Simpson Strong-Tie Employee Data Breach Settlement — Claims Closed

Claims are closed. The February 19, 2026 deadline has passed.

View Open Settlements
Employee Data Breach · Claims Closed

Simpson Strong-Tie Employee Data Breach Settlement

Published February 14, 2026
Updated July 25, 2026

This settlement covered current and former Simpson Strong-Tie employees notified about an October 2023 cyberattack. Claims for loss reimbursement, expense compensation, and credit monitoring closed February 19, 2026.

Simpson Strong-Tie employee data breach settlement

Current Status

Claims are closed. The deadline was February 19, 2026. The official settlement FAQ lists a final approval hearing for July 22, 2026, but does not post a final approval order or payment date.

What Is Simpson Strong-Tie?

If you're reading this and you didn't work there, you might not recognize the name. Simpson Strong-Tie is one of the largest structural building products manufacturers in the world. Founded in 1956 and headquartered in Pleasanton, California, the company makes the metal connectors, fasteners, anchors, and brackets that hold buildings together — the hardware that connects beams to posts, secures roofs to walls, and reinforces structures against earthquakes and hurricanes. If you've ever looked at the framing of a house under construction and seen metal brackets connecting the wood, there's a good chance those were made by Simpson Strong-Tie.

The company employs thousands of people across dozens of locations in the U.S. and internationally. This settlement covers employee data — not customer data. If you were an employee and received a breach notification, you're the one who's affected.

StatusClaims ClosedApproval result not posted.
Claim DeadlineFebruary 19, 2026The filing window has passed.
Potential BenefitUp to $5,000Plus expense compensation and monitoring.
Covered GroupEmployeesCurrent and former workers who received notice.

What Happened?

On or around October 9, 2023, an unknown attacker gained access to Simpson Strong-Tie's computer systems. The company discovered the breach the next day, October 10, 2023. The attacker downloaded files from the company's network that contained personally identifiable information belonging to current and former employees.

The lawsuit alleges that Simpson Strong-Tie failed to implement reasonable security measures to protect this employee data. The company denies all allegations and any wrongdoing. The two sides agreed to settle.

As part of the settlement, Simpson Strong-Tie has committed to security improvements worth over $957,000, including deploying a Data Security Posture Management System, a Zero Trust Endpoint Detection Security application, and increased phishing awareness training.

Who Qualifies?

You qualify if you are a U.S. resident who received a notice from Simpson Strong-Tie (or its authorized representative) about the data breach discovered on or about October 10, 2023. This covers current and former employees whose personal information was in the files that were downloaded. If you got the letter, you're in.

What Can You Get?

This settlement offers three types of compensation:

Up to $500 for expenses and lost time. If the breach cost you money or time, you can be reimbursed. This covers two things: first, documented out-of-pocket expenses like bank fees, phone charges, postage, gas for local travel, credit report fees, or credit monitoring you paid for between October 9, 2023 and the end of the claims period. Second, time you spent dealing with the aftermath — $20 per hour for up to four hours (up to $80). No receipts are needed for the time portion; just describe what you did and how long it took. The total for this category is capped at $500 per person.

Up to $5,000 for identity theft losses. If someone actually used your stolen information to commit identity theft and you suffered documented monetary losses as a direct result of this breach, you can be reimbursed up to $5,000. You'll need to show that the loss was actual, documented, unreimbursed, and fairly traceable to the October 2023 breach. You also need to have made reasonable efforts to get reimbursed through other means first, including exhausting any credit monitoring or identity theft insurance you have. One claim per person.

Two years of credit monitoring with $1 million insurance. Every class member can enroll in two years of three-bureau credit monitoring at no cost. This includes credit monitoring alerts from all three bureaus (Equifax, Experian, TransUnion), identity restoration and recovery services, and $1 million in identity theft insurance with no deductible. After the settlement is finalized, you'll receive an activation code to start your coverage.

What Proof Do I Need?

• Credit monitoring: No proof needed — just file the claim form.
• Lost time ($20/hour, up to 4 hours): No receipts — describe what you did and how long it took.
• Expense reimbursement (up to $500 total): Documentation like receipts, bank statements, or bills.
• Identity theft losses (up to $5,000): Full documentation of the loss, proof it's connected to the breach, and evidence you tried other avenues of reimbursement first.

Important Dates


Cyber Attack: October 9, 2023
Breach Discovered: October 10, 2023
Opt-Out Deadline: January 20, 2026 (passed)
Objection Deadline: January 20, 2026 (passed)
Claim Form Deadline: February 19, 2026
Final Approval Hearing: July 22, 2026, according to the official settlement FAQ

Attorneys' Fees

Class Counsel (M. Anderson Berry and Gregory Haroutunian of Emery Reddy, PC) will receive $240,000 in attorneys' fees, costs, and expenses. A service award of $2,000 is being requested for class representative Michael Ray. Both are paid separately by Simpson Strong-Tie and will not reduce class member payments.

What Happens If I Do Nothing?

Class members who did not submit a claim by the deadline will not receive a settlement payment or credit monitoring. Their released claims are governed by the settlement terms.

How Claims Were Filed

During the claim period, class members could file online at SimpsonStrongTieDataSettlement.com or use a printable mail-in form. The February 19, 2026 deadline has passed.


Case Information

The case is Michael Ray v. Simpson Strong-Tie Co., Inc., Case No. CV24-01022, in the Superior Court of California, County of Contra Costa.

Class Counsel: M. Anderson Berry and Gregory Haroutunian of Emery Reddy, PC (Seattle, WA).

Defense Counsel: Jon Kardassakis of Lewis Brisbois Bisgaard & Smith, LLP (Los Angeles, CA).

Settlement Website: SimpsonStrongTieDataSettlement.com

Settlement Notice

Your browser does not support viewing PDFs inline. Download the PDF.



Sources

• Class Action Settlement Notice, Michael Ray v. Simpson Strong-Tie Co., Inc., Case No. CV24-01022 (Superior Court of California, Contra Costa County)
• Settlement Website: SimpsonStrongTieDataSettlement.com

For more class actions keep scrolling below.
Case Title Michael Ray v. Simpson Strong-Tie Co., Inc.
Case Number CV24-01022
Court Superior Court of California, Contra Costa County
Claim Deadline February 19, 2026 (passed)
Potential Benefit Up to $5,000 plus expense compensation and monitoring
Status Claims closed — approval result and payment date not posted

Open Data Breach Settlements to Check Instead