The WorkWave data breach settlement is a $1.5 million class action resolution covering roughly 99,525 people whose personal information was exposed in a July 2024 cyberattack on WorkWave LLC, which does business as TEAM Software. Eligible class members could claim a pro rata cash payment, reimbursement of up to $5,000 in documented out-of-pocket losses, and two years of credit monitoring with at least $1 million in identity theft insurance. The claim filing deadline was November 4, 2025, and the court held a final approval hearing on October 28, 2025.
Who Was Covered
The settlement class includes everyone in the United States whose personally identifying information was exposed in the breach WorkWave detected on July 26, 2024, including anyone who received a notification letter from the company around November 2024. Company officers and directors were excluded, as was anyone who had already reached a separate settlement with WorkWave over the breach.
Many class members were not WorkWave customers. TEAM Software sells workforce management software to employers, so a large share of the affected people were employees of companies that used those platforms. Their information reached WorkWave through their employer’s business relationship with the company.
What Class Members Could Claim
The $1.5 million fund is non-reversionary, meaning WorkWave cannot take back any unused portion. Claimants could choose from three benefits, and were not limited to one.
- Reimbursement of documented losses up to $5,000. Covered expenses included unreimbursed fraud or identity theft losses, attorney or credit repair fees, the cost of freezing and unfreezing credit, and miscellaneous items like postage and copying. Claimants had to attach receipts or records; self-prepared documents such as handwritten notes did not qualify.
- Two years of credit monitoring. Single-bureau monitoring bundled with at least $1 million in fraud and identity theft insurance. Class members received an activation code and had 12 months to enroll; the two-year term ran from the enrollment date.
- Pro rata cash payment. A share of whatever remained in the fund after administrative costs, attorney fees, documented-loss reimbursements, and credit monitoring were paid. There was no per-person cap, but the actual amount depended on how many people filed claims and how much of the fund the other expenses consumed.
WorkWave also agreed to strengthen its data security and to fund those upgrades separately from the settlement fund, so the security work does not reduce money paid to class members. The company was required to file a confidential declaration with the court describing the specific measures.
Key Deadlines
- Preliminary approval: July 7, 2025
- Objection and opt-out deadline: October 6, 2025
- Final approval hearing: October 28, 2025
- Claim filing deadline: November 4, 2025
Claims were submitted at WorkWaveDataSettlement.com or by mailing a paper form. Online filers needed the unique ID number printed on their notice. Atticus Administration handled processing and can be reached at 1-800-503-5117 or PO Box 64053, St. Paul, MN 55164. Anyone whose total settlement payment exceeds $599 had to submit an IRS Form W-9; without it, the payment could be capped at $599 or subject to tax withholding.
Class members who missed the claim deadline no longer have a route to file. If the court grants final approval and no timely claim was submitted, that person receives nothing from the fund but is still bound by the release of claims unless they opted out by October 6, 2025.
What the Breach Exposed
WorkWave’s investigation found that an unauthorized individual accessed its systems on July 25 and 26, 2024, and reached data files containing names paired with Social Security numbers and driver’s license numbers. One of the named plaintiffs, Branden Rogers of Fort Wayne, Indiana, reported that his information later appeared on the dark web and that he saw a sharp rise in spam calls and texts after the breach. Because Social Security and driver’s license numbers do not change, class members who took the credit monitoring benefit should still watch their credit after the two-year term ends.
The Case
The consolidated litigation is In re: WorkWave Data Breach Litigation, Case No. 3:24-cv-10592-RK-JBD, in the U.S. District Court for the District of New Jersey before Judge Robert Kirsch. The consolidated complaint, filed January 27, 2025, alleged negligence and breach of third-party beneficiary contract, claiming WorkWave failed to implement adequate cybersecurity to protect information entrusted to it. WorkWave denied the allegations and settled without admitting wrongdoing.
Class counsel were A. Brooke Murphy of Murphy Law Firm in Oklahoma City and David K. Lietz of Milberg Coleman Bryson Phillips Grossman in Washington, D.C. The settlement drew almost no pushback: as of the October 1, 2025, motion for final approval, only two of the 99,480 noticed class members had opted out, and no one had objected. Any funds left after the check-cashing period will go to the National Cybersecurity Alliance.