Doxim Data Breach Settlement: How to Claim by October 13
Got a notice about the Doxim data incident, often through a credit union? A $5.5M settlement pays up to $5,000 with proof or about $100 without, plus credit monitoring.
If a letter, email, or postcard told you your information was involved in the Doxim data incident of December 30, 2023, you may be in a class action settlement, and the claim deadline is October 13, 2026. The settlement website says the settlement covers “all living individuals residing in the United States who were identified by Doxim and sent notice by Doxim or Doxim’s Credit Union Clients that their Private Information was impacted in the Data Incident.” That wording matters: you are in the class because you were sent a notice, not because you banked at a particular credit union. This guide covers what the settlement pays, how to file with the Unique ID and PIN on your notice, what counts as proof of a loss, and why the mail deadline reads two different ways.
The quick answer
- Who is in: people who were “identified by Doxim and sent notice by Doxim or Doxim’s Credit Union Clients.” No notice means you may not be in the class; ask the administrator
- Cash Payment A: reimbursement of documented fraud or identity theft losses “up to $5,000 per Settlement Class Member,” with documentation
- Cash Payment B: with no documents, “a Cash Payment in the estimated amount of $100”
- Credit monitoring: one year of Credit Monitoring, claimed in addition to either cash payment
- Deadline: October 13, 2026. Online filing runs to 11:59 p.m. Eastern. For mailed claims the FAQ and notice say postmarked, while the claim instructions page says received, so mail early or file online
- To file online you need the Unique ID and PIN printed on your notice
- Opting out and objecting are over. Both deadlines passed on September 28, 2026
- Money comes only after the court approves the settlement at a hearing on October 28, 2026
Key facts at a glance
| Question | Answer |
|---|---|
| Case | In re Doxim, Inc. Data Security Incident Litigation, No. 2:24-cv-11550 (E.D. Mich.), Judge Terrence G. Berg |
| Settlement fund | $5,500,000 |
| Defendants | Doxim, Inc., Credit Union ONE, and Beacon Credit Union |
| Data involved | ”names, addresses, financial account numbers, and Social Security numbers” may be included |
| Cash Payment A | Up to $5,000 for documented losses |
| Cash Payment B | Estimated $100, pro rata |
| Credit monitoring | One year, in addition to either cash payment |
| Claim deadline | October 13, 2026 |
| Online login | Unique ID and PIN from the printed notice |
| Mail address | Doxim Data Incident, Settlement Administrator, P.O. Box 2509, Portland, OR 97208-2509 |
| Toll-free line | 1-877-318-7817 |
| Final approval hearing | October 28, 2026, 10:00 a.m., Detroit |

What the incident and the lawsuit are about
The settlement site describes a data incident “around December 30, 2023” in which “an unauthorized actor gained access to Doxim, Inc.’s files and Settlement Class Members’ Private Information.” The information involved “may include: names, addresses, financial account numbers, and Social Security numbers.” The defendants named in the lawsuit are Doxim, Inc., Credit Union ONE, and Beacon Credit Union.
The FAQ is plain that nothing has been proven: “Defendants deny the legal claims and deny any wrongdoing or liability. The Court has not made any determination of any wrongdoing by Defendants, or that any law has been violated.” The two sides settled to avoid the risk and cost of continuing.
Who is in the class
The FAQ’s test: “You are included in the Settlement Class if you are a living individual residing in the United States who was identified by Doxim and sent a notice by Doxim or Doxim’s Credit Union Clients that your Private Information was impacted in the Data Incident.” The settlement’s own numbers show the size. Plaintiffs’ motion for final approval says 1,060,747 postcard notices were mailed to class members with valid addresses, and that a postcard “was delivered to 1,005,987 of the 1,075,803 unique, identified Settlement Class Members” as of September 1, 2026.
If you are not sure, the FAQ says “you may write to the Settlement Administrator,” at the P.O. box above. The notice also lists the toll-free line, 1-877-318-7817.
The benefits
| Benefit | What you get | What it takes |
|---|---|---|
| Cash Payment A | Reimbursement of documented fraud or identity theft losses that can be reasonably traced to the incident, up to $5,000 | Documents: “telephone records, correspondence, including emails, or receipts” |
| Cash Payment B | ”a Cash Payment in the estimated amount of $100” | No documents |
| Credit monitoring | ”one year of Credit Monitoring” | A claim, in addition to Cash A or Cash B |
Two rules shape Cash Payment A. First, you “will not be reimbursed for expenses if they have been reimbursed for the same expenses by another source in connection with the Credit Monitoring and identity theft protection product offered as part of the notification letter provided by Doxim or otherwise.” Second, a Cash A claim that fails does not disappear: if you do not submit reasonable documentation, or the administrator finds your form invalid and you do not fix it, “your Claim Form will be processed as if you elected Cash Payment B.”
The credit monitoring is more than a sign-up link. Plaintiffs’ motion describes “one year, one bureau Credit Monitoring services, which provides comprehensive dark web monitoring, high risk transaction monitoring, with real-time alerts, security freezes, and $1 million in insurance coverage.” One bureau means one of the three credit reporting agencies, so consider whether you also want freezes at the other two.
What the $100 really depends on
Cash Payment B is not a fixed amount. The settlement site says “Your Cash Payment may be subject to a pro rata (a legal term meaning equal share) increase if the amount of Valid Claims does not use the entire Net Settlement Fund. Alternatively, if the amount of Valid Claims exceeds the amount of the Net Settlement Fund, your Cash Payment may be subject to a pro rata reduction.” The order of payment matters: “the Settlement Administrator must first distribute the funds in the Net Settlement Fund for payment of Credit Monitoring and then for Cash Payments.”
Plaintiffs’ motion for final approval calls the $100 an estimate: “Although a precise amount of this pro rata payment is currently not available, in Class Counsel’s experience, it is estimated to be $100.” It also promises an update: “Just prior to the Final Approval Hearing, Plaintiffs will submit a Supplemental Declaration from Epiq and will include an approximate value for Cash Payment B.” Check the settlement site and the court filings in the days before October 28 for that number.
The fund is $5,500,000, and the same fund pays the administrator, the lawyers, and the class representatives. The FAQ says class counsel will ask for “up to 1/3 of the Settlement Fund, plus reimbursement of reasonable costs” and “up to $2,500 each” for the class representatives, and the motion states the fee request as $1,833,333.33. The motion also reports that, as of September 10, 2026, “tens of thousands” of class members had filed claims for cash payments and credit monitoring.
The arithmetic works like this, as an illustration and not a forecast: if $3,000,000 were left for Cash Payment B, then 30,000 such claims would each get $100, and 60,000 would each get $50. Every extra claim shrinks the share, and an under-used fund raises it. The real numbers are the administrator’s to file.
How to file
Online. The claim page says “You will need the Unique ID and PIN on the printed Notice that you received in the mail.” If you did not get a notice or lost it, the page says to contact the administrator by writing to the P.O. box. While filing, “you will be asked to verify your identity as a Class Member.” Then:
- Have everything ready first. “your Claim will not be saved if you have to come back and finish at a later time”
- Documents: upload files “less than 20 MB per file,” in jpg, jpeg, png, gif, tif, tiff, doc, docx, xls, xlsx, pdf, txt, rtf, or zip format. If you cannot upload them, the page says to mail a printed form with your documents
- Redact what is unrelated. “You may redact unrelated transactions and all but the first four and last four digits of any account number”
- Keep your confirmation. “you will receive an email with a confirmation code for your completed submission”
By mail. The claim page says to download the Claim Form, “provide all the information requested on the Claim Form, attach any supporting documentation, sign it, date it, and then mail it” to Doxim Data Incident, Settlement Administrator, P.O. Box 2509, Portland, OR 97208-2509. You can also request a form “by calling 1-877-318-7817” or by writing to that address. When we checked on October 3, 2026, the claim form PDF link on the documents page returned an access error while the notice PDF opened normally, so if the form will not download for you, use the phone or mail request.
The mail deadline reads two ways. The FAQ says to mail the form to the administrator, “postmarked by October 13, 2026,” and the notice repeats it. But the claim instructions page says “all Claim Forms must be submitted online or received by the Settlement Administrator no later than October 13, 2026.” Receipt is the stricter test. If you mail it, send it now by a trackable method so it arrives by the 13th, or file online instead.
Documents. The page warns that “Documents should be clear, readable copies, as anything you submit will not be returned to you,” and that “your Claim may be audited, and you could be asked to provide additional information to process the Claim.” Keep copies of everything you send.
When the money could arrive
The FAQ says “If you file a timely and Valid Claim Form, the Settlement Class Member Benefits will be provided after the Settlement is approved by the Court and becomes final.” The hearing is October 28, 2026, at 10:00 a.m. before Judge Berg at the Theodore Levin U.S. Courthouse in Detroit, and the FAQ adds “The date and time of the Final Approval Hearing are subject to change without further notice to the Settlement Class. The Court may also decide to hold the hearing via video conference or by telephone.” You do not have to go: “Class Counsel will answer any questions the Court may have.”
The settlement agreement, attached to the plaintiffs’ motion, sets the clock after approval: “The Settlement Administrator shall distribute the Settlement Class Member Benefits no later than 45 days after the Effective Date.” The Effective Date is “5 days after the entry of the Final Approval Order, provided there are no objections to the Settlement”; with objections it is later, such as “30 days after entry of the Final Approval Order if no appeals are taken from the Final Approval Order,” and an appeal can push it further. The motion reports one purported objection. Payments “will be made electronically or by paper check,” and you pick on the claim form; check holders “shall have 120 days to negotiate the check.” If your address or email changes after you file, “it is your responsibility to inform the Settlement Administrator of your updated information.”
What doing nothing means
The deadlines to exclude yourself and to object passed on September 28, 2026, and the site says so: “The deadline has passed to exclude yourself from the Settlement” and “The deadline has passed to object to the Settlement.” That leaves two choices. Filing a claim is “The only way to get a payment if you qualify.” Doing nothing means “Get no Settlement Class Member Benefits. Give up your legal rights.” Anyone who stays in the class releases the claims the settlement covers, and anyone with a pending lawsuit over the incident should “speak to your lawyer in that lawsuit immediately,” as the FAQ puts it.
Check that it is real
The notice states “A court authorized this Notice. This is not a solicitation from a lawyer.” File only on the official site, doximdatasecuritysettlement.com, or by mail to the P.O. box above, and never send Social Security numbers or card numbers to anyone who contacts you about a payment. The FAQ also says “PLEASE DO NOT TELEPHONE THE COURT OR THE COURT’S CLERK OFFICE REGARDING THIS NOTICE.” Our October 2026 settlement deadlines guide lists the other claim windows closing this month.
Quick answers to what people search
Is the Doxim data breach settlement real? Yes. It is a class action settlement in the U.S. District Court for the Eastern District of Michigan, preliminarily approved on June 5, 2026, with a $5,500,000 fund and an official site run by the administrator.
How much is the Doxim settlement payment? Up to $5,000 for documented losses, or an estimated $100 with no documents, plus one year of credit monitoring. The $100 can rise or fall.
What is the Doxim settlement claim deadline? October 13, 2026. Online claims run to 11:59 p.m. Eastern, and mailed claims should arrive by that date.
I did not get a notice. Can I still claim? The class is people “sent notice.” If you think you should have received one, write to the administrator at P.O. Box 2509, Portland, OR 97208-2509, or call 1-877-318-7817.
What do I need to file online? The Unique ID and PIN from your printed notice, and documents if you claim Cash Payment A.
Can I still opt out? No. The opt-out deadline was September 28, 2026.
When will I be paid? After the October 28 hearing and the Effective Date, within 45 days of the Effective Date under the settlement agreement.
Bottom line
If you received a notice about the Doxim data incident, file by October 13, 2026: online with the Unique ID and PIN from the notice, or by mail with enough time to arrive by that date. Claim Cash Payment A only if you have documents for losses tied to the incident, since a failed Cash A claim is paid as Cash B, and add the free year of credit monitoring either way. Expect Cash B to be about $100 at the estimate, with a better figure promised before the October 28 hearing, and no money until the court approves the settlement and the Effective Date passes. Opting out and objecting are closed, so doing nothing just means no benefits and no right to sue over the covered claims.
Class definition, benefits, deadlines, and claim instructions quoted from the court-authorized settlement website, its FAQ, claim instructions page, and long-form notice, read on October 3, 2026. The notice reach, fee request, estimated payment, payment timing, and credit monitoring description are quoted from Plaintiffs’ Unopposed Motion for Final Approval (filed September 11, 2026) and the settlement agreement attached to it, both linked on the site’s documents page. The 30,000 and 60,000 claim example is our illustration and is not a forecast. Settlement terms can change at the final approval hearing, and the settlement site is the authority on your claim. This is general information, not legal advice.
Official sources
- In re Doxim, Inc. Data Security Incident Litigation settlement website (home page, benefits, important dates)
- Doxim Data Incident settlement: Frequently Asked Questions
- Doxim Data Incident settlement: claim instructions and login
- Doxim Data Incident settlement: long-form notice (PDF)
- Doxim Data Incident settlement: court documents, including the motion for final approval and the settlement agreement