MOVEit Data Breach Settlements Tracker

As of October 14, 2026, no settlement in this group is currently open for claims. The list below tracks each one and its status.

What Happened

In mid-2023, the Cl0p ransomware group exploited a previously unknown flaw, a zero-day tracked as CVE-2023-34362, in MOVEit Transfer, a file-transfer tool made by Progress Software. Thousands of companies and government agencies used MOVEit to move sensitive files, so a single vulnerability let attackers reach data held by hundreds of organizations at once. Estimates put the number of people affected at more than 90 million.

There is no single MOVEit settlement. Each organization whose data was taken faces its own lawsuits and settles on its own schedule, and separate litigation continues against Progress Software itself. A person whose information passed through more than one affected organization may be a class member in more than one of these cases, each with its own administrator and deadline. Many of the individual-organization cases were consolidated in the U.S. District Court for the District of Massachusetts before Judge Allison D. Burroughs.

This page tracks the MOVEit settlements we have verified so you can see which claim windows are still open and file with the right administrator before each deadline.

Settlements in This Group

• GRIPA MOVEit Data Breach SettlementPending final approval

  Claim deadline: September 3, 2026 · no-proof cash option

  Individuals whose information was affected by GRIPA's May 2023 MOVEit data breach.

• Union Bank and Trust MOVEit Data Breach Settlement (Scott v. Union Bank and Trust)Pending final approval

  Claim deadline: July 21, 2026 · no-proof cash option

  Individuals notified their PII was compromised in the May 2023 MOVEit security incident affecting Union Bank and Trust.

Other settlements in this group

These related settlements are part of the same event. We do not have a dedicated page for each, but here is where they stand so you can map the whole picture.

• Cadence Bank. A roughly $5.25 million settlement for the MOVEit breach of Cadence Bank data, offering a flat payment or documented-loss reimbursement plus credit monitoring. Its claim window closed in June 2026.
• Nuance Communications. A roughly $8.5 million MOVEit-related settlement whose claim window has closed. Listed here so people who were notified by Nuance can see where the case stands.
• Progress Software (the vendor). Progress Software made the MOVEit tool. Litigation against Progress itself continues separately from the individual-organization settlements above, and there is no consumer claim form for it at this time. Be wary of any site that offers to take a "MOVEit settlement" claim without naming a specific organization and its official administrator.

How To Spot a Settlement Scam

A breach this large draws copycat sites. You file only at each settlement's official court-appointed administrator, reached by typing the address yourself, never through an unsolicited email, text, or search ad. No legitimate settlement charges a fee to file, and none will contact you out of the blue asking for your Social Security number or bank details. Report anyone who does at ReportFraud.ftc.gov.

Whether or not any of these settlements pays you, the most valuable step after a breach is free: place a credit freeze at all three bureaus, and read your step-by-step freeze guide. A freeze stops new accounts being opened in your name and costs nothing.