AM8181 v.03 If your Private Information was impacted in the Data Incident that occurred on or around December 30, 2023, involving Doxim, Inc., and Doxim’s Credit Union Clients and you were sent notice, you may be entitled to benefits from a settlement. A court authorized this Notice. This is not a solicitation from a lawyer. • A proposed $5,500,000 settlement has been reached in a class action lawsuit regarding a Data Incident that occurred around December 30, 2023, in which an unauthorized actor gained access to Doxim, Inc.’s files, including Settlement Class Members’ Private Information. The Private Information involved includes information collected and/or maintained by Doxim or Doxim’s Credit Union Clients, and may include names, addresses, financial account numbers, and Social Security numbers. • The Settlement Class includes all living individuals residing in the United States who were identified by Doxim and sent notice by Doxim or one of Doxim’s Credit Union Clients that their Private Information was impacted in the Data Incident. • If you are a member of the Settlement Class, you can submit a Claim Form for the following Settlement Class Member Benefits: • Credit Monitoring: In addition to Cash Payment A or Cash Payment B, you may also submit a Claim Form to receive one year of Credit Monitoring. AND • Cash Payment A – Documented Losses: You may submit a Claim Form and provide reasonable documentation for fraud or identity theft losses that can be reasonably traced to the Data Incident for up to $5,000 per Settlement Class Member. Supporting documentation is required. OR • Cash Payment B – Alternative Cash: Instead of Cash Payment A, without providing documentation, you may submit a Claim Form to receive a cash payment in the estimated amount of $100. Your Cash Payment may be subject to a pro rata (a legal term meaning equal share) increase or decrease, depending upon the total value of all Valid Claims. This Notice may affect your rights. Please read it carefully. Your Legal Rights & Options Deadline Submit a The only way to get Settlement Class Member Benefits is to Submitted online or postmarked Claim Form submit a timely and valid Claim Form. by October 13, 2026 Get no Settlement Class Member Benefits, but you will keep Postmarked by Opt Out your right to file your own lawsuit against the Released Parties September 28, 2026 about the Released Claims in this lawsuit. Stay in the Settlement but tell the Court why you do not agree Object to the with the Settlement. You will still be bound by the Settlement Filed by September 28, 2026 Settlement if the Court approves it. Get no Settlement Class Member Benefits, and you will give up Do Nothing your legal rights. • These rights and options—and the deadlines to exercise them—are explained in this Notice. • The Court must decide whether to approve the Settlement, attorneys’ fees, costs, and Service Awards. No Settlement Class Member Benefits will be provided unless the Court approves the Settlement. Questions? Go to DoximDataSecuritySettlement.com or call 1-877-318-7817. 1 AM8182 v.03 Basic Information 1. Why is this Notice being provided? A court authorized this Notice because you have the right to know about the Settlement of this class action lawsuit and about your rights and options before the Court decides whether to grant final approval to the Settlement. This Notice explains the lawsuit, the Settlement, your legal rights, what Settlement Class Member Benefits are available, who is eligible for the Settlement Class Member Benefits, and how to get them. The Honorable Terrence G. Berg of the United States District Court for the Eastern District of Michigan, Southern Division, is overseeing this class action. The lawsuit is known as In re Doxim, Inc. Data Security Incident Litigation, Case No. 2:24-cv-11550 (“lawsuit”). The individuals who filed this lawsuit are called the “Plaintiffs” and/or “Class Representatives,” and the companies sued, Doxim, Inc., Credit Union ONE, and Beacon Credit Union, are called the “Defendants.” 2. What is this lawsuit about? The Plaintiffs filed this lawsuit against the Defendants on behalf of themselves and all others similarly situated regarding a Data Incident that occurred on or around December 30, 2023, in which an unauthorized actor gained access to Doxim’s files, including Settlement Class Members’ Private Information. The Private Information involved includes information collected and/or maintained by Doxim or Doxim’s Credit Union Clients, and may include names, addresses, financial account numbers, and Social Security numbers. Defendants deny the legal claims and any wrongdoing or liability. The Court has not made any determination of any wrongdoing by Defendants or that any law has been violated. Instead, the Plaintiffs and Defendants have agreed to a settlement to avoid the risk, cost, and time of continuing the lawsuit. 3. Why is there a settlement? The Plaintiffs and Defendants do not agree about the legal claims made in this lawsuit. The lawsuit has not gone to trial, and the Court has not decided in favor of the Plaintiffs or Defendants. Instead, the Plaintiffs and Defendants have agreed to settle the lawsuit. The Class Representatives, Defendants, and their lawyers believe the Settlement is best for the Settlement Class because of the Settlement Class Member Benefits available and the risks and uncertainty associated with continuing the lawsuit. 4. Why is this lawsuit a class action? In a class action, one or more people (called “class representatives”) sue on behalf of all people who have similar legal claims. Together, these people are called a “class” or “class members.” One court resolves the issues for all class members, except for those who timely exclude themselves (opt out) from the class. Who Is Included in the Settlement 5. How do I know if I am included in the Settlement? You are included in the Settlement Class if you are a living individual residing in the United States who was identified by Doxim and sent a notice by Doxim or one of Doxim’s Credit Union Clients that your Private Information was impacted in the Data Incident. 6. Are there exceptions to being included in the Settlement? Yes. Excluded from the Settlement Class are (a) directors, officers, and employees of Defendants; (b) the Judge assigned to the lawsuit, that Judge’s immediate family, and Court staff; and (c) any Settlement Class Member who timely and validly opts out of the Settlement. Questions? Go to DoximDataSecuritySettlement.com or call 1-877-318-7817. 2 AM8183 v.03 7. What if I am still not sure whether I am part of the Settlement? If you are still not sure whether you are a Settlement Class Member, you may go to DoximDataSecuritySettlement.com or call 1-877-318-7817 toll-free. The Settlement Benefits 8. What does this Settlement provide? If you are a Settlement Class Member, you can submit a Claim Form for the following Settlement Class Member Benefits: Cash Payment A – Documented Losses You may submit a Claim Form with reasonable documentation of fraud or identity theft losses that can be reasonably traced to the Data Incident for up to $5,000 per Settlement Class Member. Examples of reasonable documentation include (but are not limited to): telephone records, receipts, and correspondence, including emails. You are required to submit reasonable documentation supporting the losses to claim Cash Payment A. You will not be reimbursed for expenses if you have been reimbursed for the same expenses by another source with the credit monitoring and identity theft protection product offered as part of the notification letter provided by Doxim or otherwise. If you do not submit reasonable documentation supporting a loss, or if your Claim Form is invalid as determined by the Settlement Administrator, and you do not cure your Claim Form, your Claim Form will be processed as if you elected Cash Payment B - Alternate Cash. Cash Payment B – Alternative Cash Instead of selecting Cash Payment A, without providing documentation, you may submit a Claim Form to receive a cash payment in the estimated amount of $100. Credit Monitoring In addition to Cash Payment A (Documented Losses) or Cash Payment B (Alternative Cash), you may also submit a Claim Form to receive one year of Credit Monitoring. Your Cash Payment may be subject to a pro rata (a legal term meaning equal share) increase if the amount of Valid Claims does not use the entire Net Settlement Fund. Alternatively, if the amount of Valid Claims exceeds the amount of the Net Settlement Fund, Cash Payment may be subject to a pro rata reduction. For purposes of calculating the pro rata increase or decrease, the Settlement Administrator must first distribute the funds in the Net Settlement Fund for payment of Credit Monitoring and then for Cash Payments. Any pro rata increases or decreases to Cash Payments will be on an equal percentage basis. Any residual funds remaining in the Net Settlement Fund after distribution of the Settlement Class Member Benefits will be issued to a cy pres recipient. The proposed recipient is the Michigan State Bar Foundation. 9. What am I giving up to receive Settlement Class Member Benefits or stay in the Settlement Class? Unless you exclude yourself (opt out), you will remain in the Settlement Class. If the Settlement is approved and becomes final, all Court orders and any judgments will apply to you and legally bind you. You will not be able to sue, continue to sue, or be part of any other lawsuit against the Released Parties about the Released Claims in this lawsuit. The specific rights you are giving up are called “Released Claims.” 10. What are the Released Claims? Section XIII of the Settlement Agreement describes the Releases, Released Claims, and Released Parties in necessary legal terminology, so please read this section carefully. The Settlement Agreement is available at DoximDataSecuritySettlement.com. For questions regarding the Releases, Released Claims, or Released Parties and Questions? Go to DoximDataSecuritySettlement.com or call 1-877-318-7817. 3 AM8184 v.03 what the language in the Settlement Agreement means, you can also contact Class Counsel, listed below, for free, or you can talk to your own lawyer at your own expense. How to Get Benefits from the Settlement 11. How do I submit a Claim Form? You must submit a timely and valid Claim Form to receive any Settlement Class Member Benefits as described above. Your Claim Form must be submitted online at DoximDataSecuritySettlement.com by October 13, 2026, or mailed to the Settlement Administrator at the address below, postmarked by October 13, 2026. Claim Forms are available to download and print at DoximDataSecuritySettlement.com, or you may request a Claim Form by calling 1-877-318-7817 or writing to the following address: Doxim Data Incident Settlement Administrator P.O. Box 2509 Portland, OR 97208-2509 12. What happens if my contact information changes after I submit a Claim Form? If you change your mailing address or email address after you submit a Claim Form, it is your responsibility to inform the Settlement Administrator of your updated information. Otherwise, the Settlement Administrator may not be able to provide your payment. You may notify the Settlement Administrator of any changes by writing to the following address: Doxim Data Incident Settlement Administrator P.O. Box 2509 Portland, OR 97208-2509 13. When will I receive my Settlement Class Member Benefits? If you file a timely and valid Claim Form, the Settlement Class Member Benefits will be provided after the Settlement is approved by the Court and becomes final. It may take time for the Settlement to be approved and become final. Please be patient and check www.DoximDataSecuritySettlement.com for updates. How to Opt Out of the Settlement If you are a member of the Settlement Class and want to keep any right you may have to sue or continue to sue the Released Parties on your own about the legal claims in this lawsuit or the Released Claims, then you must take steps to get out of the Settlement. This is called excluding yourself from— or “opting-out” of—the Settlement. 14. How do I opt out of the Settlement? To opt out of the Settlement, you must mail a written request that includes the following: 1) Your name, address, telephone number, and email address (if any) 2) Your wet ink signature personally signed by you (electronic signatures are (prohibited); and 3) A statement that you want to be excluded from the Settlement Class, such as “I hereby request to be excluded from the Settlement Class in the In re Doxim, Inc. Data Security Incident Litigation.” Questions? Go to DoximDataSecuritySettlement.com or call 1-877-318-7817. 4 AM8185 v.03 The exclusion request must be mailed to the Settlement Administrator, postmarked by September 28, 2026, at the following address: Doxim Data Incident Settlement Administrator P.O. Box 2509 Portland, OR 97208-2509 You cannot opt out (exclude yourself) by telephone or email. “Mass” or “class” requests for exclusion filed by third parties on behalf of a “mass” or “class” of Settlement Class Members or multiple Settlement Class Members where the opt-out has not been signed by each and every individual Settlement Class Member will not be allowed. 15. If I opt out, can I still get anything from the Settlement? No. If you opt out, you will not be able to receive Settlement Class Member Benefits, and you will not be bound by the Settlement or any judgments in this lawsuit. You can only get Settlement Class Member Benefits if you stay in the Settlement and submit a timely and valid Claim Form. 16. If I do not opt out, can I sue Defendants for the same thing later? No. Unless you opt out, you give up any right to sue any of the Released Parties for the legal claims this Settlement resolves and Releases, and you will be bound by all the terms of the Settlement and proceedings, orders, and judgments in the lawsuit. You must opt out of this lawsuit to start or continue your own lawsuit or be part of any other lawsuit against the Released Parties about the Released Claims in this Settlement. If you have a pending lawsuit, speak to your lawyer in that lawsuit immediately. How to Object to the Settlement 17. How do I tell the Court I do not like the Settlement? If you are a Settlement Class Member, you can tell the Court you do not agree with all or any part of the Settlement and/or Application for Attorneys’ Fees, Costs, and Service Awards. To object, you must file your timely written objection with the Court as provided below by September 28, 2026, and send by U.S. mail to Class Counsel, Defendants’ Counsel, and the Settlement Administrator postmarked by or shipped by private courier (such as Federal Express) by September 28, 2026, stating you object to the Settlement in In re Doxim, Inc. Data Security Incident Litigation, Case No. 2:24-cv-11550. To file an objection, you cannot exclude yourself from the Settlement Class. Your objection must include all of the following information: 1) Your full name, mailing address, telephone number, and email address (if any); 2) All grounds for the objection, accompanied by any legal support for the objection known to you as the objector or your own counsel; 3) The name of the case, the case number, and the name of the court in which you have made any objection within the last five years; 4) The identity of all counsel (if any) representing you in connection with the objection; 5) Whether you and/or your counsel (if any) will personally appear at the Final Approval Hearing; 6) A list of all persons who will be asked to testify at the Final Approval Hearing in support of your objection (if any); 7) Your wet ink signature, which must be personally signed by you (an attorney’s signature is not sufficient). Electronic signatures are prohibited. Questions? Go to DoximDataSecuritySettlement.com or call 1-877-318-7817. 5 AM8186 v.03 To object, you must file your timely written objection with the Court by September 28, 2026, and send it by U.S. mail to Class Counsel, Defendants’ Counsel, and the Settlement Administrator, postmarked by or shipped by private courier (such as Federal Express) by September 28, 2026, at the following addresses: Settlement Court Class Counsel Defendants’ Counsel Administrator Clerk Jeff Ostrow For Defendant Doxim: Doxim Data Incident U.S. District Court KOPELOWITZ OSTROW P.A. Xeris E. Gregory Settlement Administrator Theodore Levin 1 West Las Olas Blvd. J.T. Malatesta P.O. Box 2509 U.S. Courthouse Suite 500 POLSINELLI PC Portland, OR 97208-2509 231 West Lafayette Blvd. Fort Lauderdale, FL 33301 2100 SouthBridge Parkway Detroit, MI 48226 Suite 650 E. Powell Miller Birmingham, AL 35209 THE MILLER LAW FIRM, P.C. 950 West University Dr. For Defendant CUO: Rochester, MI 48307 Mitchell Capp MCDONALD HOPKINS Bryan L. Bleichner 39533 Woodward Ave. CHESTNUT CAMBRONNE PA Suite 318 100 Washington Ave. South Bloomfield Hills, MI 48304 Suite 1700 Minneapolis, MN 55401 For Defendant Beacon: Eric D. Stubenvoll Mariya Weekes O’HAGAN MEYER MILBERG, PLLC 1 East Wacker Dr. 201 Sevilla Ave. Suite 3400 2nd Floor Chicago, IL 60601 Coral Gables, FL 33134 18. What is the difference between objecting and asking to be excluded? Objecting is simply telling the Court that you do not like something about the Settlement. You can object only if you stay in the Settlement Class. Opting out is telling the Court that you do not want to be part of the Settlement Class. If you opt out, you cannot object because you will no longer be part of the Settlement. The Lawyers Representing You 19. Do I have a lawyer in the lawsuit? Yes. The Court has appointed Jeff Ostrow of Kopelowitz Ostrow P.A.; E. Powell Miller of The Miller Law Firm, P.C.; Bryan L. Bleichner of Chestnut Cambronne PA; and Mariya Weekes of Milberg, PLLC, as Class Counsel to represent you and the Settlement Class for the purposes of this Settlement. You may hire your own lawyer at your own cost if you want someone other than Class Counsel to represent you in this lawsuit. 20. How will Class Counsel be paid? Class Counsel will file a motion asking the Court to award the attorneys’ fees of up to 1/3 of the Settlement Fund, plus reimbursement of reasonable costs. Class Counsel will also ask the Court to approve the Service Awards for the Class Representatives of up to $2,500 each for their efforts. If awarded by the Court, the attorneys’ fees and costs and the Service Awards will be paid from the Settlement Fund. The Court may award less than these amounts. The Final Approval Hearing The Court will hold a “Final Approval Hearing” to decide whether to approve the Settlement and Application for Attorneys’ Fees, Costs, and Service Awards. You may attend and you may ask to speak if you file an objection by the deadline, but you do not have to. Questions? Go to DoximDataSecuritySettlement.com or call 1-877-318-7817. 6 AM8187 v.03 21. When and where will the Court decide whether to approve the Settlement? The Court will hold a Final Approval Hearing on October 28, 2026, at 10:00 a.m. before the Honorable Terrence G. Berg at the Theodore Levin U.S. Courthouse, 231 W. Lafayette Blvd., Detroit, MI 48226. At this hearing, the Court will consider whether the Settlement is fair, reasonable, and adequate and decide whether to finally approve the Settlement and the Application for Attorneys’ Fees, Costs, and Service Awards. If objections were filed by the deadline, the Court will consider them. If you file a timely objection, and you (or your lawyer) ask to speak at the hearing, the Court, at its discretion, may hear objections at the hearing. Note: The date and time of the Final Approval Hearing are subject to change without further notice to the Settlement Class. The Court may also decide to hold the hearing via video conference or by telephone. You should check the Settlement Website www.DoximDataSecuritySettlement.com to confirm the date and time of the Final Approval Hearing have not changed. 22. Do I have to attend the Final Approval Hearing? No. Class Counsel will answer any questions the Court may have. However, you are welcome to attend at your own expense. If you file an objection, you do not have to attend the Final Approval Hearing to speak about it. As long as you file your written objection by the deadline, the Court will consider it. 23. May I speak at the Final Approval Hearing? The Court will consider any objections filed by the deadline. If you file a timely objection and you (or your lawyer) ask to speak at the hearing, the Court, at its discretion, may hear your objection at the hearing. How to Get More Information 24. How can I get more information about the Settlement? This Notice summarizes the Settlement. Complete details about the Settlement are provided in the Settlement Agreement. The Settlement Agreement and other related documents are available at www.DoximDataSecuritySettlement.com. You may get additional information at www.DoximDataSecuritySettlement.com, by calling toll-free 1-877-318-7817, or by writing to: Doxim Data Incident Settlement Administrator PO Box 2509 Portland, OR 97208-2509 PLEASE DO NOT TELEPHONE THE COURT OR THE COURT’S CLERK OFFICE REGARDING THIS NOTICE. Questions? Go to DoximDataSecuritySettlement.com or call 1-877-318-7817. 7