If you worked for a construction firm, government contractor, or public-works employer that used LCPtracker’s labor-compliance software, your personal information may have been exposed in a data breach, and a class action settlement has been created to compensate affected workers. The settlement reportedly establishes a $495,000 fund, with eligible claimants able to seek up to $2,500 in reimbursement for out-of-pocket losses plus a flat $50 cash payment. The current claim deadline being reported is June 22, 2026, with a final approval hearing scheduled for July 2, 2026. The exposure traces back to August 14, 2024, when LCPtracker, Inc. detected unauthorized activity.
According to a consumer notice filed with the Vermont Attorney General’s office, an unauthorized third party may have accessed or obtained sensitive personal information between August 14 and August 20, 2024. Affected individuals began receiving notification letters around November 22, 2024, and were offered 12 months of complimentary credit monitoring. For example, a payroll clerk at a public-works contractor whose Social Security number was entered into LCPtracker’s certified payroll system could be among those eligible, even though they never personally signed up for the software. One important note before going further: the breach facts here are confirmed by primary sources, including the Vermont AGO notice and law-firm filings. The specific settlement dollar amounts and deadlines come from a third-party settlement-tracking aggregator rather than an official court document, so you should confirm those figures against the official settlement website or filed court records before relying on them.
Table of Contents
- Who Are the Workers Whose Information Was Exposed in the LCPtracker Breach?
- What Personal Information Was Compromised and Why It Matters
- How the Settlement Compensates Affected Workers
- How to File a Claim and Key Deadlines to Watch
- Common Problems and Limitations Workers Run Into
- How the LCPtracker Breach Fits a Broader Pattern of Vendor Breaches
- Steps to Confirm Your Eligibility Before the Deadline
- Frequently Asked Questions
Who Are the Workers Whose Information Was Exposed in the LCPtracker Breach?
LCPtracker is a cloud-based labor-compliance software company that serves the construction and government-contracting industries. Its platform tracks workforce and payroll data used to demonstrate compliance on public-works projects, including certified payroll reporting required under prevailing-wage laws. Because that function depends on detailed worker records, the people whose data flows through the system are typically employees of contractors and subcontractors, not the agencies or general contractors who buy the software directly. That distinction matters for understanding who is covered. Many affected individuals likely never interacted with LCPtracker by name.
Their employer uploaded their information to satisfy a government reporting requirement, which means a laborer, electrician, or administrative staffer might learn about the breach only through a notification letter. For comparison, this is similar to how employees of a small business can be swept into a breach at a third-party payroll processor like a benefits administrator, even though the worker never chose that vendor. The clearest signal that you are in the affected group is a notification letter dated on or around November 22, 2024. If you received one, keep it. The letter typically identifies the specific categories of your information that were involved, which can determine both your eligibility and the strength of any reimbursement claim you file.
What Personal Information Was Compromised and Why It Matters
The Vermont Attorney General consumer notice indicates that sensitive personal information may have been accessed during the August 2024 intrusion window. In breaches involving payroll and labor-compliance systems, the data at risk commonly includes names, Social security numbers, and other identifiers used for wage reporting. That category of data is precisely what makes payroll-system breaches more dangerous than, say, a breach limited to email addresses, because a Social Security number cannot be changed the way a password can. The offer of 12 months of complimentary credit monitoring is a standard response, and it is worth enrolling if you qualify. But treat it as a limited safeguard rather than a complete fix.
Credit monitoring alerts you after suspicious activity appears; it does not prevent the activity, and the protection typically expires after a year, while a stolen Social Security number can be misused for far longer. This is a frequent criticism of post-breach remedies: the coverage window rarely matches the lifetime of the risk. A practical warning: do not assume that enrolling in credit monitoring is the same as filing a claim in the settlement. They are separate actions. Workers sometimes sign up for the monitoring offered in the original 2024 notice and then mistakenly believe they have already “handled” the breach, only to miss the settlement claim deadline entirely.
How the Settlement Compensates Affected Workers
According to the FileYourClaim.co settlement tracker, the settlement is structured around a reported $495,000 fund. Eligible claimants may seek two types of payment: reimbursement of up to $2,500 for documented out-of-pocket losses, and a flat $50 payment that does not require proof of specific expenses. This two-tier structure is common in data breach settlements and is designed to compensate both people who suffered measurable harm and those who simply want acknowledgment without itemized documentation. The reimbursement tier is where documentation becomes critical. For example, if you paid for a credit freeze, spent unpaid time resolving a fraudulent account, or hired a service to clean up identity theft after August 2024, those costs may qualify, but you will generally need receipts, bank statements, or similar records.
By contrast, the flat $50 payment is the simpler path for workers who noticed no concrete losses but still want to participate. Keep in mind that settlement funds are finite. A $495,000 fund must cover claims, administrative costs, and any attorneys’ fees and service awards approved by the court. If a large number of workers file for the maximum reimbursement, pro-rata reductions can shrink individual payments below the advertised ceilings. The “up to $2,500” figure is a cap, not a guarantee.
How to File a Claim and Key Deadlines to Watch
Based on the settlement-tracker figures, the claim deadline is reported as June 22, 2026, whether you submit online or by mail. Mailed claims generally must be postmarked by the deadline, not merely received by it. The opt-out and objection deadline is listed as June 11, 2026, and the final fairness hearing is set for July 2, 2026, after which payments are distributed only once the settlement receives final approval and any appeals are resolved. You face a basic tradeoff in deciding how to respond. Filing a claim is the path to compensation, but it means accepting the settlement terms and releasing your legal claims against LCPtracker for this breach.
Opting out preserves your right to sue independently but forfeits any settlement payment and requires you to shoulder the cost and uncertainty of your own litigation. For most workers with modest documented losses, filing a claim is the more practical choice; opting out tends to make sense only for those with substantial, well-documented harm who intend to pursue a separate case. Before you submit anything, verify the deadlines and the claim portal against the official settlement administrator’s website or the court docket. Because the dates above come from an aggregator, an outdated or incorrect deadline could cause you to miss your window. If you cannot locate an official administrator site, the law firms that announced investigations, such as Strauss Borrelli PLLC, are a reasonable starting point for confirmation.
Common Problems and Limitations Workers Run Into
The most common obstacle is proof. Workers who genuinely spent time and money dealing with fraud after the breach often discover that they discarded the relevant records, leaving them unable to support the reimbursement tier and limited to the flat payment. A good practice is to gather documentation now, before the deadline pressure builds, including the original notification letter, bank and card statements showing any unauthorized charges, and notes on hours spent resolving issues. A second limitation is the causation question. Settlements typically compensate losses tied to this specific breach, but Social Security numbers and personal data circulate through many breaches.
If your information appeared in several incidents, it can be difficult to prove that a particular fraudulent charge stemmed from the LCPtracker exposure rather than another source. Claims administrators scrutinize this, and weakly documented losses are frequently reduced or denied. Finally, be alert to scams. Data breach settlements attract fraudulent emails and texts that impersonate claims administrators and ask for bank account numbers or a “processing fee.” Legitimate settlements do not charge you to file a claim. Never pay to submit, and confirm any link through the official settlement website rather than clicking a message you did not expect.
How the LCPtracker Breach Fits a Broader Pattern of Vendor Breaches
The LCPtracker incident is part of a larger trend in which the company that loses your data is not the company you work for. Compliance vendors, payroll processors, and benefits administrators sit in the background of employment, holding huge volumes of sensitive worker records while remaining invisible to the employees themselves.
When one is breached, thousands of people can be affected across hundreds of unrelated employers. For example, a single subcontractor on a municipal road project might have a dozen workers in LCPtracker, none of whom ever heard the vendor’s name until a letter arrived. That dynamic is why checking your mail and email from late 2024 matters, and why workers who change jobs or move are at particular risk of never receiving the notice that would tell them they qualify.
Steps to Confirm Your Eligibility Before the Deadline
Start by locating your notification letter from around November 22, 2024, which is the strongest evidence that you are a class member and often contains a claim ID or instructions specific to your record. If you cannot find it, check with your employer’s payroll or HR department, since they would know whether the company used LCPtracker for certified payroll during the relevant period.
Then confirm the live claim details against an official source. The breach dates of August 14 to August 20, 2024, and the 12-month credit monitoring offer are documented in the Vermont Attorney General notice, but the reported $495,000 fund, the up-to-$2,500 reimbursement, the $50 flat payment, and the June 22, 2026 claim deadline should be verified on the official settlement administrator’s site or in the court filings before you submit, because those figures currently rest on a third-party tracker rather than a primary court document.
Frequently Asked Questions
Who is eligible for the LCPtracker data breach settlement?
Workers whose personal information was held in LCPtracker’s labor-compliance system and exposed during the August 2024 breach, typically employees of construction firms and government contractors who received a notification letter around November 22, 2024.
How much money can I receive?
Reported terms allow up to $2,500 in reimbursement for documented out-of-pocket losses plus a flat $50 payment, though the $2,500 figure is a cap and could be reduced if many people file.
What is the claim deadline?
The deadline is reported as June 22, 2026, for both online and mailed claims, but confirm this against the official settlement website since it comes from a third-party tracker.
What information was exposed in the breach?
According to the Vermont Attorney General notice, sensitive personal information may have been accessed between August 14 and August 20, 2024; payroll-system breaches commonly involve names and Social Security numbers.
Do I need proof to file a claim?
The flat $50 payment generally requires no itemized proof, but the up-to-$2,500 reimbursement tier requires documentation such as receipts, statements, or records of time spent resolving fraud.
Is filing a claim the same as the credit monitoring I was already offered?
No. The 12 months of credit monitoring from the original 2024 notice is separate from the settlement claim; you must file a claim separately to receive a payment.
You Might Also Like
- Fitzgerald Wealth Management Data Breach Settlement Covers Clients Affected by Cyberattack
- Quest Diagnostics Data Breach Class Action Claims Lab Patient Information Was Exposed
- Marriott Data Breach Class Action Claims Hotel Guests’ Personal Information Was Exposed
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: