People affected by a CUSO Financial Services cybersecurity incident may claim a combination of loss reimbursement, cash and two years of credit monitoring under a proposed $1.75 million settlement. California class members may qualify for an additional statutory payment.
CUSO denies wrongdoing and liability. The settlement resolves allegations connected to the incident without a trial or a court finding that the company violated the law.
The class covers information stored during the incident
The nationwide class includes people whose personal identification information and data was stored in CUSO systems during the December 19, 2023, through January 19, 2024 cybersecurity incident and who were affected. The notice's eligibility section describes class members as U.S. residents.
A California subclass covers nationwide class members who were California residents at the time of the incident. That subclass is relevant because California residents can request a separate statutory cash payment.
CUSO and its officers and directors, valid opt-outs, the presiding judge and related staff and family, and anyone criminally responsible for initiating or helping cause the incident are excluded.
Up to $5,000 is available for documented losses
Class members may claim reimbursement of unreimbursed losses reasonably connected to the incident, up to $5,000. The notice lists examples such as bank fees, credit costs, postage, mileage, professional expenses and identity-protection services.
Receipts, statements or comparable supporting records are required. Costs already reimbursed by another source cannot be recovered again through the settlement.
The fund pays documented-loss claims first. If the total of approved claims and other settlement expenses exceeds the available net fund, payments can be reduced.
California and residual cash may increase the benefit
California subclass members may request up to $100 as a statutory cash payment. They must document that they lived in California on December 19, 2023. The notice says this payment is available in addition to, or instead of, documented-loss reimbursement.
Approved claimants may also receive a residual cash payment of up to $599 if money remains after higher-priority obligations. The residual amount will depend on the number and value of approved claims and may be less than $599.
Taken together, the stated caps can reach $5,699 for an eligible California claimant with approved documented losses, statutory cash and residual cash. That figure is not guaranteed: the fund pays documented losses first, California payments second and residual payments third, all subject to available money and proration.
Two years of monitoring can be claimed separately
The settlement offers two years of three-bureau credit monitoring through IDX, including dark-web monitoring, identity-restoration support and up to $1 million in reimbursement insurance. No supporting loss documentation is required for this service.
People who accepted the complimentary Experian IdentityWorks monitoring CUSO offered after the incident may still claim the separate two-year IDX benefit. Claimants should review the official form to select every benefit for which they qualify.
Claims are due November 16
Claims must be submitted online at CUSOCybersecurityIncident.com or mailed by November 16, 2026. The form must include documentation for loss reimbursement and, when requested, proof of California residence. Credit monitoring and residual cash do not require supporting loss documents.
The $1.75 million fund is non-reversionary, meaning settlement money is not scheduled to return to CUSO. It will also cover approved attorneys' fees, service awards and administration costs, which reduces what remains for class payments.
Class members who do nothing will receive no settlement benefit and will release covered claims if the settlement becomes final.
October 1 controls exclusions and objections
Requests for exclusion must be mailed and postmarked by October 1, 2026. Opting out preserves the ability to pursue released claims separately but gives up all settlement benefits.
Objections must be filed with the court and copied to the designated lawyers by October 1. Objecting is not the same as opting out: an objector remains in the class and will be bound by the outcome.
The final approval hearing is scheduled for February 18, 2027, at 8:30 a.m. at 221 S. Mooney Boulevard in Visalia, California. The notice does not state a timezone. Class members should check the official site for any scheduling changes.