$2.5M Ernst & Young, Bank of America MOVEit Data Breach Settlement

Individuals whose personally identifiable information was included in the files affected by the MOVEit security incident between May 27 and May 31, 2023 are eligible.

Documentation of losses such as receipts, invoices, bank statements, or phone records is required; no documentation needed for the $100 alternative cash payment.

About This Settlement

Ernst & Young and Bank of America are alleged to have failed to adequately protect consumers' personally identifiable information (PII) during a 2023 data breach of the MOVEit file transfer service. Hackers allegedly exploited the MOVEit software used by Ernst & Young between May 27 and May 31, 2023, with plaintiffs claiming the firm failed to implement reasonable cybersecurity measures. Without admitting any wrongdoing, Ernst & Young and Bank of America have agreed to a $2.5 million class action settlement to resolve these allegations. This page is for informational purposes only and does not constitute legal advice.

Who Qualifies

• Your personally identifiable information (PII) was included in the files affected by the MOVEit data breach
• The breach affecting your data occurred between May 27, 2023, and May 31, 2023
• Your PII was exposed through the MOVEit file transfer software used by Ernst & Young
• You may have been a client or had your data handled by Ernst & Young or Bank of America at the time of the alleged breach
• You have not previously released your claims related to this data breach
• Note: Geographic eligibility criteria are not specified in available case information — visit MoveitSettlementEYBOA.com or [Contact settlement administrator] for details

What You May Receive

Eligible class members may receive one of the following forms of compensation: up to $2,500 for ordinary losses, which may include bank fees, communication charges, credit monitoring costs, and up to four hours of documented lost time at an estimated rate of $25 per hour; up to $10,000 for extraordinary losses, which may include unreimbursed fraudulent charges, identity theft damages, and other documented monetary losses; or an alternative cash payment of $100 if you did not experience any losses as a result of the alleged breach. Additionally, all eligible class members may receive two years of free credit monitoring and identity theft protection services, which may include dark web monitoring, real-time credit monitoring with the three major credit bureaus, access to fraud resolution agents, and up to $1 million in identity theft insurance. Actual payout amounts are not guaranteed and may vary depending on the number of valid claims filed and the documentation provided.

How to File a Claim

1. Visit the official settlement website at MoveitSettlementEYBOA.com to access the claim form and review full eligibility details.
2. Complete the claim form accurately, providing all required personal information to verify your eligibility as a class member.
3. Gather and submit any required supporting documentation of your losses, which may include receipts, invoices, bank statements, or phone records relevant to your claim.
4. Submit your completed claim form and all supporting documentation by the claim deadline of October 8, 2026. Late submissions may not be accepted.

Case Details

Settlement: $2.5M Ernst & Young, Bank of America MOVEit Data Breach Class Action Settlement
Claim Deadline: October 8, 2026
Settlement Website: MoveitSettlementEYBOA.com