Cadence Bank customers affected by a 2023 data breach caused by the MOVEit Transfer software vulnerability have until June 4, 2026 to file claims in a $5.25 million settlement. The preliminary approval was granted on January 6, 2026 by Judge Allison D. Burroughs of the U.S. District Court for the District of Massachusetts, clearing the way for nearly 900,000 impacted customers to seek compensation for exposed personal information.
Those eligible can receive up to $10,000 for extraordinary losses, up to $2,500 for ordinary out-of-pocket expenses, or take a flat $100 payment plus two years of free credit monitoring—whichever covers their specific situation best. The breach itself was confined to a narrow window: May 28-31, 2023. During those four days, attackers exploited the MOVEit vulnerability to gain unauthorized access to files stored on Cadence Bank’s systems, accessing personal information including names, addresses, Social Security numbers, and account details. Most affected customers first learned about the incident when they received breach notification letters around September 15, 2023—a roughly four-month gap that left many vulnerable during that period.
Table of Contents
- How Much Can Affected Cadence Bank Customers Actually Receive from This Settlement?
- Understanding the Breach Timeline and What Personal Information Was Actually Exposed
- The Settlement Approval Process and Final Hearing Timeline
- Filing a Claim Before the June 4, 2026 Deadline
- Common Challenges and Limitations When Claiming Extraordinary Losses
- Free Credit Monitoring and Additional Protection Steps
- What Happens After the July 9, 2026 Final Approval Hearing
- Conclusion
How Much Can Affected Cadence Bank Customers Actually Receive from This Settlement?
The settlement provides three distinct compensation pathways, each designed for different types of harm. The most generous option is for customers who experienced extraordinary losses directly tied to the breach—identity theft, fraudulent charges, or significant unauthorized access. These claimants can recover up to $10,000, but they must document their losses with proof such as police reports, credit card statements showing fraudulent charges, or correspondence with credit card companies disputing unauthorized transactions. For example, a customer whose identity was stolen and used to open several credit card accounts could potentially recover the full amount if they have documentation of all fraudulent accounts created in their name.
Customers with ordinary out-of-pocket expenses—such as credit monitoring services they paid for before the settlement’s free option, fees charged for fraud disputes, or cost of placing credit freezes—can claim up to $2,500. This category also requires documentation, like receipts or billing statements showing the actual expenses. Finally, there’s a simple $100 flat payment available to all eligible claimants who don’t want to navigate documentation requirements or whose losses don’t exceed that threshold. Everyone receiving compensation also gets two years of complimentary three-bureau credit monitoring, meaning access to real-time fraud alerts across Equifax, Experian, and TransUnion.
Understanding the Breach Timeline and What Personal Information Was Actually Exposed
The MOVEit Transfer software vulnerability exploited by attackers was a critical flaw that allowed remote unauthorized access to files without requiring legitimate credentials. Cadence Bank discovered the breach during the May 28-31, 2023 window and immediately took action to contain it, but the damage was already done. Nearly 900,000 customers had their information accessed, making this one of the larger data breaches affecting a regional financial institution in recent years. The delay in notifying customers—notification letters arrived around September 15, 2023—meant affected individuals didn’t immediately know to monitor their accounts, a significant limitation in their ability to catch fraud early.
The personal information exposed included sensitive data that identity thieves actively target: names, addresses, Social Security numbers, account numbers, and financial details. This represents the type of information needed to commit identity theft or open fraudulent accounts in someone’s name. However, there’s an important distinction: mere exposure of data doesn’t automatically mean criminals actively misused it. Some affected customers may never experience actual fraud despite their information being accessed. This creates a challenge for claimants—those pursuing the extraordinary loss category must prove actual damage occurred, not just that their data was exposed.
The Settlement Approval Process and Final Hearing Timeline
The settlement was granted preliminary approval on January 6, 2026, which is a crucial first step but not the final word. Judge Allison D. Burroughs of the U.S. District Court for the District of Massachusetts reviewed the settlement terms and found them fair and reasonable—a decision that allows claim filing to proceed while legal objections can still be raised. The final approval hearing is scheduled for July 9, 2026.
This is when the judge will hear any objections from class members, consider comments from settlement administrators, and ultimately determine whether to grant final approval. Until that hearing occurs and the judge issues a final order, there remains a small possibility the settlement could be significantly modified, though this is relatively rare once preliminary approval has been granted. The settlement has already survived its initial scrutiny, which is generally a positive sign for claimants. It means a federal judge has determined that the settlement amount is proportionate to the harm suffered and the number of affected individuals. However, final approval isn’t automatic—the judge will evaluate any objections or requests to opt out of the settlement. Most class members won’t attend the final hearing or file objections, but those who disagree with the settlement terms have the right to make their voices heard before July 9, 2026.
Filing a Claim Before the June 4, 2026 Deadline
The claim deadline of June 4, 2026 is absolute and strictly enforced in class action settlements. Missing this date means losing all rights to compensation, regardless of whether you were genuinely affected by the breach. This is not a soft deadline with extensions available. The claim filing process requires visiting the official settlement website (moveitcadencesettlement.com) and submitting your information to verify you are part of the settlement class.
Eligible claimants are those who are current or former Cadence Bank customers who received a breach notification letter around September 15, 2023. The filing process itself is typically straightforward for the flat $100 payment option, usually requiring just your name and the last four digits of your Social Security number or account number. For those claiming extraordinary losses or ordinary expenses, the process is more involved and requires submitting documentation to support your claim. A comparison: claiming the flat $100 is quick (often taking 10-15 minutes online), while documenting $5,000 in extraordinary losses might require gathering police reports, credit card statements, and correspondence with financial institutions—a process that could take several hours but potentially yields 50-100 times more compensation.
Common Challenges and Limitations When Claiming Extraordinary Losses
One major limitation that trips up claimants: you must have actual documentation of losses, not just suspicion that fraud occurred. If you believe your Social Security number was used fraudulently but never confirmed it with police or credit card companies, you may struggle to meet the evidentiary threshold. Many people discover the breach through notification letters and monitor their accounts vigilantly but never actually experience fraud. These customers should claim the flat $100 or ordinary expenses if they incurred any, rather than pursuing extraordinary loss claims they cannot document.
Another practical limitation is that the settlement fund is only $5.25 million for nearly 900,000 customers—that’s roughly $5.80 per person if distributed equally. However, not all customers will file claims, so individual payouts could be higher. But this also means if many claimants pursue the $10,000 extraordinary loss option and provide valid documentation, the fund could be depleted, potentially resulting in pro-rata reductions. The settlement administrator may reduce claims if the total claims exceed available funds, which is a critical warning sign that those with legitimate documented losses should file early.
Free Credit Monitoring and Additional Protection Steps
The two-year free credit monitoring benefit is valuable and should be activated immediately upon claim approval. This service typically provides real-time alerts when someone attempts to open new accounts, apply for credit, or change account details in your name. Unlike paid credit monitoring services that might only check your report monthly, settlement credit monitoring usually offers continuous fraud detection. For example, a customer might receive an alert within minutes of a fraudster attempting to open a credit card account, allowing them to contact the credit card company and prevent the fraudulent account from being created.
However, credit monitoring is not identity theft insurance. It detects fraud but doesn’t prevent it or automatically fix the damage. Customers should also consider placing fraud alerts with the major credit bureaus (which is free) or security freezes (which may have small fees in some states but typically prevent unauthorized accounts from being opened entirely). These steps provide protection that complements the settlement’s monitoring benefit.
What Happens After the July 9, 2026 Final Approval Hearing
Once Judge Burroughs grants final approval on July 9, 2026, the settlement moves into the claims processing phase. The settlement administrator will review all submitted claims, verify eligibility, and prepare payments. For approved claims, payment distribution typically occurs 60-90 days after final approval.
Claimants will receive their compensation either by check, direct deposit (if they provided banking information), or the credit monitoring benefit will be activated (or both, depending on their claim selection). The settlement process doesn’t end the possibility of additional legal action against Cadence Bank, but for class members who don’t file individual lawsuits, this settlement represents their primary avenue for compensation. The $5.25 million reflects a negotiated resolution where Cadence Bank neither admits nor denies wrongdoing—a common outcome in settlement agreements. For affected customers, the resolution provides concrete compensation and monitoring tools without requiring them to pursue individual litigation, which could cost more in legal fees than any potential recovery.
Conclusion
The Cadence Bank MOVEit settlement offers meaningful compensation to the nearly 900,000 affected customers, with amounts ranging from $100 flat payments to $10,000 for documented extraordinary losses. The June 4, 2026 claim deadline is firm and cannot be extended, making it essential for eligible customers to file before that date expires. Those who received breach notification letters around September 15, 2023 should visit moveitcadencesettlement.com to determine their eligibility and submit their claim, choosing the compensation option that best reflects their actual losses.
The path forward involves not just filing your settlement claim but also activating the free two-year credit monitoring service and considering additional protective measures like fraud alerts or credit freezes. Judge Allison D. Burroughs will finalize the settlement on July 9, 2026, and once approved, claimants can expect compensation distribution within several months. For Cadence Bank customers still uncertain whether they were affected, the 2023 breach notification letter provides the clearest indicator of eligibility—if you received that notification, you have until June 4, 2026 to claim your compensation.
You Might Also Like
- Facebook Cambridge Analytica Settlement Sends Second Payments to Eligible Users
- University of Michigan Anderson Abuse Settlement
- USC Tyndall Gynecology Abuse Settlement
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: