Union Bank MOVEit Settlement: Claims Closed, Awaiting Approval

At a glance

Status

Pending final approval

Defendant

Union Bank and Trust Company

Settlement fund

$2,389,976

Claim deadline

July 21, 2026

No-proof cash option

Yes — $100 alternative cash (no proof), subject to pro rata reduction or increase based on total claims submitted, or up to $2,500 ordinary losses / $10,000 extraordinary losses

Max documented payout

$2,500

Official site

www.ubtdatasettlement.com

Court

U.S. District Court, District of Massachusetts

Case number

1:23-cv-12436-ADB

Last verified September 9, 2026

Key dates

Milestone	Date	What it means
Claim deadline	July 21, 2026(passed)	Last day to file for a payment
Opt-out (exclusion) deadline	June 22, 2026(passed)	Last day to leave the settlement and keep the right to sue
Objection deadline	None listed	Last day to object to the terms
Final approval hearing	August 6, 2026(passed)	When the judge decides whether to approve the settlement
Expected payout	Not yet scheduled	Payments are not sent until after final approval and any appeals

Where to file

The only place to file is the official settlement website:

Verify on the official site

www.ubtdatasettlement.com

Filing is free. No legitimate settlement charges a fee to file a claim.

You cannot file on RecordingLaw.com. We are an independent publisher, not the settlement administrator, and we are not affiliated with any court, agency, or defendant.

If you received a notice about the Union Bank and Trust data breach settlement, the most important fact on this page is the calendar. The deadline to file a claim was July 21, 2026, and it has passed. The claims window is closed for good.

The case is Scott, et al. v. Union Bank and Trust Co., a class action pending in the U.S. District Court for the District of Massachusetts over a 2023 breach tied to MOVEit, the file-transfer software whose vulnerability exposed personal data nationwide that year. As of September 9, 2026, the claims window is closed and the court has not yet given the settlement final approval.

What Happened: The May 2023 MOVEit Breach at Union Bank and Trust

Union Bank and Trust Company notified individuals that their personal information was compromised in what the settlement calls the May 2023 MOVEit security incident. MOVEit Transfer is file-transfer software made by Progress Software. A vulnerability in that software was exploited in a mass hacking campaign that hit dozens of organizations that spring, and Union Bank and Trust was one of them.

The class is defined around that notice: people told their PII was compromised in the incident. A data breach like this can expose sensitive personal information, which is why a credit freeze matters here even if you never file a claim.

This is one of several MOVEit-related settlements moving through courts right now. A MOVEit notice from more than one company is not a coincidence; it is the same underlying software vulnerability, exploited against many separate organizations, each now running its own settlement.

Where the Case Stands Right Now

As of September 9, 2026, the claim window is closed and the settlement is still not finally approved. The court set a final approval hearing for August 6, 2026, which came after the July 21, 2026 claim deadline. Both dates have now passed, and no ruling has been posted on the official site. That order of events is normal for class settlements: the claims window closes first so the administrator knows how many valid claims came in, and the judge rules afterward on whether the deal, and the fees taken from the fund, are fair.

The deadline to exclude yourself from the class, also called opting out, already passed on June 22, 2026. Opting out and objecting are not the same thing. Opting out means leaving the class entirely, keeping your own right to sue Union Bank and Trust separately, and giving up any payment from this fund. Objecting means staying in the class while asking the judge to change or reject part of the deal. The window to formally leave the class closed on June 22, 2026, and the claim window closed on July 21, 2026, so there is no further step for a class member to take now.

No payout date has been set. Assume any money is still months away, arriving only after the court rules following the August 6, 2026 hearing and whatever claims processing comes after that.

One detail worth knowing: the official site does not name the settlement administrator company. If anyone contacts you claiming to represent this settlement under a specific administrator name, treat that detail as a red flag, not a credential, and verify anything you are told directly at ubtdatasettlement.com.

Who Is in the Settlement Class

You may be eligible if Union Bank and Trust notified you, by mail or otherwise, that your personal information was compromised in the May 2023 MOVEit incident. The class definition is built around that notice: if you got one, you are very likely covered. If you are unsure why you received a notice, the notice itself, not this page, is the definitive source on how you were identified.

How Much People Realistically Get

There are two payout paths, and neither amount is guaranteed. The simplest option is a flat $100 cash payment that requires no proof of loss. Even that number is not fixed; it is subject to pro rata adjustment, meaning the actual amount can go down if a lot of people file, or up if few do. Treat $100 as an estimate, not a promised check amount.

The second option is reimbursement for documented losses tied to the breach: up to $2,500 for ordinary losses, and up to $10,000 for extraordinary losses. That $10,000 ceiling gets quoted a lot, but reaching it requires real documentation, and most people who file will not come close. Think of $100 as the realistic outcome and $10,000 as a cap almost nobody hits.

Separately, the settlement includes two years of identity theft protection for class members who claim it. That benefit is worth claiming even if your cash payout ends up small, since ongoing monitoring has value the pro rata reduction cannot touch.

What Proof You Need, by Tier

For the $100 no-proof option, you do not need documentation. You attest that you were affected and select that payment tier.

For ordinary losses, up to $2,500, you generally need records tied directly to the breach, such as bank or credit card statements showing fraudulent charges, receipts for costs you paid dealing with the fraud, or records of time spent resolving it. The official claim form lists exactly what it accepts, so check it directly before you gather paperwork.

For extraordinary losses, up to $10,000, the bar is higher still. This tier is meant for losses you can trace directly to this breach, such as documented identity theft, not general financial hardship. Very few claimants qualify for the top of this range, which is why the settlement treats it as a ceiling, not a typical outcome.

How Filing Worked Before July 21, 2026

Filing was quick for anyone who chose the no-proof $100 option: the claim form asked for basic identifying information and required no documentation. The documented-loss tiers took longer, since they needed statements, receipts, or other evidence of fraud. Either way, a claim had to be submitted by July 21, 2026, and that window has closed.

What to Do Regardless of Whether You File

Filing a claim and protecting yourself are two different tasks, and you should do both if your personal information was part of this breach. A credit freeze is free at all three major bureaus, Equifax, Experian, and TransUnion, and it blocks anyone from opening new credit in your name using your stolen personal information. Our guide to freezing your credit after a data breach walks through the steps at each bureau.

If you already see unfamiliar accounts or other signs of misuse, IdentityTheft.gov, the FTC's free recovery site, builds a personalized recovery plan and generates the letters you need at no cost. Watching your accounts over the next year matters regardless of whether your claim ends up worth $100 or nothing at all; the settlement money is small next to the protective value of a freeze.

More Open and Closed Settlements

Union Bank and Trust is one of several MOVEit-related settlements moving through courts right now. If you are trying to keep track of more than one breach notice, our data breach settlement tracker lists the settlements we have verified, open and closed.