you didn't work there, you might not recognize the name. Simpson Strong-Tie is one of the largest structural building products manufacturers in the world. Founded in 1956 and headquartered in Pleasanton, California, the company makes the metal connectors, fasteners, anchors, and brackets that hold buildings together — the hardware that connects beams to posts, secures roofs to walls, and reinforces structures against earthquakes and hurricanes. If you've ever looked at the framing of a house under construction and seen metal brackets connecting the wood, there's a good chance those were made by Simpson Strong-Tie.
The company employs thousands of people across dozens of locations in the U.S. and internationally. This settlement covers employee data — not customer data. If you were an employee and received a breach notification, you're the one who's affected.
What Happened?
On or around October 9, 2023, an unknown attacker gained access to Simpson Strong-Tie's computer systems. The company discovered the breach the next day, October 10, 2023. The attacker downloaded files from the company's network that contained personally identifiable information belonging to current and former employees.
The lawsuit alleges that Simpson Strong-Tie failed to implement reasonable security measures to protect this employee data. The company denies all allegations and any wrongdoing. The two sides agreed to settle.
As part of the settlement, Simpson Strong-Tie has committed to security improvements worth over $957,000, including deploying a Data Security Posture Management System, a Zero Trust Endpoint Detection Security application, and increased phishing awareness training.
Who Qualifies?
You qualify if you are a U.S. resident who received a notice from Simpson Strong-Tie (or its authorized representative) about the data breach discovered on or about October 10, 2023. This covers current and former employees whose personal information was in the files that were downloaded. If you got the letter, you're in.
What Can You Get?
This settlement offers three types of compensation:
Up to $500 for expenses and lost time. If the breach cost you money or time, you can be reimbursed. This covers two things: first, documented out-of-pocket expenses like bank fees, phone charges, postage, gas for local travel, credit report fees, or credit monitoring you paid for between October 9, 2023 and the end of the claims period. Second, time you spent dealing with the aftermath — $20 per hour for up to four hours (up to $80). No receipts are needed for the time portion; just describe what you did and how long it took. The total for this category is capped at $500 per person.
Up to $5,000 for identity theft losses. If someone actually used your stolen information to commit identity theft and you suffered documented monetary losses as a direct result of this breach, you can be reimbursed up to $5,000. You'll need to show that the loss was actual, documented, unreimbursed, and fairly traceable to the October 2023 breach. You also need to have made reasonable efforts to get reimbursed through other means first, including exhausting any credit monitoring or identity theft insurance you have. One claim per person.
Two years of credit monitoring with $1 million insurance. Every class member can enroll in two years of three-bureau credit monitoring at no cost. This includes credit monitoring alerts from all three bureaus (Equifax, Experian, TransUnion), identity restoration and recovery services, and $1 million in identity theft insurance with no deductible. After the settlement is finalized, you'll receive an activation code to start your coverage.
What Proof Do I Need?
• Credit monitoring: No proof needed — just file the claim form.
• Lost time ($20/hour, up to 4 hours): No receipts — describe what you did and how long it took.
• Expense reimbursement (up to $500 total): Documentation like receipts, bank statements, or bills.
• Identity theft losses (up to $5,000): Full documentation of the loss, proof it's connected to the breach, and evidence you tried other avenues of reimbursement first.
Important Dates
• Cyber Attack: October 9, 2023
• Breach Discovered: October 10, 2023
• Opt-Out Deadline: January 20, 2026 (passed)
• Objection Deadline: January 20, 2026 (passed)
• Claim Form Deadline: February 19, 2026
• Final Approval Hearing: March 26, 2026 at 9:00 AM PT — Contra Costa County Courthouse, 725 Court Street, Martinez, CA 94553, Department 39
Attorneys' Fees
Class Counsel (M. Anderson Berry and Gregory Haroutunian of Emery Reddy, PC) will receive $240,000 in attorneys' fees, costs, and expenses. A service award of $2,000 is being requested for class representative Michael Ray. Both are paid separately by Simpson Strong-Tie and will not reduce class member payments.
What Happens If I Do Nothing?
If you do nothing, you get no money and no credit monitoring. You also give up your right to sue Simpson Strong-Tie on your own over this breach. The only way to get compensation is to file a claim by February 19, 2026.
How to File a Claim
File your claim online at SimpsonStrongTieDataSettlement.com. You can also download a printable claim form or request one by mail. The deadline is February 19, 2026.
• Class Action Settlement Notice, Michael Ray v. Simpson Strong-Tie Co., Inc., Case No. CV24-01022 (Superior Court of California, Contra Costa County)
• Settlement Website: SimpsonStrongTieDataSettlement.com
Filing Class Action Settlement Claims
Please submit only truthful information when filing your claim. If you are unsure whether you qualify, contact the Claims Administrator or Class Counsel. OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm.