Union Bank & Trust (UBT) MOVEit Data Breach Settlement 2026
Data Breach · MOVEit · Claims Open
Union Bank and Trust (UBT) MOVEit Data Breach Class Action Settlement
PublishedJune 25, 2026
If Union Bank and Trust told you your information was caught in the 2023 MOVEit breach, you can claim a $100 cash payment or up to $10,000 in documented losses — but you have to file by July 21, 2026.
A settlement has been proposed in a class action against Union Bank and
Trust Company (UBT) over the 2023 MOVEit Security Incident. Between
May 27 and May 31, 2023, cybercriminals exploited an alleged
vulnerability in MOVEit Transfer — a third-party file-transfer tool UBT
used in the ordinary course of business — and potentially accessed the
personally identifiable information (PII) UBT held. Plaintiffs allege UBT
was negligent in its data security practices. UBT denies any allegation of
wrongdoing and denies that it would be found liable.
Under the settlement, UBT will pay $2,389,976 into a non-reversionary
Settlement Fund used to pay valid claims, notice and administration costs,
a service award, and attorneys' fees and expenses. The case is
Scott v. Union Bank and Trust Co., Case No. 1:23-cv-12436-ADB, in
the U.S. District Court for the District of Massachusetts, coordinated with
the broader In re: MOVEit Customer Data Security Breach Litigation
(MDL No. 1:23-md-03083-ADB). Claims against Progress Software, the maker
of MOVEit, are not resolved by this settlement and continue separately.
StatusClaims Open
Claim DeadlineJuly 21, 2026opt-out or object by June 22, 2026 · final approval hearing August 6, 2026
Estimated Payout$100 Cash or Up to $10,000$100 alternative cash (pro rata, up to $1,000) or ordinary losses up to $2,500 + extraordinary losses up to $10,000 · plus 2 years credit monitoring · $2,389,976 fund
Proof RequiredYesClaimant ID & Password from your notice to file online; documentation needed for ordinary/extraordinary losses (not for the $100 cash option)
Who Qualifies?
The Settlement Class is "all persons in the United States whose PII was
included in the files affected by the Security Incident." In practice, you
are a Settlement Class Member if UBT identified you as someone whose
information may have been accessed or exposed and sent you a notice.
The following are not included: UBT and any entity it controls, along with
UBT's officers, directors, legal representatives, successors, subsidiaries,
and assigns; any judge or judicial officer presiding over the litigation and
their immediate family and staff; and anyone who timely and validly opts
out of the settlement.
If you are not sure whether you are included, you can check your status or
request help through the official Settlement Website at
UBTDataSettlement.com.
How Much Can You Get?
Settlement Class Members may file a claim for one or more of the following
benefits:
• Alternative cash payment — $100. In lieu of documenting
losses, you can elect a flat $100 cash payment. This amount is subject to
pro rata adjustment: it can be reduced if total valid claims exceed the net
fund, or increased up to $1,000 if money remains.
• Ordinary losses — up to $2,500. Reimbursement for documented
out-of-pocket costs traceable to the breach, including up to 4 hours of lost
time at $25 per hour (up to $100 total), bank fees, postage, phone or data
charges, and local travel.
• Extraordinary losses — up to $10,000. Reimbursement for
documented, unreimbursed monetary losses more likely than not caused by the
breach and not already covered by the ordinary-loss categories, incurred
between May 31, 2023 and the close of the claims period.
• Credit monitoring. All class members may also claim two years
of three-bureau credit monitoring and identity theft protection, including
dark web monitoring, real-time credit monitoring with Equifax, Experian, and
TransUnion, identity restoration services, and up to $1 million in identity
theft insurance.
If money remains in the net fund 180 days after the settlement's effective
date, it will be used to extend the credit monitoring class members claimed.
No part of the fund reverts to UBT.
How to File a Claim
You must complete and submit a Claim Form online or by mail so that it is
received online or postmarked by July 21, 2026.
Online: File at
UBTDataSettlement.com using the
Claimant ID and Password printed on the notice you received. If you believe
you are a class member but do not have a Claimant ID and Password, you can
request help through the official Settlement Website.
By mail: You can print a paper Claim Form from the Settlement Website
and mail it to the Settlement Administrator at the address on the form.
Important: as of December 24, 2025, USPS postmark dating changed, and
a Claim Form mailed close to the deadline may be postmarked when it reaches
an automated processing facility rather than when USPS first receives it —
which could make a claim late. If you mail your claim, allow extra time, or
file online to avoid the issue.
For documented ordinary or extraordinary losses, your claim must be
reasonably documented with materials such as credit card or bank statements,
invoices, receipts, or telephone records. Personal statements alone are not
treated as sufficient documentation but may add context. The $100
alternative cash payment does not require you to document losses.
Key Deadlines
• Claim Form due (online or postmarked): July 21, 2026
• Opt-out (exclusion) deadline: June 22, 2026
• Objection deadline: June 22, 2026
• Final Approval Hearing: August 6, 2026 at 9:30 a.m., in the
U.S. District Court for the District of Massachusetts, before Judge Allison
D. Burroughs
When Will Payments Be Made?
The Court will decide whether to approve the settlement at the August 6, 2026
Final Approval Hearing. Payments are made only after the settlement is
approved and becomes final — meaning no appeal is filed, or all appeals are
resolved. There is no fixed date by which the Court must rule. Updates are
posted on the official Settlement Website.
Your Legal Rights and Options
• Submit a claim by July 21, 2026 — the only way to receive a
payment.
• Opt out by June 22, 2026 — get no payment, but keep your right
to sue UBT separately over the same claims. If you opt out, you cannot
object.
• Object by June 22, 2026 — stay in the class but tell the Court
why you think the settlement should not be approved; you may also ask to
speak at the hearing.
• Do nothing — receive no payment and remain bound by the
settlement's release.
The class is represented by Court-appointed Class Counsel, including
attorneys from Berger Montague PC and Lynch Carpenter LLP, at no cost to
class members. Class Counsel may request attorneys' fees of up to one-third
of the fund and a service award of up to $2,500 for the class
representative, subject to Court approval.
Official Settlement Notice
Frequently Asked Questions
Who qualifies for the UBT data breach settlement?
You qualify if you are a U.S. person whose personally identifiable information was in the files affected by the 2023 MOVEit Security Incident at Union Bank and Trust and UBT sent you a notice. UBT, its affiliates and officers, the presiding judges and their staff, and anyone who validly opts out are excluded.
How much can I get?
Either a $100 alternative cash payment (pro rata, up to $1,000) or reimbursement of ordinary losses up to $2,500 and extraordinary losses up to $10,000 with documentation. All class members may also claim two years of three-bureau credit monitoring with up to $1 million in identity theft insurance.
What is the deadline?
Claim Forms must be submitted online or postmarked by July 21, 2026. The opt-out and objection deadline is June 22, 2026.
Do I need proof to file?
To file online you need the Claimant ID and Password from your notice. The $100 cash option requires no loss documentation; reimbursement of ordinary or extraordinary losses requires documentation such as bank statements, invoices, or receipts.
What was the UBT MOVEit breach?
Between May 27 and May 31, 2023, cybercriminals exploited an alleged vulnerability in the third-party MOVEit Transfer software UBT used, potentially accessing PII UBT held. UBT denies wrongdoing. Claims against MOVEit's maker, Progress Software, are not resolved by this settlement.
Sources
• Official Settlement Website:
UBTDataSettlement.com
• Scott v. Union Bank and Trust Co., Case No. 1:23-cv-12436-ADB,
U.S. District Court for the District of Massachusetts
• In re: MOVEit Customer Data Security Breach Litigation, MDL No.
1:23-md-03083-ADB (D. Mass.)
• Long Form Notice of Class Action Settlement (embedded above)
• Settlement Administrator: RG/2 Claims Administration LLC
For more class actions keep scrolling below.
Settlement Fund
$2,389,976 Non-reversionary; $100 cash or up to $10,000 documented losses + 2 yrs credit monitoring
Case Title
Scott v. Union Bank and Trust Co.
Case Number
1:23-cv-12436-ADB
Coordinated MDL
In re: MOVEit Customer Data Security Breach Litig., 1:23-md-03083-ADB
Court
U.S. District Court, District of Massachusetts
Final Approval Hearing
August 6, 2026 at 9:30 AM Boston, MA · before Judge Allison D. Burroughs
GRIPA MOVEit Data Breach: Same 2023 MOVEit incident — up to $2,500 ordinary + $10,000 extraordinary or $100 cash for ~280,000 people. See who qualifies →
$31.5M Flagstar Bank Data Breach: ~$60 cash or up to $25,000 documented losses for Flagstar 2021 breach notice recipients. Check eligibility →
Fidelity Investments Data Breach: ~$100 cash (no receipts) or up to $5,000 documented loss for Aug 2024 breach notice recipients. See the claim →
Cross Valley FCU Data Breach: Up to $5,000 documented or ~$50 cash + 2 years credit monitoring for the Dec 2024 credit-union breach. See who qualifies →
$117.5M Comcast Xfinity Data Breach: ~$50 cash or up to $10,000 documented losses from a $117.5M fund. Check eligibility →