Cadence Bank data breach settlement

From Settlements, in the HARD wiki · Updated
This article is about the class action settlement over the Cadence Bank data breach. For every settlement, see Settlements.

Yes. The Cadence Bank data breach settlement is real: a $5,250,000 class action settlement in federal court, District of Massachusetts, run by Simpluris. The claim deadline, 4 June 2026, has passed and the judge’s final decision has not been posted.

Claims closed on June 4, 2026 and the final approval hearing was set for July 9, 2026; as of 7 November 2026 the official site still shows only the hearing date and no approval or payment update.

Is it real?

Yes. The case is Pratt v. Cadence Bank, coordinated in In re: MOVEit Customer Data Security Breach Litigation, case number 1:23-cv-12996-ADB (Pratt); MDL No. 1:23-md-03083-ADB-PGL, in the US District Court for the District of Massachusetts. The court appointed Simpluris to run it, and its only official site is moveitcadencesettlement.com.

How the real notice reached people. Under the settlement agreement, Cadence looked up email addresses for class members and the administrator (Simpluris) sent a Short Form Notice by email, or by US mail where no email address was available, with a reminder email later. The site lists the notification mailing as March 6, 2026. The claim form asks for the 'Claimant ID Number provided on your Notice'. The official site and FAQ carry no scam warning; the FAQ says not to contact the Court, the Clerk's office or Cadence about claims. Real claims went only through MOVEitCadenceSettlement.com; the claim form offered payment by PayPal, Venmo or Zelle, among other options.

To tell a real message from a scam:

  1. The only official site is moveitcadencesettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
  2. Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
  3. Nobody needs your passwords.The administrator never asks for your Cadence Bank password, your online banking login or a code texted to you. Payment details go only into the claim form on moveitcadencesettlement.com.
  4. Check by phone.If you aren’t sure a message is real, call the administrator on (833) 647-9001, the number on moveitcadencesettlement.com, not one in the message.
  5. Claims have closed.The deadline was 4 June 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on moveitcadencesettlement.com instead.

Who qualifies

All persons in the United States who were notified by Cadence Bank that their personal information was in files affected by the MOVEit data breach. Excludes Cadence, its executives and affiliates, the presiding judges, and anyone who opted out.

Size: approximately 869,411 individuals (settlement agreement estimate).

It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.

How much

The total settlement is $5,250,000.00. What each person can claim:

BenefitAmountNotes
Ordinary lossesup to $2,500documented out-of-pocket costs, credit reports or monitoring bought after May 31, 2023, and up to 4 hours of lost time at $25/hour (max $100); third-party documentation required except for lost time
Extraordinary lossesup to $10,000documented, unreimbursed monetary losses more likely than not caused by the breach, such as fraud or identity theft
Alternative cash payment$100instead of loss claims; no documentation needed; subject to pro rata reduction or increase, with any increase capped at $1,000
Credit monitoring2 yearsthree-bureau monitoring with dark web monitoring and identity theft insurance up to $1 million; can be claimed alongside a cash option

An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.

Deadline and payout

  • Claim deadline: (passed).
  • Opt-out and objection deadline: .
  • Final approval hearing: .

Payout. The administrator has not published a payment date; the notice says payments come only after the settlement is approved and any appeals are resolved.

The administrator: “Payments will be made after the Settlement is approved and becomes final.”

Filing and payment

  1. The claim deadline (June 4, 2026) has passed; new claims are not being accepted.
  2. If you filed, check MOVEitCadenceSettlement.com (the official site) for approval and payment updates.
  3. Questions go to the administrator at (833) 647-9001 or [email protected].

Official site: moveitcadencesettlement.com. Phone: (833) 647-9001. Mail: MOVEit Cadence Bank Data Breach, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9834.

The breach, and what to do today

Between May 28 and May 31, 2023, cybercriminals got into the MOVEit Transfer file transfer application (licensed by Progress Software) that Cadence Bank used, which may have exposed personal information provided to Cadence. Cadence began notifying impacted individuals on or about September 15, 2023.

A settlement pays for what already happened. The data is still out there, so do these now:

  1. Read the breach letter you were sent.It says which of your details were exposed. If it names your Social Security number, freeze your credit: in the US it’s free at Equifax, Experian and TransUnion.
  2. Distrust messages about Cadence Bank and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.

To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.

Not published yet

The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:

  • When payments will be sent.
  • Whether the judge has granted final approval (the hearing was set for 9 July 2026).
  • Exactly which details were exposed: the settlement papers describe it only as personal information.

Questions

Is the Cadence Bank data breach settlement legit?

Yes. It is Pratt v. Cadence Bank, coordinated in In re: MOVEit Customer Data Security Breach Litigation, case 1:23-cv-12996-ADB (Pratt); MDL No. 1:23-md-03083-ADB-PGL, in the US District Court for the District of Massachusetts. Simpluris runs it for the court, and the only official site is moveitcadencesettlement.com.

Who qualifies for the Cadence Bank settlement?

All persons in the United States who were notified by Cadence Bank that their personal information was in files affected by the MOVEit data breach. Excludes Cadence, its executives and affiliates, the presiding judges, and anyone who opted out.

How much will I get from the Cadence Bank settlement?

Up to up to $10,000 for losses you can prove, or $100 as a cash payment without receipts. The total settlement is $5,250,000.00. Final amounts depend on how many valid claims there are.

What is the deadline for the Cadence Bank settlement?

The claim deadline was 4 June 2026. It has passed.

When will the Cadence Bank settlement pay out?

The administrator has not published a payment date; the notice says payments come only after the settlement is approved and any appeals are resolved.

Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.

Sources

Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.

  1. MOVEit Cadence Settlement: home, Simpluris (settlement administrator), read 7 Nov 2026: case number, benefits, deadlines, phone, email.
  2. MOVEit Cadence Settlement: FAQ, Simpluris (settlement administrator), read 7 Nov 2026: class definition, $5,250,000.00 fund, benefit details, opt-out address, fees up to 33%.
  3. MOVEit Cadence Settlement: Important dates, Simpluris (settlement administrator), read 7 Nov 2026: notification mailing March 6, 2026; objection May 5; claims June 4; hearing July 9, 2026; no approval update.
  4. Notice of Cadence Bank MOVEit Security Incident Class Action Settlement, Simpluris / US District Court for the District of Massachusetts, read 7 Nov 2026: Pratt case number, incident dates, payment timing.
  5. Settlement Agreement, MDL Dkt. 1652-1 (filed 12/17/25), US District Court for the District of Massachusetts (copy hosted by ClassAction.org), read 7 Nov 2026: 869,411 class estimate; email/mail notice plan; Claimant ID; PayPal/Venmo/Zelle payment options.