Union Bank & Trust (UBT) MOVEit Data Breach Settlement 2026
Data Breach · MOVEit · Claims Open

Union Bank and Trust (UBT) MOVEit Data Breach Class Action Settlement

Published June 25, 2026

If Union Bank and Trust told you your information was caught in the 2023 MOVEit breach, you can claim a $100 cash payment or up to $10,000 in documented losses — but you have to file by July 21, 2026.

Union Bank and Trust (UBT) MOVEit data breach class action settlement for affected customers

What Is the UBT Data Breach Settlement About?

A settlement has been proposed in a class action against Union Bank and Trust Company (UBT) over the 2023 MOVEit Security Incident. Between May 27 and May 31, 2023, cybercriminals exploited an alleged vulnerability in MOVEit Transfer — a third-party file-transfer tool UBT used in the ordinary course of business — and potentially accessed the personally identifiable information (PII) UBT held. Plaintiffs allege UBT was negligent in its data security practices. UBT denies any allegation of wrongdoing and denies that it would be found liable.

Under the settlement, UBT will pay $2,389,976 into a non-reversionary Settlement Fund used to pay valid claims, notice and administration costs, a service award, and attorneys' fees and expenses. The case is Scott v. Union Bank and Trust Co., Case No. 1:23-cv-12436-ADB, in the U.S. District Court for the District of Massachusetts, coordinated with the broader In re: MOVEit Customer Data Security Breach Litigation (MDL No. 1:23-md-03083-ADB). Claims against Progress Software, the maker of MOVEit, are not resolved by this settlement and continue separately.

Status Claims Open
Claim Deadline July 21, 2026 opt-out or object by June 22, 2026 · final approval hearing August 6, 2026
Estimated Payout $100 Cash or Up to $10,000 $100 alternative cash (pro rata, up to $1,000) or ordinary losses up to $2,500 + extraordinary losses up to $10,000 · plus 2 years credit monitoring · $2,389,976 fund
Proof Required Yes Claimant ID & Password from your notice to file online; documentation needed for ordinary/extraordinary losses (not for the $100 cash option)

Who Qualifies?

The Settlement Class is "all persons in the United States whose PII was included in the files affected by the Security Incident." In practice, you are a Settlement Class Member if UBT identified you as someone whose information may have been accessed or exposed and sent you a notice.

The following are not included: UBT and any entity it controls, along with UBT's officers, directors, legal representatives, successors, subsidiaries, and assigns; any judge or judicial officer presiding over the litigation and their immediate family and staff; and anyone who timely and validly opts out of the settlement.

If you are not sure whether you are included, you can check your status or request help through the official Settlement Website at UBTDataSettlement.com.

How Much Can You Get?

Settlement Class Members may file a claim for one or more of the following benefits:

Alternative cash payment — $100. In lieu of documenting losses, you can elect a flat $100 cash payment. This amount is subject to pro rata adjustment: it can be reduced if total valid claims exceed the net fund, or increased up to $1,000 if money remains.
Ordinary losses — up to $2,500. Reimbursement for documented out-of-pocket costs traceable to the breach, including up to 4 hours of lost time at $25 per hour (up to $100 total), bank fees, postage, phone or data charges, and local travel.
Extraordinary losses — up to $10,000. Reimbursement for documented, unreimbursed monetary losses more likely than not caused by the breach and not already covered by the ordinary-loss categories, incurred between May 31, 2023 and the close of the claims period.
Credit monitoring. All class members may also claim two years of three-bureau credit monitoring and identity theft protection, including dark web monitoring, real-time credit monitoring with Equifax, Experian, and TransUnion, identity restoration services, and up to $1 million in identity theft insurance.

If money remains in the net fund 180 days after the settlement's effective date, it will be used to extend the credit monitoring class members claimed. No part of the fund reverts to UBT.

How to File a Claim

You must complete and submit a Claim Form online or by mail so that it is received online or postmarked by July 21, 2026.

Online: File at UBTDataSettlement.com using the Claimant ID and Password printed on the notice you received. If you believe you are a class member but do not have a Claimant ID and Password, you can request help through the official Settlement Website.

By mail: You can print a paper Claim Form from the Settlement Website and mail it to the Settlement Administrator at the address on the form.

Important: as of December 24, 2025, USPS postmark dating changed, and a Claim Form mailed close to the deadline may be postmarked when it reaches an automated processing facility rather than when USPS first receives it — which could make a claim late. If you mail your claim, allow extra time, or file online to avoid the issue.

For documented ordinary or extraordinary losses, your claim must be reasonably documented with materials such as credit card or bank statements, invoices, receipts, or telephone records. Personal statements alone are not treated as sufficient documentation but may add context. The $100 alternative cash payment does not require you to document losses.

Key Deadlines


• Claim Form due (online or postmarked): July 21, 2026
• Opt-out (exclusion) deadline: June 22, 2026
• Objection deadline: June 22, 2026
• Final Approval Hearing: August 6, 2026 at 9:30 a.m., in the U.S. District Court for the District of Massachusetts, before Judge Allison D. Burroughs

When Will Payments Be Made?

The Court will decide whether to approve the settlement at the August 6, 2026 Final Approval Hearing. Payments are made only after the settlement is approved and becomes final — meaning no appeal is filed, or all appeals are resolved. There is no fixed date by which the Court must rule. Updates are posted on the official Settlement Website.

Your Legal Rights and Options

Submit a claim by July 21, 2026 — the only way to receive a payment.
Opt out by June 22, 2026 — get no payment, but keep your right to sue UBT separately over the same claims. If you opt out, you cannot object.
Object by June 22, 2026 — stay in the class but tell the Court why you think the settlement should not be approved; you may also ask to speak at the hearing.
Do nothing — receive no payment and remain bound by the settlement's release.

The class is represented by Court-appointed Class Counsel, including attorneys from Berger Montague PC and Lynch Carpenter LLP, at no cost to class members. Class Counsel may request attorneys' fees of up to one-third of the fund and a service award of up to $2,500 for the class representative, subject to Court approval.

Official Settlement Notice

Your browser does not support viewing PDFs inline. Download the PDF.



Frequently Asked Questions

Who qualifies for the UBT data breach settlement?

You qualify if you are a U.S. person whose personally identifiable information was in the files affected by the 2023 MOVEit Security Incident at Union Bank and Trust and UBT sent you a notice. UBT, its affiliates and officers, the presiding judges and their staff, and anyone who validly opts out are excluded.

How much can I get?

Either a $100 alternative cash payment (pro rata, up to $1,000) or reimbursement of ordinary losses up to $2,500 and extraordinary losses up to $10,000 with documentation. All class members may also claim two years of three-bureau credit monitoring with up to $1 million in identity theft insurance.

What is the deadline?

Claim Forms must be submitted online or postmarked by July 21, 2026. The opt-out and objection deadline is June 22, 2026.

Do I need proof to file?

To file online you need the Claimant ID and Password from your notice. The $100 cash option requires no loss documentation; reimbursement of ordinary or extraordinary losses requires documentation such as bank statements, invoices, or receipts.

What was the UBT MOVEit breach?

Between May 27 and May 31, 2023, cybercriminals exploited an alleged vulnerability in the third-party MOVEit Transfer software UBT used, potentially accessing PII UBT held. UBT denies wrongdoing. Claims against MOVEit's maker, Progress Software, are not resolved by this settlement.

Sources

• Official Settlement Website: UBTDataSettlement.com
Scott v. Union Bank and Trust Co., Case No. 1:23-cv-12436-ADB, U.S. District Court for the District of Massachusetts
In re: MOVEit Customer Data Security Breach Litigation, MDL No. 1:23-md-03083-ADB (D. Mass.)
• Long Form Notice of Class Action Settlement (embedded above)
• Settlement Administrator: RG/2 Claims Administration LLC


For more class actions keep scrolling below.
Settlement Fund $2,389,976 Non-reversionary; $100 cash or up to $10,000 documented losses + 2 yrs credit monitoring
Case Title Scott v. Union Bank and Trust Co.
Case Number 1:23-cv-12436-ADB
Coordinated MDL In re: MOVEit Customer Data Security Breach Litig., 1:23-md-03083-ADB
Court U.S. District Court, District of Massachusetts
Final Approval Hearing August 6, 2026 at 9:30 AM Boston, MA · before Judge Allison D. Burroughs
Administrator RG/2 Claims Administration LLC
Official Website UBT Data Settlement

More on Data Breach & MOVEit Settlements