The proposed MOVEit settlement pays up to $2,500 for documented ordinary losses, up to $10,000 for extraordinary losses, or a $100 alternative cash payment, plus two years of credit monitoring and identity protection. Claims closed on October 8, 2026 and the court has not yet given final approval.
Benefit Summary
Settlement Class Members: All living persons in the United States whose PII was included in files affected by the May 2023 MOVEit Security Incident, only as it related to services EY provided to BOA and PII in documents BOA provided to EY. Excluded are Defendants and related entities and personnel, the presiding judicial officers and their immediate families and staff, and people who timely and validly opt out.
Loss reimbursement and monitoring: These benefits can combine when their individual eligibility and claim requirements are met. Two years of three-bureau credit monitoring and identity theft protection services, including dark web monitoring, alerts of potentially unauthorized use, up to $1 million in identity theft insurance, real-time monitoring with Equifax, Experian, and TransUnion, and fraud-resolution and identity-restoration assistance. Reimbursement of qualifying documented ordinary losses caused by the incident, up to $2,500. This can include up to four hours of lost time at $25 per hour, up to $100 total, as well as qualifying bank fees, certain phone or data charges, postage, or local-travel gasoline. The amount may be reduced pro rata if valid claims exceed the Net Settlement Fund. Reimbursement of up to $10,000 for proven monetary losses that were actual, documented, unreimbursed, more likely than not caused by the incident, incurred from May 31, 2023 through the end of the claims period, and not covered as ordinary losses. The amount may be reduced pro rata if valid claims exceed the Net Settlement Fund.
Alternative cash payment and monitoring: These benefits can combine when their individual eligibility and claim requirements are met. Two years of three-bureau credit monitoring and identity theft protection services, including dark web monitoring, alerts of potentially unauthorized use, up to $1 million in identity theft insurance, real-time monitoring with Equifax, Experian, and TransUnion, and fraud-resolution and identity-restoration assistance. An alternative $100 cash payment without documenting losses or attesting to time spent because of the incident. If valid claims do not exhaust the Net Settlement Fund, this payment may increase pro rata, up to $1,000.
Choose one of these benefit packages; they are alternatives for this group.
The fund also pays notice and administration costs, any Court-approved service award, and Class Counsel’s attorneys’ fees and expenses. If money remains 180 days after the Effective Date, it will be used to extend claimed credit monitoring and identity theft protection services. No fund money returns to Defendants.
Available Awards
Up to $2,500 ordinary-loss reimbursement + Up to $10,000 extraordinary losses OR $100 cash; may increase up to $1,000
Who Is Included
Living people in the United States whose personal information was in files affected by the May 2023 MOVEit incident involving EY services for Bank of America, subject to the stated exclusions. U.S. residency is not required.
- Proof required: Loss reimbursement claims need documents showing the unreimbursed loss amount and why it is reasonably attributable to the incident. Examples include bank or credit-card statements, emails, invoices, receipts, and telephone records. A personal statement alone is not enough, though it can clarify other documents. The alternative cash payment does not require loss documents or an attestation of time spent.
Claim and Payment Information
- Claim method: Submit online or print the Claim Form from the settlement website and mail it to the address on the form.
- Claim deadline: 2026-10-08
- Instructions: Complete, sign, and submit a Claim Form with the required information. For loss reimbursement, describe each expense, its amount, when it was incurred, and why it was incurred, and attest that the losses were incurred in response to this MOVEit Security Incident.
Questions & Answers
What types of losses may be reimbursed?
What types of losses may be reimbursed?
- Ordinary losses may include bank fees, certain per-minute phone charges, certain usage-based data charges, postage, and gasoline for local travel. Lost time is limited to four hours at $25 per hour, or $100 total.
- Extraordinary losses are separate monetary losses. They must be actual, documented, not reimbursed from another source, more likely than not caused by this incident, incurred from May 31, 2023 through the claims deadline, and not covered as an ordinary loss.
What documentation is needed for a loss-reimbursement claim?
What documentation is needed for a loss-reimbursement claim?
- Describe each expense, its amount, when you incurred it, and why you incurred it. You must also attest that the loss was incurred in response to this MOVEit incident.
- Provide documents showing both the unreimbursed amount and why it is reasonably connected to the incident. Examples include bank or credit-card statements, emails, invoices, receipts, and telephone records. A personal statement by itself does not meet the documentation requirement, but it can explain other evidence.
Will everyone receive the full amount claimed?
Will everyone receive the full amount claimed?
- No. The amount available for claims comes from what remains after notice and administration costs, any approved service award, and attorneys’ fees and expenses are paid from the $2.5 million fund.
- If approved claims exceed the remaining fund, reimbursements will be reduced proportionally. If valid claims do not use all of the remaining fund, alternative cash payments can increase proportionally, but no higher than $1,000.
When would payments be sent?
When would payments be sent?
- The notice does not give a specific payment date. The administrator will review claims to determine whether they are valid and how much is payable.
- Payments can be made only after the Court approves the settlement and it becomes final—meaning there is no appeal from the approval order, or all appeals have been rejected.
How do I opt out, and what does that change?
How do I opt out, and what does that change?
- You may leave the settlement, called opting out, if you want to keep any right you may have to bring your own lawsuit against the defendants over the claims resolved here. You cannot receive settlement benefits or object if you opt out.
- Mail a First-Class, postage-prepaid letter or postcard postmarked by September 8, 2026. It must identify the case, give your full name, address, telephone number, and signature, and clearly state that you want to opt out. The notice gives further requirements for someone acting for an incapacitated or deceased class member.
How can I object to the settlement?
How can I object to the settlement?
- You may object only if you remain in the settlement class. An objection asks the Court not to approve the settlement; it cannot ask the Court to revise the settlement or impose a different one.
- Your written objection must identify the case, provide your contact details, state who the objection covers and the specific reasons for it, say whether you plan to appear or testify at the hearing, and include the required signatures. It must be filed electronically with the Court or mailed to the Clerk of Court by September 8, 2026.
Do I need to attend the final approval hearing, and can I speak?
Do I need to attend the final approval hearing, and can I speak?
- The hearing is scheduled for October 15, 2026, at 1:00 p.m., in Courtroom 17 on the fifth floor of the federal courthouse at 1 Courthouse Way in Boston. The Court will consider approval of the settlement, fees and expenses for class counsel, and the proposed service award.
- You do not need to attend. To ask to speak, include in a written objection that you intend to appear, along with your name, address, and signature. The hearing date can change.
What happens if I do nothing?
What happens if I do nothing?
- You will not receive money from this settlement.
- If you are in the settlement class and do not opt out, you will also lose the ability to sue the defendants and other released parties over the claims released by the settlement. The notice says the Settlement Agreement contains the full description of those released claims.
Other Important Dates
- Exclusion deadline: 2026-09-08
- Objection deadline: 2026-09-08
- Final approval hearing: October 15, 2026 at 1:00 p.m.
- Hearing location: Courtroom 17, 5th Floor, federal courthouse, 1 Courthouse Way, Boston, Massachusetts 02210
Case Details
- Total settlement fund: $2,500,000
- Case name: Morris v. Progress Software Corporation et al.
- Case number: 1:24-cv-11807-ADB (D. Mass.)
- Court: United States District Court for the District of Massachusetts
- Administrator: RG2 Claims Administration, LLC (RG2)
- Official Settlement Website: https://www.MoveitSettlementEYBOA.com
Sources
Claim form, FAQ, deadlines, administrator information
Court-approved notice describing eligibility and benefits