Union Bank and Trust data breach settlement
Yes. The Union Bank and Trust data breach settlement is real: a $2,389,976 class action settlement in federal court, District of Massachusetts, run by RG/2 Claims Administration. The claim deadline, 21 July 2026, has passed and the judge approved the settlement on 6 August 2026. Payments have not been sent yet.
Judge Allison D. Burroughs signed the Final Approval Order on 6 August 2026 (Document 2037); claims closed on 21 July 2026 and no payment date has been posted.
Is it real?
Yes. The case is Scott, et al. v. Union Bank & Trust Co., et al. (coordinated in In re: MOVEit Customer Data Security Breach Litigation, MDL No. 1:23-md-03083), case number 1:23-cv-12436-ADB, in the United States District Court for the District of Massachusetts. The court appointed RG/2 Claims Administration to run it, and its only official site is ubtdatasettlement.com.
How the real notice reached people. RG/2 emailed the Short Form Notice on 22 April 2026 to 174,618 class members, mailed it to 32,652 people with no email, re-mailed 21,472 failed emails on or about 12 June 2026, and emailed a reminder on 26 June 2026. Each notice carried a Claimant ID and Password for filing online (the claim portal is claimsettlementportal.com/UBT, linked from the official site). The sender email address is not published, and the site has no scam warning.
To tell a real message from a scam:
- The only official site is ubtdatasettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your Union Bank and Trust password, your online banking login or a code texted to you. Payment details go only into the claim form on ubtdatasettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on 800-464-3215, the number on ubtdatasettlement.com, not one in the message.
- Claims have closed.The deadline was 21 July 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on ubtdatasettlement.com instead.
Who qualifies
All persons in the United States whose PII was included in the files affected by the MOVEit Security Incident at UBT. UBT, its officers and related entities, the judges and staff, and people who opted out are excluded.
Size: 208,262 unique Settlement Class Members on the class list (per the administrator's declaration; the class list file had 208,824 entries).
It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.
How much
The total settlement is $2,389,976.00. What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Reimbursement of ordinary losses | up to $2,500 | includes up to four hours of lost time at $25 per hour (up to $100 total); bank fees, phone charges, postage, gas; documentation required |
| Reimbursement of extraordinary losses | up to $10,000 | proven, documented, unreimbursed losses more likely than not caused by the incident, between May 31, 2023 and the end of the claims period |
| Alternative cash payment | $100 | instead of loss reimbursement; no documentation; may be reduced or increased pro rata, up to $1,000 |
| Credit monitoring and identity theft protection | two (2) years of three-bureau monitoring, with identity theft insurance of up to $1 million | all class members may claim it |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
- Final approval granted: .
Payout. The administrator has not published a payment date. The notice says payments are made after approval once there is no appeal or all appeals are rejected.
The administrator: “using the Claimant ID and Password provided on your notice.”
Filing and payment
- Claims closed on 21 July 2026; new claims can no longer be filed.
- Questions go to RG/2 Claims Administration at 800-464-3215 or by mail to P.O. Box 59479, Philadelphia, PA 19102-9479.
- The official site is www.UBTDataSettlement.com.
Official site: ubtdatasettlement.com. Phone: 800-464-3215. Mail: Union Bank and Trust Company Data Breach Settlement, c/o RG/2 Claims Administration LLC, P.O. Box 59479, Philadelphia, PA 19102-9479.
The breach, and what to do today
Between May 27 and May 31, 2023, cybercriminals exploited the MOVEit Transfer file transfer software that UBT used, gaining potential access to personal information of certain UBT clients. It was part of the wider 2023 MOVEit attacks.
What was exposed: personally identifiable information (PII).
A settlement pays for what already happened. The data is still out there, so do these now:
- Read the breach letter you were sent.It says which of your details were exposed. If it names your Social Security number, freeze your credit: in the US it’s free at Equifax, Experian and TransUnion.
- Distrust messages about Union Bank and Trust and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- When payments will be sent.
- Exactly which details were exposed: the settlement papers describe it only as personal information.
Questions
Is the Union Bank and Trust data breach settlement legit?
Yes. It is Scott, et al. v. Union Bank & Trust Co., et al. (coordinated in In re: MOVEit Customer Data Security Breach Litigation, MDL No. 1:23-md-03083), case 1:23-cv-12436-ADB, in the United States District Court for the District of Massachusetts. RG/2 Claims Administration runs it for the court, and the only official site is ubtdatasettlement.com.
Who qualifies for the Union Bank and Trust settlement?
All persons in the United States whose PII was included in the files affected by the MOVEit Security Incident at UBT. UBT, its officers and related entities, the judges and staff, and people who opted out are excluded.
How much will I get from the Union Bank and Trust settlement?
Up to up to $10,000 for losses you can prove, or $100 as a cash payment without receipts. The total settlement is $2,389,976.00. Final amounts depend on how many valid claims there are.
What is the deadline for the Union Bank and Trust settlement?
The claim deadline was 21 July 2026. It has passed.
When will the Union Bank and Trust settlement pay out?
The administrator has not published a payment date. The notice says payments are made after approval once there is no appeal or all appeals are rejected.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- UBT Data Settlement: home, RG/2 Claims Administration, read 7 Nov 2026: fund, benefits, deadlines, case number.
- Long Form Notice, RG/2 Claims Administration, read 7 Nov 2026: administrator, benefits detail, Claimant ID and Password, contact.
- Court documents list, RG/2 Claims Administration, read 7 Nov 2026: lists the Final Approval Order.
- Final Approval Order (Document 2037), US District Court, D. Mass. (copy on settlement website), read 7 Nov 2026: filed 08/06/26, signed by Judge Burroughs; zero objections; 7 opt-outs.
- Declaration of Erika L. Britton regarding settlement administration, RG/2 Claims Administration (court filing, Document 1951-2), read 7 Nov 2026: class list size, email and mail notice counts and dates.