Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement
Not sure if this settlement applies to you?
Take our 60-second eligibility quiz to find every settlement you qualify for — including this one.
Who Is Eligible?
You may be eligible to file a claim if you:
- You received a data breach notification letter from Ernst & Young (EY) or Bank of America related to the MOVEit data breach
- Your personal information — such as your name, Social Security number, financial account information, or other sensitive data — was exposed in the MOVEit breach through EY or Bank of America's systems
- You are a current or former client, employee, or customer whose data was stored or transferred using MOVEit software by EY or Bank of America
- The breach primarily occurred in or around May–June 2023, so individuals whose data was exposed during that timeframe are most likely to qualify
- You are a U.S. resident who was notified of the breach by either EY or Bank of America
How Much Can You Get?
The total settlement fund is $2.5 million, which will be distributed among eligible claimants after legal fees, administrative costs, and any court-approved payments are deducted. The exact amount each person receives will depend on the number of valid claims filed — the more people who file, the smaller each individual share may be. Specific payout tiers and compensation amounts are still pending as settlement details are finalized. Claimants may also be able to seek reimbursement for out-of-pocket expenses related to the breach, such as costs associated with credit monitoring, identity theft recovery, or time spent addressing fraud.How to File Your Claim
The administrator has not published a claim form for this settlement. The steps below are what filing will involve once one exists.
- Confirm your eligibility — check if you received a data breach notification letter from Ernst & Young or Bank of America mentioning the MOVEit incident
- Gather any supporting documentation, such as your breach notification letter, proof of identity, or records of any out-of-pocket losses related to the breach
- Watch for the official claim form and settlement website to go live. The claim deadline is October 8, 2026
- When the claim form is live, fill it out completely and accurately, providing your personal information and any required documentation
- Submit your claim before the official deadline to ensure you don't miss out on compensation
File this one with the administrator
Class Action Buddy does not file this settlement for you — use the official claim process above. What the app does do is watch the open settlements list and tell you when a new one matches your profile.
Frequently Asked Questions
What is the deadline to file a claim for the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?
The current deadline to file a claim is Oct 08, 2026. Claims sent by mail must be postmarked by this date, so allow about a week for delivery if you are not filing online.
How much can I receive from the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?
The maximum payout per eligible claimant is up to $10,000. Actual payments may be lower depending on the total number of valid claims filed and the available settlement fund.
Do I need documentation for the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?
Yes — this settlement requires supporting documentation, and what counts is set out on the official claim form rather than being the same in every case: a consumer case may ask for receipts or order confirmations, while a financial or data-breach case usually turns on account records or the notice the administrator sent you. Note: some settlements still require a Claimant ID or PIN from a mailed notice; if this one does, it will be shown on the official claim form.
How do I file a claim for the Ernst & Young, Bank of America $2.5M MOVEit Data Breach Settlement?
File directly with the settlement administrator, using the official claim form linked on this page. Class Action Buddy does not support this settlement in the app, so the administrator’s own claim process is the route. Check whether the form asks for an ID or PIN from the notice you were sent before you start.
How do I know if I'm included in the EY and Bank of America MOVEit settlement?
The clearest sign is receiving a data breach notification letter from Ernst & Young or Bank of America specifically mentioning the MOVEit data breach. If you were a customer, employee, or client of either organization and your personal data was exposed in the 2023 MOVEit breach, you are likely eligible to file a claim.
What is the MOVEit data breach and why did it affect so many people?
The MOVEit breach occurred in May and June 2023 when cybercriminals exploited a security vulnerability in MOVEit Transfer software, which many large organizations used to send and receive sensitive files. Hackers were able to access and steal personal data from hundreds of companies and agencies — including EY and Bank of America — affecting millions of individuals worldwide.
Do I need proof to file a claim in the EY and Bank of America MOVEit settlement?
It is likely that some form of proof will be required, such as the data breach notification letter you received from EY or Bank of America. Keeping that letter on hand is strongly recommended. Additional documentation of losses, like receipts for credit monitoring services or records of identity theft-related expenses, may also strengthen your claim. Full proof requirements will be confirmed when the official claim form is released.
Ready to File Your Claim?
We're adding new settlements regularly. Download the app to get notified when this one is available.
Download Class Action Buddy →Get Notified About New Settlements
We find new class action settlements every week. Get alerts so you never miss free money.
No spam. Unsubscribe anytime. We respect your privacy.