Finastra Data Breach Settlement

Only notice holders can claim. Read that first, because it is the whole eligibility test and it is not what most people expect: the class is built on Finastra having sent you a notice, not on whether you were ever a Finastra customer. Almost nobody in this class was. Finastra Technology sells lending, payments and banking software to financial institutions, and the breached system was its Secure File Transfer Platform — the files taken held information about customers of Finastra’s clients, meaning banks and lenders. The flip side is the part to be clear-eyed about: banking somewhere that used Finastra does not qualify you if no notice was sent to you. Now the money, where two things are easy to misread. First, the $2,500 is a cap on one option, not a payout. It is the ceiling on Cash Payment for Documented Losses, and reaching it means documenting $2,500 of losses traceable to this breach with third-party records. It is not what a claim is worth, not what the pro rata option pays, and not a limit on the settlement. Worse, the governing Settlement Agreement is narrower than the notice’s friendly bullet list: the agreement ties this benefit to losses “related to fraud and/or identity theft,” while the Notice and website also list credit freezes, credit reports, replacing IDs and postage. Second, the other cash option has no published estimate at all — the pro rata payment is whatever is left in the $3,125,000 fund after $1,182,000 of requested attorneys’ fees and costs (just under 38%), service awards and administration, split equally among everyone who picks it. Any dollar figure you see for it did not come from the administrator. What does combine: the credit monitoring stacks, the two cash options do not. One year of CyEx Financial Shield Complete with $1 million of fraud insurance can be claimed alongside either cash choice, but Sections III and IV of the Claim Form each say in capitals not to claim one if you are claiming the other. Two filing traps: the online form requires the Login ID and PIN from your notice (the printable form asks for it only “if known,” so paper and email are the way in without it), and the official documents contradict each other on the paper deadline — the Notice and FAQ say postmarked by November 27, 2026 while the Claim Form says received by it. Claims close November 27, 2026; opting out or objecting closes earlier, on November 13, 2026.

Do I Qualify?

You may be eligible if:

• Finastra sent you a notice saying your Private Information may have been impacted in the Data Incident. That is the entire class definition the Court approved: “all living individuals residing in the United States who were sent notice by Defendant that their Private Information may have been impacted in the Data Incident”
• You do NOT need to have been a Finastra customer, and almost nobody in this class was. The breached system was Finastra’s Secure File Transfer Platform, and the Settlement Agreement says the files held Private Information of “Defendant’s clients’ customers” — customers of the banks and lenders that used the platform
• But banking somewhere that used Finastra is NOT enough on its own. If no notice was sent to you, you are outside the class however likely your exposure seems. The administrator checks for free at info@FinastraDataSettlement.com or (866) 719-4418, 24/7
• Notification emails went out September 18, 2026 — check your spam folder before concluding you were never notified
• You are a LIVING individual residing in the United States. The class definition says “living,” so a claim on behalf of someone who has died does not fit it
• Any US state. The class is national and the benefits do not vary by state, even though the case is in Florida state court and Finastra is a Florida company
• You do NOT need to have lost any money. The Pro Rata Cash Payment requires no receipts and no explanation of any kind, and the one year of credit monitoring requires none either. Documentation is needed only for the up-to-$2,500 documented-loss option
• You do NOT have to give up the credit monitoring to take cash. One year of CyEx Financial Shield Complete may be claimed in addition to either cash option and does not reduce it
• But you DO have to choose between the two cash options. Documented losses (Section III) and the pro rata payment (Section IV) are alternatives — the Claim Form says in capitals not to claim one if you are claiming the other
• You are not in an excluded group. Out are Finastra’s directors, officers and agents and those of its subsidiaries and affiliated companies, governmental entities, the Judge assigned to the case along with the Judge’s immediate family and Court staff, and anyone who validly opts out by November 13, 2026
• You submit one valid Claim Form by November 27, 2026 — online (Login ID and PIN required), by email, or on paper. The Notice says a mailed form must be postmarked by that date while the Claim Form says it must be RECEIVED by it, so do not cut it close

There are two separate gates here and confusing them is the main way people go wrong. Gate one: getting into the online form. The claim form at finastradatasettlement.com opens on a login screen — “To start your online claim form, you must login with your LoginID and PIN. You can find your LoginID and PIN on the Notice that was sent to you” — which makes this an ID-gated settlement even for the pro rata payment, which itself needs no receipts at all. The gate is not absolute. The login page says to email info@FinastraDataSettlement.com or call (866) 719-4418 if you cannot locate the credentials and the administrator will re-send them. And the printable Claim Form asks for the Login ID only “if known”, so a class member who was notified but has lost the code can download the form and either mail it or email a signed image to info@FinastraDataSettlement.com. Note what the gate is not: it is not the eligibility test. Being sent a notice is what puts you in the class; a missing code is a paperwork problem. If Finastra never sent you a notice at all, no amount of paperwork fixes that — ask the administrator to check. Gate two: proving each benefit, which splits cleanly. The one year of CyEx Financial Shield Complete credit monitoring requires no documentation — every class member may elect it. The Pro Rata Cash Payment requires no receipts and no explanation of any kind; the Claim Form and the Notice both say so outright. Onlythe documented-loss option needs records. What counts as Reasonable Documentation. The Settlement Agreement defines it as documentation supporting a claim for Documented Losses “including, but not limited to, credit card statements, bank statements, invoices, telephone records, screen shots, and receipts.” It is explicit that Documented Loss costs cannot be documented solely by a personal certification, declaration or affidavit, though such a statement may be included to provide clarification, context or support for other submitted documentation. What the loss itself has to satisfy. Each loss must be (i) an actual, documented and unreimbursed monetary loss; (ii) more likely than not caused by the Data Incident; and (iii) incurred after the date of the Data Incident — with the claimable window running from October 31, 2024 to November 27, 2026. You cannot claim expenses already reimbursed by another source, including compensation provided under any credit monitoring or identity theft protection product you already had. The Claim Form is signed under penalty of perjury and claims are subject to verification, with the administrator entitled to ask for supplemental information. The scope mismatch to go in with your eyes open about. The Notice, the website and the Claim Form list ordinary post-breach expenses — credit reports, credit monitoring, freezing and unfreezing credit, replacing IDs, postage to contact banks — as covered. The Settlement Agreement, which governs, describes the benefit as being for losses “related to fraud and/or identity theft stemming from the Data Incident”, and Section III of the Claim Form is headed as reimbursement for losses “due to identity theft or fraud.” If your only costs were housekeeping, the narrower reading is a real possibility. Why filing anyway costs you nothing. Under the Settlement Agreement, if a class member does not submit Reasonable Documentation, or the claim is rejected for any reason and is not cured, “the Settlement Class Member’s Claim will be as if he or she elected a Pro Rata Cash Payment.” A failed documented-loss claim converts to the pro rata payment rather than being thrown out — so watch for a deficiency notice and answer it, but do not be afraid to try.

What Happened?

Finastra Technology, Inc. is a Florida-based financial services software company that provides lending, payments and universal banking services, among others, to financial institutions. Its customers are the institutions; the people in this class are largely those institutions’ own customers.

On November 7, 2024, Finastra identified a cybersecurity incident affecting certain Finastra systems. Its investigation revealed that an unauthorized third party accessed Finastra’s Secure File Transfer Platform at various times between October 31, 2024 and November 8, 2024, and that on October 31, 2024 the unauthorized third party accessed certain files from the platform that included Private Information of certain of Finastra’s clients’ customers. The Settlement Agreement defines the Data Incident by that window — October 31, 2024 to November 8, 2024.

The Private Information at issue is defined as some combination of names, dates of birth, Social Security numbers and financial account numbers. Following the incident Finastra sent notices to those individuals whose Private Information may have been impacted, and being sent one of those notices is what defines the class.

The claims were first litigated as a consolidated federal action in the Middle District of Florida. After the parties reached terms, the federal case was dismissed and the settlement was filed in state court as Tina Parsley Hughes, et al. v. Finastra Technology, Inc., Case No. CACE26013154, in the Circuit Court for Broward County, Florida, which granted preliminary approval on August 19, 2026. The Class Representatives are Tina Parsley Hughes, Baitul Javid, Benjamin Meredith and Robert Murray. The Court appointed Jeff Ostrow of Kopelowitz Ostrow P.A. and Mariya Weekes of Milberg PLLC as Class Counsel; Finastra is represented by Jason K. Fagelman, Joseph Simmons and Sean Topping of Norton Rose Fulbright US LLP. Simpluris is the Settlement Administrator.

The plaintiffs allege Finastra failed to adequately protect the information. Finastra denies that it did anything wrong, and the Court has not decided who is right. The parties agreed to settle to avoid the costs, risks, disruptions and uncertainties of continuing the litigation.

This is a common fund settlement: Finastra will establish a Settlement Fund of $3,125,000, and court-approved attorneys’ fees and costs, Service Award payments and the costs of administering the settlement are paid out of it FIRST, with the net remainder funding the class benefits. Class Counsel will ask the Court to approve $1,182,000 in fees and litigation costs — just under 38% of the fund — and Service Awards of $2,500 for each of the four Class Representatives.

Finastra has the option to terminate the agreement if more than 3% of the Settlement Class opts out, exercisable within 10 days after the end of the Opt-Out Period.

The Final Approval Hearing is set for December 14, 2026 at 10:00 a.m. Eastern Time by Zoom, where the Court will decide whether to approve the settlement, how Class Counsel is paid and whether to grant the Service Awards, and will consider any objections. The notice warns the date and time may change without further notice. Benefits are distributed no later than 60 days after Final Approval or 30 days after the Effective Date, whichever is later, and only after any appeals are resolved — no payment date has been announced. Any funds remaining 180 days after payments are sent go cy pres to the Legal Aid Service of Broward County.

How to File Your Claim

1. START WITH THE NOTICE, BECAUSE IT IS BOTH YOUR TICKET IN AND YOUR PASSWORD. Class membership turns on Finastra having sent you a notice about this incident, and the online claim form will not open without the Login ID and PIN printed on it. The login page says so plainly: “To start your online claim form, you must login with your LoginID and PIN. You can find your LoginID and PIN on the Notice that was sent to you.” Notification emails went out on September 18, 2026
2. FILE ONLINE AT FINASTRADATASETTLEMENT.COM — click Submit a Claim, log in, then tick the boxes you want. Online claims are due by November 27, 2026
3. LOST YOUR LOGIN ID AND PIN? TWO WAYS ROUND IT. The login page tells you to email info@FinastraDataSettlement.com or call (866) 719-4418 to have the credentials re-sent. Or skip the login altogether: the printable Claim Form asks for the Login ID only “if known,” so a class member who was notified but has mislaid the code can download the form, complete and sign it, and send it in
4. EMAIL IS THE THIRD ROUTE. The Claim Form states that “an electronic image of the completed Claim Form can also be emailed to info@FinastraDataSettlement.com” — that sidesteps the Login ID gate and the postmark ambiguity below in one move
5. WATCH THE PAPER DEADLINE, BECAUSE THE OFFICIAL DOCUMENTS CONTRADICT EACH OTHER. The court-authorized Notice and the settlement website’s FAQ both say a mailed Claim Form “must be postmarked no later than November 27, 2026.” The printable Claim Form says twice that “Claims must be received by November 27, 2026” and that paper forms must be mailed “so that they are received by the Claims Administrator no later than November 27, 2026.” Nobody should bet a claim on which document the administrator follows — file online, or email the signed form, or mail it far enough ahead that it ARRIVES by November 27
6. TICK THE CREDIT MONITORING BOX — IT IS SEPARATE FROM THE CASH AND DOES NOT REDUCE IT. Section II of the Claim Form is the one year of CyEx Financial Shield Complete, and the Settlement Agreement says every class member may claim it “in addition to a Cash Payment.” Enrollment instructions are emailed after the Effective Date, so give an email address you actually read
7. THEN PICK EXACTLY ONE CASH OPTION — YOU CANNOT HAVE BOTH. Section III (documented losses, up to $2,500) and Section IV (pro rata cash) each carry the instruction in capitals: DO NOT CLAIM THIS BENEFIT IF YOU ARE CLAIMING A PAYMENT FROM [the other section]. Section IV asks for no receipts and no explanation of any kind
8. IF YOU CLAIM DOCUMENTED LOSSES, ATTACH THIRD-PARTY RECORDS. Reasonable Documentation means credit card statements, bank statements, invoices, telephone records, screen shots and receipts. A personal certification, declaration or affidavit cannot carry a claim on its own, though it may be attached to add clarification or context. Losses must have occurred between October 31, 2024 and November 27, 2026, and expenses already reimbursed by another source — including anything paid out under a credit monitoring or identity theft protection product — cannot be claimed
9. A REJECTED DOCUMENTED CLAIM IS NOT THROWN AWAY. The Settlement Agreement provides that where a class member does not submit Reasonable Documentation, or the claim is rejected for any reason and is not cured, “the Settlement Class Member’s Claim will be as if he or she elected a Pro Rata Cash Payment.” Trying for the $2,500 and failing costs you the paperwork, not the payment
10. CHOOSE HOW YOU WANT TO BE PAID. Section V offers PayPal, Venmo, Zelle, a virtual prepaid card or a physical check. Get it right — the Settlement Agreement says that where the administrator cannot deliver a payment because of incorrect or incomplete information, or an electronic payment does not process, or a check is not cashed within 120 days, the class member forfeits the money
11. SUBMIT ONLY ONE CLAIM FORM PER PERSON, online or paper
12. MAIL PAPER CLAIMS TO Claims Administrator, Finastra Data Incident Settlement, P.O. Box 25226, Santa Ana, CA 92799. Requests for Exclusion go to the same box marked ATTN: Exclusion Request and must be postmarked by November 13, 2026. Objections must be FILED with the Clerk of the Court, 201 SE 6th Street, Fort Lauderdale, FL 33301 by November 13, 2026, with copies to the administrator, Class Counsel and defense counsel
13. QUESTIONS: the Settlement Administrator, Simpluris, at info@FinastraDataSettlement.com or (866) 719-4418 toll free, 24/7
14. Visit the official claim form: https://finastradatasettlement.com/

How Much Will I Actually Get?

THE $2,500 IS A CAP ON ONE OPTION, NOT A PAYOUT AND NOT A CAP ON THE SETTLEMENT. This is the number most coverage leads with and it is the easiest thing here to misread. $2,500 is the ceiling on ONE of the two cash options — Cash Payment for Documented Losses — and reaching it requires documented out-of-pocket losses of $2,500 that you can tie to this breach with third-party records. It is not the value of a claim, it is not what the pro rata payment pays, and it is not a limit on the settlement as a whole. Nobody is paid $2,500 for filing. HOW THE BENEFITS COMBINE: the credit monitoring stacks, the two cash options do not. The Settlement Agreement puts it in one sentence — class members may submit a Claim Form for “either a Cash Payment for Documented Losses or a Pro Rata Cash Payment,” and “in addition, all Settlement Class Members may also elect to receive Credit Monitoring.” So the monitoring is genuinely cumulative with either cash choice, while the cash side is strictly either-or. The Claim Form says it in capitals in both directions: DO NOT CLAIM THIS BENEFIT IF YOU ARE CLAIMING A PAYMENT FROM SECTION III / SECTION IV. OPTION ONE: DOCUMENTED LOSSES, UP TO $2,500 — AND THE GOVERNING AGREEMENT IS NARROWER THAN THE NOTICE’S BULLET LIST. The Notice, the website and the Claim Form all list the covered expenses as losses from identity theft or fraud, fees for credit reports, credit monitoring or freezing and unfreezing credit, the cost of replacing IDs, and postage to contact banks by mail. But the Settlement Agreement, which is the governing contract, defines this benefit as compensation for class members “with documented losses related to fraud and/or identity theft,” available “upon presentment of documentation of losses related to fraud and/or identity theft stemming from the Data Incident,” and Section III of the Claim Form itself is headed as reimbursement “for documented losses due to identity theft or fraud.” Anyone whose only costs were ordinary post-breach housekeeping — a credit freeze, a credit report, postage — is relying on the plain-language list rather than the agreement’s wording, and should expect the narrower reading to be possible. The safety net below makes it worth trying anyway. Each loss must be an actual, documented, unreimbursed monetary loss, more likely than not caused by the Data Incident, incurred after it, and occurring between October 31, 2024 and November 27, 2026. OPTION TWO: THE PRO RATA CASH PAYMENT, WITH NO PUBLISHED ESTIMATE AT ALL. Whatever is left in the fund after fees, service awards, administration, documented-loss payments and the credit monitoring “will be divided equally between everyone who claims a Pro Rata Cash Payment.” No receipts and no explanation are required. The official notice says it is expected that a significant amount of money will remain, and the settlement website says an estimate will be posted once one is available — as of now, none has been. With a fixed fund and an unknown claim rate, the figure cannot be predicted, and any number you see quoted for this option did not come from the administrator. WHAT COMES OFF THE TOP FIRST, WHICH IS WHY THE $3,125,000 IS NOT THE MONEY FOR THE CLASS. This is a common fund and the lawyers are paid out of it. Class Counsel will ask the Court to approve $1,182,000 in attorneys’ fees and litigation costs — a little under 38% of the fund — plus Service Awards of $2,500 for each of the four Class Representatives, and the costs of administration also come out of the fund. The Court decides those requests at the Final Approval Hearing, and the Settlement Agreement notes that if the Court awards less than requested the rest of the deal stands. Everything class members receive, cash and monitoring alike, is paid from what is left. THE CREDIT MONITORING, WHICH COSTS NOTHING TO ADD. One year of CyEx Financial Shield Complete, with $1 million of financial fraud insurance, real-time monitoring of credit files, web-based monitoring of personal information including Social Security numbers, banking and credit/debit information, medical ID numbers, email addresses and phone numbers, and access to fraud consultation and identity theft restoration agents. Every class member may claim it alongside either cash option. TWO THINGS THAT COULD STILL CHANGE THE OUTCOME. Finastra has the option to terminate the whole agreement if more than 3% of the Settlement Class opts out, and it must say so within 10 days after the Opt-Out Period ends or the right is waived. And nothing is paid until the Court approves: the Final Approval Hearing is December 14, 2026 at 10:00 a.m. Eastern Time by Zoom, benefits are distributed no later than 60 days after Final Approval or 30 days after the Effective Date, whichever is later, and any appeal would push that out. No payment date has been announced. WHERE LEFTOVER MONEY GOES. Checks must be negotiated within 120 days, undeliverable and uncashed payments are forfeited into the residual, and any funds remaining 180 days after payments are sent are distributed cy pres to the Legal Aid Service of Broward County — not returned to Finastra.

Last reviewed: September 27, 2026 | Information verified from court records and official settlement documents.

Frequently Asked Questions