OneTouchPoint Data Breach Settlement: Who Can Claim and How Much

Not necessarily. OneTouchPoint divided people into two groups. Those whose information was confirmed affected, along with the named plaintiffs in the related litigation, belong to the payment-eligible group.

If you were told your information might have been affected but that impact could not be confirmed, you belong to the security-improvements-only group. That group cannot claim money or credit monitoring.

If you are unsure which group applies, contact Analytics Consulting at 866-996-3808 or [email protected]. The detailed eligibility and exclusions are in questions 5 and 6 of the notice.

The payment-eligible group can request the ordinary-loss, extraordinary-loss and time benefits when each benefit’s rules are met. The limits are $500 for ordinary expenses, $5,000 for extraordinary losses and $100 for time. Two years of credit monitoring can be requested too.

These limits are not a promised payment. You must support the benefits you claim, and the claim form prevents an extraordinary-loss claim from covering losses already included in the ordinary compensation categories. Source: official claim form, https://otpdataincident.com/wp-content/uploads/2026/08/Dusterhoft_ClaimForm.pdf (checked September 8, 2026).

No. Choosing $75 replaces the claims for ordinary losses, extraordinary losses and time spent. It does not add $75 to those payments.

You can still request the two-year credit-monitoring service with the $75 choice. A valid claim is required, even though this option does not require loss records or a statement of time spent.

For ordinary and extraordinary losses, the claim form asks for records supporting what you lost or spent. Notes you prepare yourself can explain other evidence, but cannot establish a valid loss claim by themselves.

For a time claim, explain what you did, enter the hours and confirm that you spent that time responding to the breach. The form asks you to round to the nearest hour and does not require documents for that time.

For the $75 option, you do not need to prove a financial loss or claim time. You do need to confirm that you are a U.S. or territory resident, received notice from OneTouchPoint and were notified that you qualify for the Monetary Settlement Class.

These details come from sections III–VI of the official claim form. Source: official claim form, https://otpdataincident.com/wp-content/uploads/2026/08/Dusterhoft_ClaimForm.pdf (checked September 8, 2026).

The deadline is November 16, 2026. You can use the official website’s File Claim link or mail a completed, signed paper form with a postmark by that date. Include the records required for the benefits you choose.

Mail goes to OTP Data Incident Settlement, c/o Analytics Consulting LLC, PO Box 2005, Chanhassen, MN 55317-2005.

The current claim form also permits emailing an image of the completed form to [email protected]. This option appears on page 2 of the form, although the notice itself describes online and mailed claims. Source: official claim form, https://otpdataincident.com/wp-content/uploads/2026/08/Dusterhoft_ClaimForm.pdf (checked September 8, 2026).

The online portal asks for the Claim Number and PIN from your postcard or email notice. This was checked on September 8, 2026 at https://dusterhoftonetouchpoint.claims-administrator.com/. Contact the administrator if you need help finding them.

OneTouchPoint has agreed to address the breach and strengthen security in the relevant systems for at least five years. The notice calls this injunctive relief: the benefit comes from changes the company must make.

The security-improvements-only group receives these changes rather than cash or credit monitoring. Members do not need to submit a claim form for this benefit.

Members of the Monetary Settlement Class can leave, or opt out, by mailing an individually signed request that clearly asks to be excluded. The envelope must be postmarked by October 16, 2026. Each person must act for themselves; group requests are not allowed.

Address it to OTP Data Incident Settlement, ATTN: Exclusion Request, c/o Analytics Consulting LLC, PO Box 2005, Chanhassen, MN 55317-2005. Question 16 of the notice provides the instructions.

Opting out means no settlement benefits, while keeping any right you have to pursue the covered claims separately. The notice gives this opt-out procedure to the payment-eligible group.

Members of either group may object. A payment-eligible member must stay in the settlement to do so, and can still submit a claim.

Write your reasons and include the case title, your name, address and phone number, the legal and factual basis for each objection, and copies of documents you want considered. Mail the objection to the class lawyers and OneTouchPoint’s lawyers by October 16, 2026.

Question 17 of the notice gives the complete instructions and the lawyer addresses. If you want to speak at the hearing, ask the court for permission as the notice describes.

The notice does not promise a distribution date. The judge must approve the settlement, and any appeals must finish or the time allowed for an appeal must expire.

The approval hearing is scheduled for November 18, 2026, at 10 a.m. at Waukesha County Circuit Court, 515 W Moreland Blvd, Waukesha, WI 53188. The notice does not specify a time zone.

You do not have to attend. The schedule may change, so check the official website before making plans. The hearing date is not a payment date.

If you belong to the payment-eligible group, taking no action means no payment or credit monitoring. Unless you opt out on time, you still give up the claims covered by the settlement when it becomes binding.

The security-improvements-only group gives up a narrower set of claims: requests for court-ordered changes or declarations about legal rights arising from the breach. The notice says members keep their rights to the other claims that payment-eligible members give up.

Question 9 and the release provisions in the settlement agreement and its amendment explain the exact legal scope.

The official claim form requires an actual loss supported by records that has not already been repaid. It must be more likely than not caused by the breach and must have occurred between April 28, 2022 and November 16, 2026.

It also must not already fall within the ordinary compensation categories. You must have made reasonable efforts to avoid the loss or obtain reimbursement.

These additional conditions are on page 1 of the claim form and are not spelled out in the notice’s shorter benefit description. Source: official claim form, https://otpdataincident.com/wp-content/uploads/2026/08/Dusterhoft_ClaimForm.pdf (checked September 8, 2026).