Union Bank and Trust MOVEit Data Breach Class Action Settlement

What is the Union Bank and Trust data breach settlement about?

Union Bank and Trust was one of hundreds of organizations caught in the 2023 MOVEit cyberattack — a coordinated campaign that exploited a zero-day vulnerability in Progress Software's MOVEit Transfer file-transfer application. Between May 27 and 31, 2023, threat actors used the flaw to access Union Bank and Trust systems and exfiltrate customers' personal information, including names and Social Security numbers.

Plaintiffs filed the class action Scott, et al. v. Union Bank and Trust Co., et al. in the U.S. District Court for the District of Massachusetts, alleging the bank failed to implement adequate cybersecurity safeguards and was slow to notify affected customers. Union Bank and Trust denied wrongdoing but agreed to a $2,389,976 settlement fund to resolve the litigation. A final approval hearing is scheduled for August 6, 2026.

Class members who received a breach notification letter from Union Bank and Trust regarding the 2023 MOVEit incident have until July 21, 2026, to submit a claim. No documentation is required to receive the $100 cash payment. Class members with documented losses can claim up to $2,500 for ordinary losses (including up to four hours of lost time at $25/hour) or up to $10,000 for extraordinary financial losses. All class members also receive two years of free three-bureau credit monitoring and identity theft protection.

Who qualifies to file a claim?

• You received a data breach notification letter from Union Bank and Trust regarding the 2023 MOVEit security incident (breach dates: May 27–31, 2023).
• Your personal information — such as your name or Social Security number — was potentially exposed in the breach.
• For the $100 alternative cash payment: no additional documentation is required.
• For ordinary loss reimbursement (up to $2,500): provide bank statements, invoices, receipts, or phone records documenting breach-related expenses, including up to 4 hours of lost time at $25 per hour.
• For extraordinary loss reimbursement (up to $10,000): provide documentation of significant unreimbursed monetary losses directly caused by the breach between May 31, 2023, and the close of the claims period.

How to file a claim

1. 1Visit the official settlement website at ubtdatasettlement.com.
2. 2Click 'File a Claim' and select your benefit tier: the $100 no-documentation option, ordinary loss reimbursement (up to $2,500), or extraordinary loss reimbursement (up to $10,000).
3. 3Gather supporting documents if claiming ordinary or extraordinary losses — bank statements, credit card statements, invoices, receipts, or phone records that connect the expense to the MOVEit data breach.
4. 4Complete the online claim form with your personal information and upload any required documentation.
5. 5Submit your completed claim by July 21, 2026, at ubtdatasettlement.com/claims_filing.html, or mail to: Union Bank and Trust Co. Data Breach Settlement, c/o RG/2 Claims Administration LLC, P.O. Box 59479, Philadelphia, PA 19102-9479.
6. 6Save your confirmation number. All class members automatically receive two years of free three-bureau credit monitoring and identity theft protection.

Is the Union Bank and Trust settlement legit?

Yes. The Union Bank and Trust data breach settlement is a court-supervised class action overseen by the U.S. District Court for the District of Massachusetts (1:23-cv-12436-ADB) and administered by an official settlement administrator. You file your claim directly with the administrator and keep 100% of any payment — Payout never takes a cut. The fastest way to avoid missing this and other settlements you qualify for is to let Payout match and file for you in minutes.