Cadence Bank Data Breach Settlement: Eligibility, Claims, and Deadlines

If you got a notice from Cadence Bank saying your information was caught up in the May 2023 MOVEit breach, you’re likely a class member in the $5.25 million Cadence Bank data breach settlement and have until June 4, 2026 to file a claim. Depending on what you choose, you can request up to $2,500 for ordinary documented losses, up to $10,000 for extraordinary losses, a flat payment of up to $100 with no documentation, or two years of three-bureau credit monitoring. No money has gone out yet. A federal judge in Boston is scheduled to consider final approval on July 9, 2026.¹²

Who Qualifies as a Class Member

The class covers all U.S. individuals who received a notice from Cadence Bank stating that their personally identifiable information was in files affected by the MOVEit breach between May 28 and May 31, 2023. Court filings put that group at roughly 869,411 people.¹

The notice you received (either the original breach letter mailed starting September 15, 2023, or the settlement notice sent after preliminary approval) contains a unique ID and PIN needed to file a claim online.³¹ The information exposed in the breach included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, and financial account details such as credit card numbers, bank account numbers, and account statements.

One boundary worth flagging: this settlement resolves only the claims against Cadence Bank. Litigation against Progress Software, the company that built the MOVEit Transfer platform, is continuing separately.⁴

What You Can Claim

You have to choose one of two paths on money: reimbursement for documented losses or the flat alternative cash payment. You can’t take both. Credit monitoring is available regardless of which cash option you pick.

Ordinary loss reimbursement of up to $2,500. This covers unreimbursed out-of-pocket expenses like bank fees, credit monitoring already purchased, identity theft insurance, and phone or data charges incurred between May 31, 2023 and June 4, 2026. You can also claim up to four hours of lost time at $25 per hour (a $100 maximum), counted inside the $2,500 cap. Third-party documentation such as bank statements or receipts is required.¹⁵
Extraordinary loss reimbursement of up to $10,000 for larger documented losses that were more likely than not caused by the breach and that aren’t covered by other benefits.¹
Alternative cash payment of up to $100 with no documentation required. The actual amount can be adjusted up or down depending on how many people file.⁴
Two years of three-bureau credit monitoring that includes dark-web monitoring, identity theft insurance, and access to fraud-resolution agents.¹

How To File a Claim

Claims can be filed online at MOVEitCadenceSettlement.com or on a printed form mailed to the settlement administrator. The deadline is June 4, 2026, with mailed forms judged by postmark date.⁵ If you claim any documented losses, keep your receipts, bank statements, or other third-party records ready to upload or attach.

If you do nothing, you get nothing, and you’re still bound by the settlement’s release of claims against Cadence.⁴

The settlement administrator is Simpluris. You can reach it at (833) 647-9001, at info@MOVEitCadenceSettlement.com, or by mail at MOVEit Cadence Bank Data Breach, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799.⁶

Key Deadlines

Opt-out and objection deadline: May 5, 2026. Opting out preserves your right to sue Cadence separately but forfeits any payment here. You can’t do both; trying to opt out and object voids the objection.⁵
Claim deadline: June 4, 2026.⁵
Final approval hearing: July 9, 2026 at 10:00 a.m. in Courtroom 17 of the John Joseph Moakley U.S. Courthouse in Boston, before U.S. District Judge Allison D. Burroughs.²

When You Might Get Paid

No payments have been issued. The court has to grant final approval at the July 9, 2026 hearing, and any appeals have to run out before checks are sent.⁴ The appeal window typically runs 30 to 60 days after a final order. If nothing significant slows things down, valid claimants could see payments in late 2026 or early 2027.

What the Money Covers Beyond Payments

Separate from the $5.25 million settlement fund, Cadence agreed to invest at least $3.5 million in data security improvements.¹ Attorneys’ fees of up to $1,732,500 and a service award of up to $2,500 for lead plaintiff Tammy Pratt are expected to come out of the settlement fund, subject to court approval. Those requests were required to be filed at least 21 days before the May 5, 2026 objection deadline, so class members can review them before deciding whether to object.⁷

What Happened in the Breach

Over Memorial Day weekend 2023, the CL0P ransomware group exploited a previously unknown vulnerability in Progress Software’s MOVEit Transfer file-sharing tool, hitting more than 960 organizations worldwide.⁸ Cadence Bank used MOVEit and was among them. An unauthorized party accessed files in Cadence’s MOVEit environment between May 28 and May 31, 2023. Cadence identified the vulnerability on June 1, installed patches, and reported the incident to law enforcement; by June 18 its investigation confirmed that personal data had been downloaded. Notification letters went out starting September 15, 2023, with complimentary identity-protection services offered through IDX.³

1
ClassAction.org. $5.25M Cadence Bank Settlement Ends Class Action Over May 2023 Data Breach
2
ClassAction.org. In Re MOVEit Preliminary Approval Order
3
California Office of the Attorney General. Cadence Bank Individual Notification Letter
4
MOVEit Cadence Settlement. Settlement Homepage
5
ClassAction.org. In Re MOVEit Settlement Notice
6
MOVEit Cadence Settlement. Contact the Settlement Administrator
7
ClassAction.org. In Re MOVEit Class Action Settlement Agreement
8
CISA. CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability