A data-breach settlement rarely asks for much and, in one open case, pays a flat sum to people who never itemize a dollar of loss. Eligible victims of a breach tied to Doxim, Inc. can claim a $100 cash payment with no documentation at all, part of a $5.5 million settlement. The catch is the calendar: claims must be filed by October 13, 2026, and once that window closes, the money is off the table.
What the breach was and who is covered
The case stems from a data incident on or around December 30, 2023, in which an unauthorized actor gained access to files held by Doxim, a technology vendor that processes information for financial institutions. The exposed data was collected or maintained by Doxim and its credit-union clients, and the summary published by Dapeer Law identifies Credit Union ONE and Beacon Credit Union among them. The information involved could include names, addresses, financial account numbers, and Social Security numbers.
Eligibility is narrower than the payout is generous, and this is the part that trips people up. The settlement class is limited to individuals who were identified by Doxim and actually sent a breach notice by Doxim or one of its credit-union clients. Someone who never received such a notice is generally not a class member, no matter how many breaches they have heard about. Anyone unsure whether a notice was sent can confirm their status through the settlement administrator rather than assume either way.
Free retirement updates: Miss an enrollment or claim deadline and it may be gone. Our free Retirement Shield newsletter keeps readers ahead of the ones that matter. Get the free newsletter.
The three ways to claim
Class members choose among three options. The simplest is a flat cash payment, currently estimated at $100, that requires no documentation and no proof of harm. The second reimburses documented losses from fraud or identity theft reasonably traced to the incident, up to $5,000, and calls for supporting records such as receipts, statements, or correspondence. The third is a year of free credit monitoring, which can be combined with either cash option.
The estimated $100 figure is not guaranteed to hold. Because the payments come from a shared fund after attorneys’ fees, administration costs, and service awards are deducted, the cash amounts can be adjusted up or down on a pro rata basis depending on how many valid claims arrive. If a claim submitted under the documented-loss option is found invalid and is not corrected, the administrator processes it as the flat cash payment instead. Filing online or by mail is free either way.
The dates that decide everything
Three deadlines structure the case. Class members who want to preserve the right to sue Doxim separately must mail a written exclusion request postmarked by September 28, 2026, the same date set for objections. Claims for payment must be filed, online or postmarked, by October 13, 2026. The court has scheduled a final approval hearing for October 28, 2026, in the Eastern District of Michigan, and payments are issued only after the court grants final approval and any appeals are resolved, a process that can take a year or more.
The official claim portal and the governing documents are posted at the administrator’s site, DoximDataSecuritySettlement.com, which is the authoritative place to file and to check for any change to the hearing date. Staying in the class without opting out means releasing the right to bring a separate lawsuit over the same claims, a trade-off worth weighing for anyone who suffered a large, well-documented loss.
A low-effort claim for those who qualify
For a class member who did receive a notice, the no-documentation option is close to a formality: a short online form, no receipts, and a payment that requires no further action once submitted. That low bar is precisely why these settlements are easy to ignore and easy to miss, since the notices often look like junk mail and the deadlines pass quietly.
The credit-monitoring option is worth a second look precisely because this breach exposed Social Security numbers and financial account details, the raw material for identity theft rather than a one-time charge. Monitoring will not undo the exposure, but it can flag a new account opened in a victim’s name before the damage compounds. Choosing it alongside the flat cash payment costs nothing extra and adds a year of oversight to a claim that otherwise ends the moment the check clears.
Data breaches also outlast their settlements, and stolen Social Security numbers can surface in fraud years later. The FTC’s guidance on what to do after a data breach recommends steps beyond any single claim, such as monitoring accounts and considering a credit freeze, which blocks new-account fraud and is free to place and lift. For the Doxim class specifically, the immediate action is narrower and time-bound: confirm eligibility with the administrator and file before the October 13 deadline, because a flat $100 claim only pays the people who send it in on time.
This article was produced with the assistance of artificial intelligence and reviewed by The Financial Wire editorial team.
More Financial Reading
- What really happens to your joint savings account when you die?
- The ideal retirement withdrawal rate so your savings actually last
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
