Home › Settlements › Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement
Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement

Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement

$10,000
Max Payout
Oct 08, 2026
Filing Deadline
Yes
Proof Required?
Ernst & Young (EY) and Bank of America have reached a $2.5 million class action settlement related to the widespread MOVEit data breach. MOVEit is a file transfer software that was exploited by hackers in 2023, exposing sensitive personal information belonging to millions of people across hundreds of organizations worldwide. If your data was compromised through EY or Bank of America's use of MOVEit, you may be entitled to compensation from this settlement. The MOVEit breach was one of the largest data security incidents in recent history, affecting companies and government agencies across the globe. Cybercriminals exploited a vulnerability in the MOVEit software to steal personal information — including names, Social Security numbers, financial account details, and more — from countless individuals. EY and Bank of America were among the organizations that used MOVEit to transfer data, putting their clients and employees at risk. This settlement gives affected individuals an opportunity to be compensated for the potential harm caused by the exposure of their personal information. If you received a data breach notification from EY or Bank of America related to the MOVEit incident, you should read on to find out how to file a claim.
🎯

Not sure if this settlement applies to you?

Take our 60-second eligibility quiz to find every settlement you qualify for — including this one.

Check Eligibility →

Who Is Eligible?

You may be eligible to file a claim if you:

  • You received a data breach notification letter from Ernst & Young (EY) or Bank of America related to the MOVEit data breach
  • Your personal information — such as your name, Social Security number, financial account information, or other sensitive data — was exposed in the MOVEit breach through EY or Bank of America's systems
  • You are a current or former client, employee, or customer whose data was stored or transferred using MOVEit software by EY or Bank of America
  • The breach primarily occurred in or around May–June 2023, so individuals whose data was exposed during that timeframe are most likely to qualify
  • You are a U.S. resident who was notified of the breach by either EY or Bank of America

How Much Can You Get?

The total settlement fund is $2.5 million, which will be distributed among eligible claimants after legal fees, administrative costs, and any court-approved payments are deducted. The exact amount each person receives will depend on the number of valid claims filed — the more people who file, the smaller each individual share may be. Specific payout tiers and compensation amounts are still pending as settlement details are finalized. Claimants may also be able to seek reimbursement for out-of-pocket expenses related to the breach, such as costs associated with credit monitoring, identity theft recovery, or time spent addressing fraud. Check back for updates as more details become available, and consider downloading Class Action Buddy to get notified when the claim form goes live.

How to File Your Claim

Filing your claim is quick and easy:

  • Confirm your eligibility — check if you received a data breach notification letter from Ernst & Young or Bank of America mentioning the MOVEit incident
  • Gather any supporting documentation, such as your breach notification letter, proof of identity, or records of any out-of-pocket losses related to the breach
  • Wait for the official claim form to become available — the settlement website and claim deadline have not yet been announced
  • When the claim form is live, fill it out completely and accurately, providing your personal information and any required documentation
  • Submit your claim before the official deadline to ensure you don't miss out on compensation
  • Download the Class Action Buddy app to get alerts when the claim form is available, track your submission, and discover other settlements you may qualify for

💡 Easier way: File with Class Action Buddy

Skip the paperwork. Our app auto-fills your claim form with your saved profile and submits it electronically in under 2 minutes.

Download for iPhone Download for Android

Frequently Asked Questions

What is the deadline to file a claim for the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?

The current deadline to file a claim is Oct 08, 2026. Note: claims sent by mail must be postmarked by this date, and Class Action Buddy ships claim forms with a 7-day mailing buffer to ensure on-time delivery.

How much can I receive from the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?

The maximum payout per eligible claimant is up to $10,000. Actual payments may be lower depending on the total number of valid claims filed and the available settlement fund.

Do I need proof of purchase for the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?

Yes — this settlement requires proof of purchase. Acceptable proof typically includes receipts, credit card statements, photos of the product, or order confirmation emails. Check the official claim form for specifics.

How do I file a claim for the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?

You have two options: (1) Use the free Class Action Buddy mobile app — set up your profile once and the app auto-fills the PDF claim form, captures your signature, and submits the claim by mail on your behalf. (2) File directly with the settlement administrator using the official claim form linked on this page.

How do I know if I'm included in the EY and Bank of America MOVEit settlement?

The clearest sign is receiving a data breach notification letter from Ernst & Young or Bank of America specifically mentioning the MOVEit data breach. If you were a customer, employee, or client of either organization and your personal data was exposed in the 2023 MOVEit breach, you are likely eligible to file a claim.

What is the MOVEit data breach and why did it affect so many people?

The MOVEit breach occurred in May and June 2023 when cybercriminals exploited a security vulnerability in MOVEit Transfer software, which many large organizations used to send and receive sensitive files. Hackers were able to access and steal personal data from hundreds of companies and agencies — including EY and Bank of America — affecting millions of individuals worldwide.

Do I need proof to file a claim in the EY and Bank of America MOVEit settlement?

It is likely that some form of proof will be required, such as the data breach notification letter you received from EY or Bank of America. Keeping that letter on hand is strongly recommended. Additional documentation of losses, like receipts for credit monitoring services or records of identity theft-related expenses, may also strengthen your claim. Full proof requirements will be confirmed when the official claim form is released.

Related Settlements You Might Qualify For

More open settlements in the Privacy category — same easy filing process.

Thompson Coburn $7,500,000 Data Breach Settlement

Up to $5,000 Deadline: Jul 23, 2026

Gandara Mental Health Center $900,000 Data Breach Settlement

Up to $5,600 Deadline: Jul 23, 2026

Belle Tire Data Breach Settlement 2026

Up to $1,000 Deadline: Jul 27, 2026
No Proof

FACTA Credit Card Receipt Class Action Settlement — Hustler Stores (HH

Up to Cash + free credit monitoring Deadline: Jul 27, 2026
No Proof

Continental Café Holdings Settlement Resolves Class Action Lawsuit Over Late 2024 Data Bre

Up to $700 Deadline: Jul 28, 2026

Ready to File Your Claim?

We're adding new settlements regularly. Download the app to get notified when this one is available.

Download Class Action Buddy →