If your bank or credit union sent you a data-breach notice a couple of years ago, there may be a check with your name on it — and claiming it takes minutes, not paperwork. A $5.5 million settlement over a Doxim data breach is paying class members an estimated $100 flat, with no documentation required, or up to $5,000 for those who can prove losses. The claim window closes October 13, 2026, and the first step is figuring out whether Doxim is the vendor behind a notice you already received.
What the settlement covers
Doxim is a technology vendor that provides services to banks and credit unions, which is why the people affected may not recognize the name at first. The breach dates to December 2023. According to the official Doxim data incident settlement administrator, the company agreed to a $5.5 million settlement to resolve claims that people’s personal information was exposed in that breach.
Because Doxim works behind the scenes for financial institutions, an affected person’s relationship is usually with their bank or credit union, not with Doxim directly. The data-breach notice they received likely came from — or referenced — their financial institution, with Doxim named as the vendor whose systems were involved. That is the connection to check: whether a past breach notice you got traces back to Doxim.
Free retirement updates: Enrollment and claim windows come and go, and missing one can cost you real money. The free Retirement Shield newsletter keeps you ahead of the deadlines that matter. Sign up free.
The two ways to claim
The settlement offers two paths, and which one fits depends on whether you had actual losses. The simplest is a flat cash payment estimated at $100, available with no documentation required. A class member files a claim, attests to being covered, and receives the estimated payment without having to prove any specific harm — the low-friction option most people will use.
The second path is for people who suffered documented losses tied to the breach, such as fraud or identity-theft costs or time spent resolving them. Those class members can claim up to $5,000 for documented losses, but that route requires supporting records — receipts, statements, or other proof of the expense. The settlement also includes a year of credit monitoring, a benefit worth taking regardless of which cash option you choose, since it helps catch misuse of exposed information.
Why “estimated $100” is the honest way to say it
The flat payment is described as an estimate for a reason worth understanding, because it protects you from disappointment. In settlements like this, a fixed pool of money is divided among everyone who files a valid claim. If more people file than expected, each flat payment can be reduced proportionally; if fewer file, payments can be somewhat higher. So $100 is the target, not a guarantee — the final per-person amount depends on how many valid claims come in.
That structure is standard and legitimate, but it is the reason to be wary of anyone promising a precise, guaranteed figure. The official administrator describes the flat payment as an estimate, and that is the accurate way to think about it. The credit monitoring, by contrast, is a defined benefit that does not shrink with the number of claimants.
Data-breach settlements also draw their own wave of imitators, which is worth guarding against while you file. Scammers monitor publicized settlements and send fake “claim your settlement” messages that mimic the real administrator to harvest bank and identity details. The genuine claim runs only through the official administrator’s website, never charges a fee, and never asks you to pay to receive money. If a call, text, or email about the Doxim settlement pressures you for a payment or unusual personal details, treat it as fraud and go directly to the official site instead. The irony of a breach settlement is that it can become the hook for the next scam.
How to file before the deadline
The process runs through the official settlement website, and the deadline is firm. Claims must be submitted online or postmarked by October 13, 2026. A class member files by providing basic identifying information and, if they have received one, the notice or claim identifier from the settlement mailing; those seeking the documented-loss payment attach their proof. Filing directly through the official administrator’s site is the safe route — legitimate settlements never charge a fee to file a claim.
The reason to act rather than shrug it off is that the flat payment requires no proof and little effort, which makes ignoring it a small but real amount of money left behind. For anyone who received a breach notice connected to their bank or credit union, the worthwhile step is to check whether Doxim was the vendor named, and if so, file with the official administrator before the October 13 deadline closes the window.
This article was produced with AI assistance and reviewed by a human editor. Figures are linked to their primary sources; where a claim could not be verified from the public record, we say so.
More Financial Reading
