Most data breach settlements advertise an “estimated” flat payment that shrinks once the claims are counted. The Carter Credit Union settlement does not: its court-authorized notice states the no-proof payment as a one-time $50.00, with no settlement fund, no aggregate cap and no pro rata reduction described. People whose information was compromised in the June 2025 cyberattack on the Louisiana credit union can take that $50, or instead claim up to $2,500 in documented losses — and either way add three years of credit monitoring.
Status: Claims open; settlement not yet approved | Claim deadline November 19, 2026 | Opt out or object by October 20, 2026 | $50 flat or up to $2,500 documented, plus 3 years of monitoring
Why the $50 Is Not an Estimate
On a typical common-fund settlement, a fixed pot of money pays the administrator, the lawyers and the class representatives first, and whatever is left is divided among claimants. That is why so many flat payments are published as projections that fall when more people file than expected.
The Carter Credit Union data breach settlement is built differently. The notice discloses no total settlement amount, and the attorneys’ fees and service awards are paid on behalf of the credit union rather than out of class members’ money. Class Counsel will ask the court for $400,000 in fees and costs, plus $2,000 for each of the nine class representatives. Neither figure sits between claimants and their payment, and the court may award less than what is requested.
The notice does not guarantee the $50 against every possible contingency, and nothing has been paid yet. But on the face of the settlement documents there is no published mechanism that would cut it.
What the Credit Union Is Accused Of
The case is Ellis, et al. v. Carter Credit Union d/b/a Carter Federal Credit Union, Case No. 662980-C, in the 1st Judicial District Court for the Parish of Caddo, Louisiana. According to the notice, a targeted cyberattack on Carter Credit Union’s computer systems in June 2025 — dated in the class definition to on or about June 25, 2025 — gave an unauthorized party access to files containing private information.
Those files may have held names, addresses, Social Security numbers, driver’s license and government-issued ID numbers, account numbers, credit or debit card numbers, medical and health insurance information, and dates of birth. A card number gets reissued after a breach; a Social Security number, a birth date and a government ID number paired with account details do not, which is the combination used to open new accounts in someone else’s name.
Carter Credit Union denies doing anything wrong, and the court has not decided who is right. Both sides agreed to settle to avoid the cost and uncertainty of further litigation. Some class members may also remember an earlier letter from the credit union in 2025; the court-authorized settlement notice that followed is a separate document, not a duplicate.
Who Is in the Class
The court defined the class as all persons whose personally identifiable information was compromised because of the data incident Carter Credit Union experienced beginning on or about June 25, 2025. There is no residency requirement. The case is in a Shreveport courtroom, but a member who has since moved out of Louisiana is still covered.
Excluded are Carter Credit Union and its officers, directors and related companies; the lawyers for both sides; and the judge, along with the judge’s family and staff.
Choosing Between $50 and $2,500
| Alternative cash payment | A one-time $50. No proof or explanation required. |
| Documented losses | Up to $2,500 for out-of-pocket losses incurred between June 25, 2025 and November 19, 2026 that are fairly traceable to the incident. |
| Credit monitoring | Three years of CyEx Financial Shield Complete with $1 million of financial fraud insurance and access to a fraud resolution agent. Can be added to either cash option or claimed alone. |
The two cash options are mutually exclusive: the claim form tells filers not to take the $50 if they are claiming documented losses, and not to claim documented losses if they are taking the $50. The monitoring stacks with either.
Covered losses include money lost to identity theft or fraud, fees for credit reports, credit monitoring or freezing and unfreezing credit, the cost of replacing IDs, and postage to contact banks by mail. Expenses already reimbursed by someone else cannot be claimed.
For most people the arithmetic is simple. The documented tier is worth the paperwork only if your out-of-pocket losses since June 2025 exceeded $50 and you can prove them. A documented claim that fails is not automatically converted into the $50 here, so a thin loss claim can leave you with nothing.
What “Fairly Traceable” Requires
The documented tier asks for bank statements, receipts or similar proof, itemized on the claim form with a description and amount for each expense. The notice also says the proof should show that the expense was because of the data incident — a statement showing money left your account is not, on its own, evidence that this breach is why. Notes you wrote yourself can support other documents but are not enough by themselves. The form is signed under penalty of perjury, and the administrator may ask for more information before treating a claim as valid.
The Login Gate
The $50 needs no receipts, but filing online does need the Login ID and PIN printed on the mailed notice. The settlement website will not open the online form without them. The downloadable paper claim form asks for a Notice ID only “if known” and can be mailed or emailed as an image by the claim deadline, which gives someone without a notice a route in.
The claim form offers PayPal, Venmo, Zelle, a virtual prepaid card or a mailed check. An electronic option avoids a check lost in a move.
Two Deadlines, a Month Apart
| October 20, 2026 | Opt-out requests must be postmarked; objections must be filed with the Clerk of Court, with a copy to the administrator. |
| November 19, 2026 | Claims due online or by email, or postmarked if mailed. |
| November 30, 2026, 9:30 a.m. Central | Final approval hearing in Shreveport, Louisiana. The date and time may change without further notice. |
The gap matters. Anyone considering keeping the right to sue Carter Credit Union individually must decide by October 20, a full month before the claim window closes. An opt-out request must carry the case name and number, your name, address, phone number and email, your own signature and the words “Request for Exclusion” or a clear equivalent. Objecting does not cost you the payment: the notice confirms an objector may still file a claim.
Doing nothing has no upside. A class member who never files is still bound by the release in Section VII of the settlement agreement and receives neither cash nor monitoring.
How to File
File at the official settlement website, CCUDataSettlement.com, run by the administrator, Simpluris. Log in with the Login ID and PIN from your notice, tick the credit monitoring, then either check the $50 box or itemize your documented losses, choose a payment method and sign. Filing is free.
No payments go out until the court grants final approval and any appeals are resolved, and the notice says it is unknown whether appeals will be filed. Our sister site tracks the case on its Carter Credit Union settlement page on OpenClassActions.com.
Frequently Asked Questions
Is the Carter Credit Union $50 payment an estimate?
The notice states it as a one-time cash payment of $50.00 and describes no settlement fund, no aggregate cap and no pro rata reduction. That is unusual for a breach settlement. Nothing has been paid yet, and the settlement still needs final approval.
Can I claim the credit monitoring and a cash payment?
Yes. The three years of CyEx Financial Shield Complete can be claimed with either the $50 or the documented-loss option, or on its own. You cannot claim both cash options.
Will attorneys’ fees reduce my payment?
Not according to the notice. Class Counsel will request $400,000 in fees and costs and $2,000 for each of the nine class representatives, and both are paid on behalf of Carter Credit Union rather than from class members’ benefits.
Do I have to live in Louisiana?
No. The class is defined by whose information was compromised in the incident beginning on or about June 25, 2025, with no residency requirement.
I never got a notice. Can I still file?
The online form requires the Login ID and PIN from the notice. The downloadable paper claim form asks for a Notice ID only if known and can be mailed, or emailed as an image, by November 19, 2026.
When will payments be made?
Only after the court grants final approval at or after the November 30, 2026 hearing and any appeals are resolved. No payment date has been announced.
Sources
- Official settlement website, notice, claim form and settlement agreement — CCUDataSettlement.com, administered by Simpluris.
- Ellis, et al. v. Carter Credit Union d/b/a Carter Federal Credit Union, Case No. 662980-C, 1st Judicial District Court, Parish of Caddo, Louisiana.
- OpenClassActions.com — Carter Credit Union Data Breach Settlement.
Source and credit: the settlement terms, deadlines and benefit details described above are drawn from our sister site’s reporting — OpenClassActions.com: Carter Credit Union Data Breach Settlement — $50 With No Proof or Up to $2,500 Documented — which tracks this case against the court-approved notice and the official settlement website and is updated as the court rules.
Legal Disclaimer
This article is for informational purposes only and is not legal advice. OpenClassActions.org is a consumer news site, not a law firm and not the settlement administrator, and is not affiliated with any party to the case described. The allegations are allegations; unless a court has ruled, the defendants deny wrongdoing and no court has decided the merits. Deadlines, benefit amounts and payment timing can change as the court and the administrator act, so confirm current status on the official settlement website. You never need to pay anyone to file a claim or to receive a settlement payment.