First Commonwealth data breach settlement
Yes. The First Commonwealth data breach settlement is real: a $1.2 million class action settlement in the Court of Common Pleas of Lehigh County, Pennsylvania, run by Kroll Settlement Administration. The claim deadline, 18 February 2026, has passed and the judge’s final decision has not been posted.
The claim deadline has passed and a 'Final Approval Order and Judgement' is posted on the official site, but the administrator has not posted a payment update.
Is it real?
Yes. The case is Maciejczyk v. First Commonwealth Federal Credit Union (consolidated with 2024-C-2649, 2024-C-2656, 2024-C-2664, 2024-C-2702, 2024-C-2749, 2024-C-2893), case number 2024-C-2592, in the Court of Common Pleas of Lehigh County, Pennsylvania. The court appointed Kroll Settlement Administration to run it, and its only official site is fcfcusettlement.com.
How the real notice reached people. Postcard Notice by mail to class members, plus an optional Email Reminder Notice to people whose emails were on the class list. Each notice carried a Class Member ID that the claim form asks for ('Enter the Class Member ID Number provided on your Postcard or Email Reminder Notice'). The email sender address is not published. No scam warning is published; the site says it is 'the only authorized website for this case'.
To tell a real message from a scam:
- The only official site is fcfcusettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your First Commonwealth password, your online banking login or a code texted to you. Payment details go only into the claim form on fcfcusettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on (833) 890-4928, the number on fcfcusettlement.com, not one in the message.
- Claims have closed.The deadline was 18 February 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on fcfcusettlement.com instead.
Who qualifies
All individuals residing in the United States whose Private Information was compromised in the June 2024 FCFCU data incident, including everyone who received notice of the incident from FCFCU. Excludes FCFCU directors, officers and agents, governmental entities, the judge and court staff, and people who opted out.
Size: approximately 98,817 individuals (settlement website; the settlement agreement says approximately 98,821).
It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.
How much
The total settlement is $1,200,000.00 (non-reversionary, all cash). What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Cash Payment A: documented losses | up to $5,000 | per class member, with reasonable documentation (e.g. receipts, phone records, emails); a rejected claim that is not cured is paid as Cash Payment B |
| Cash Payment B: alternate cash | estimated $100 | instead of Payment A; subject to pro rata increase or decrease |
| Credit monitoring | three (3) years of CyEx's Identity Defense Complete | in addition to Payment A or B; one-bureau monitoring, dark web scanning, $1,000,000 identity theft insurance |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
Payout. The administrator has not published a payment date. The FAQ says cash payments begin after court approval and after the time for appeals expires.
The administrator: “The Claim Form deadline has passed.”
Filing and payment
- Claims closed on February 18, 2026; new claims can no longer be filed.
- If you filed, watch for payment by your chosen method and check www.fcfcusettlement.com for updates.
- Questions go to (833) 890-4928 or the Contact Us form on the official site.
Official site: fcfcusettlement.com. Phone: (833) 890-4928. Mail: Maciejczyk v. First Commonwealth Federal Credit Union, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391.
The breach, and what to do today
A cyberattack led to suspected unauthorized access to member data held by First Commonwealth Federal Credit Union, a federally chartered credit union based in Allentown, Pennsylvania. The settlement defines the incident as unauthorized access to or acquisition of private information between June 26 and June 27, 2024. The attacker is not named in the official documents.
What was exposed: names; addresses; dates of birth; Social Security numbers; financial account numbers.
A settlement pays for what already happened. The data is still out there, so do these now:
- Freeze your credit.In the US it’s free at Equifax, Experian and TransUnion, and no one can open credit in your name while it’s on. Lift it for a day when you apply for credit yourself.
- Get an IRS Identity Protection PIN.It stops anyone filing a tax return in your name with your Social Security number. Request one at irs.gov/ippin.
- Watch your statements.Look for small charges you don’t recognise and report them to your bank. Ask for a new card if a full card number leaked.
- Distrust messages about First Commonwealth and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- When payments will be sent.
- Whether the judge has granted final approval (the hearing was set for 5 March 2026).
Questions
Is the First Commonwealth data breach settlement legit?
Yes. It is Maciejczyk v. First Commonwealth Federal Credit Union (consolidated with 2024-C-2649, 2024-C-2656, 2024-C-2664, 2024-C-2702, 2024-C-2749, 2024-C-2893), case 2024-C-2592, in the Court of Common Pleas of Lehigh County, Pennsylvania. Kroll Settlement Administration runs it for the court, and the only official site is fcfcusettlement.com.
Who qualifies for the First Commonwealth settlement?
All individuals residing in the United States whose Private Information was compromised in the June 2024 FCFCU data incident, including everyone who received notice of the incident from FCFCU. Excludes FCFCU directors, officers and agents, governmental entities, the judge and court staff, and people who opted out.
How much will I get from the First Commonwealth settlement?
Up to up to $5,000 for losses you can prove, or estimated $100 as a cash payment without receipts. The total settlement is $1,200,000.00 (non-reversionary, all cash). Final amounts depend on how many valid claims there are.
What is the deadline for the First Commonwealth settlement?
The claim deadline was 18 February 2026. It has passed.
When will the First Commonwealth settlement pay out?
The administrator has not published a payment date. The FAQ says cash payments begin after court approval and after the time for appeals expires.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- FCFCU Settlement: home and important dates, Kroll Settlement Administration, read 7 Nov 2026: class, benefits, deadlines, hearing.
- FCFCU Settlement: FAQ, Kroll Settlement Administration, read 7 Nov 2026: 98,817 people, data types, credit monitoring details, fees up to $400,000.
- FCFCU Settlement: Settlement Agreement, Kroll Settlement Administration (court filing), read 7 Nov 2026: $1,200,000.00 fund, incident dates June 26 to 27, 2024, Postcard Notice and Email Reminder Notice, Class Member ID.
- FCFCU Settlement: Important documents, Kroll Settlement Administration, read 7 Nov 2026: lists Final Approval Order and Judgement (scanned, could not be read).