A little-known financial technology vendor’s data breach has turned into a $5.5 million class-action settlement, and the deadline to file a claim is closing in. The company at the center of it, Doxim, does not deal directly with the public; it processes account statements and tax documents behind the scenes for credit unions. That is precisely why many eligible members may not recognize the settlement notice sitting in their mailbox or inbox for what it is.
Who Qualifies and Why the Claim Is Easy to Miss
The settlement covers a data incident that occurred around December 30, 2023, when an unauthorized party gained access to files held by Doxim containing names, addresses, financial account numbers, and Social Security numbers. Eligibility is limited to a specific group rather than open to the general public, which is part of why the notice can be confusing when it arrives.
According to the official settlement administrator’s frequently asked questions page, only people who were specifically identified by Doxim and sent a notice that their information was involved qualify as class members. Because the notice often arrives on unfamiliar letterhead referencing a company the recipient has never directly interacted with, it can be mistaken for junk mail or a phishing attempt and discarded before anyone reads past the first line, which is likely why so many eligible people have not yet filed.
Free retirement updates: Want plain-English help keeping more of your money in retirement? The free Retirement Shield newsletter covers the benefits, deadlines, and money mistakes that cost retirees, a couple times a week. Subscribe free.
How the $100 No-Proof Option Actually Works
Class members choosing not to gather receipts or records can request a flat cash payment, currently estimated at $100, with nothing to document. Anyone who can show actual out-of-pocket losses tied to the breach, such as time and money spent resolving identity theft, may instead file for up to $5,000 in documented losses, and a claim filed for documented losses that turns out to lack adequate proof is not simply rejected; it is processed instead as the no-documentation alternate payment. Both payment options can be combined with one year of free credit monitoring, claimed on the same form at no added cost.
One detail worth understanding before filing: the payouts are pro rata, meaning the settlement administrator distributes the net fund first to cover credit monitoring costs, then to cash payments. The $100 estimate can rise if fewer people file than expected, or fall if claims run higher than the fund can fully cover, so the final check amount is not locked in until the claims window closes and the totals are known.
The October 13 Deadline and What Comes After
A valid claim must be submitted online by 11:59 p.m. Eastern time on October 13, 2026, or mailed to the settlement administrator and postmarked by that same date. A separate and earlier deadline, September 28, 2026, applies only to class members who want to exclude themselves from the settlement or formally object to its terms; filing a claim and objecting are mutually exclusive paths under the settlement’s rules.
The court overseeing the case has scheduled a final approval hearing for October 28, 2026, and payments will not go out until after that approval becomes final, so anyone who files now should expect the process, not the payment, to move quickly. Patience after filing is normal in a class settlement of this size, and a filed claim does not require any further action from the class member while the court finishes its review.
Avoiding Look-Alike Settlement Sites
Data-breach settlements are a well-documented target for scammers who build convincing fake claim pages the moment a real settlement gets attention, hoping to harvest the same Social Security numbers and account details the original breach already exposed. The only site that should be used to check eligibility or submit a claim is the address printed on the official notice, and class members who are unsure whether a notice is genuine can confirm it directly through the settlement’s own administrator rather than clicking a link from an unsolicited email or text message claiming to speed up the process.
For someone whose Social Security number and financial account information were already exposed once in the underlying breach, treating the claims process itself with the same caution is a reasonable extra step, not an overreaction. A legitimate settlement administrator will never ask for a bank password, a one-time verification code, or a payment to release funds already owed under the settlement.
Anyone still unsure whether they qualify can call the settlement administrator directly using the phone number printed on the official notice rather than searching online, since search results and social media posts about active settlements are also routinely spoofed by unrelated third parties trying to collect personal information. Filing is free, the administrator cannot charge a fee to process a valid claim, and no legitimate claim form will ever ask for a full bank account number or an upfront payment before releasing money that is already owed.
This article was produced with AI assistance and reviewed by The Financial Wire editorial team.
More Financial Reading
- What really happens to your joint savings account when you die?
- How many CDs can you park at 1 bank? FDIC rules you must know
