On Q Financial $1.25M Data Breach Settlement

Who Is Eligible?

You may be eligible to file a claim if you:

• You are in the class if your private information may have been compromised in the On Q Financial data security incident on or around 20 February 2024. In practice that means you got a notice: On Q began writing to affected people on or around 29 March 2024.
• What was exposed was names and Social Security numbers. Not card numbers, not account balances. A Social Security number is the one piece of this that does not expire and cannot be reissued casually, which is why the monitoring benefit is worth claiming even if nothing has gone wrong yet.
• The breach and the discovery are two different dates. On or around 20 February 2024 On Q was told a vulnerability existed in a product from a software and IT management vendor. It worked out only later that someone had actually exploited it.
• No documentation is needed for the flat cash payment or for the credit-monitoring benefit.
• Documentation is needed only for the reimbursement tier, and the costs have to have been incurred on or after 20 February 2024.
• Already took On Q's free monitoring after the breach? You are not disqualified — you get another year. The administrator states that class members who accepted the original offer can receive an additional year on top of it by claiming this benefit. Easy to assume you are already covered and skip it.
• Excluded: the judges hearing the case, their families and staff; On Q itself along with its parents, subsidiaries and successors; and anyone who opts out by 28 September 2026.

How Much Can You Get?

On Q agreed to pay $1.25 million into a settlement fund. That is the whole fund, not a figure any one person receives, and a large slice of it never reaches claimants.

What comes off the top first. Class counsel is asking for fees of up to 35%, which is $437,500, plus up to $30,000 in costs, plus a $2,500 service award to each of the four people who brought the case. That is $477,500, or about 38% of the fund, before administration expenses and before a cent reaches anyone who files.

The documented-loss payment reimburses up to $5,000 for unreimbursed out-of-pocket costs that are more likely than not down to the breach and were incurred on or after 20 February 2024. That covers long distance and per-minute cell charges, internet usage charges caused by the incident, credit reports bought between 20 February 2024 and 28 October 2026, credit monitoring or fraud resolution services bought in that window if you swear they were bought mainly because of this breach, and documented costs of dealing with identity theft. Time you spent sorting it out counts too.

The flat payment is estimated at $50 and needs no proof. Treat the $50 as a guess rather than a promise: the administrator sets it from whatever is left in the fund after administrative costs, fees, service awards, approved monitoring costs and approved documented-loss claims are all taken out. It is last in the queue, so it can land above or below $50.

The administrator says you can claim both. Its FAQ says class members may receive "one or both" of the two payments and calls the flat payment an addition to the documented-loss one. The same page is not entirely consistent — it also separates them with "or", and a documented-loss claim that fails for lack of proof is converted into a flat payment instead of being paid alongside it. Claim on that basis and check what the form actually offers you.

The monitoring sits on top of either. One year of single-bureau credit monitoring, up to $1 million of insurance against fraud and identity-theft losses, and a dedicated specialist to help you clean up if something happens. No documentation.

Cash goes out by electronic transfer if you file online, or by mailed check.

How to File Your Claim

File with the administrator:

• File at onqsettlement.com, the only authorized site for this case. It is run by Kroll Settlement Administration. You can submit online or download the PDF and mail it.
• Do not treat the two cash benefits as a menu. The administrator says you may claim one or both, so if you have documentation there is no reason to leave the flat payment behind. Read how the form presents them before you tick anything.
• Add the monitoring whatever else you do. It needs no paperwork, it stacks on top of the cash, and it still applies if you already accepted On Q's original offer after the breach.
• For the reimbursement tier, attach reasonable documentation — credit card or bank statements, invoices, telephone records, receipts. If what you send is thin you get a chance to cure it; if you do not fix it, the claim is converted into a flat cash payment rather than thrown out.
• Watch the clock on the online form: 11:59 p.m. Eastern on 28 October 2026. Mailed forms must be postmarked by that date, so allow about a week for the post.
• Pick how you want paying — electronic transfer if you file online, or a check in the mail.
• The opt-out and objection deadline is a month earlier, 28 September 2026. Opting out is the only way to keep your own right to sue On Q. Objecting is different: you stay in, you still get to file a claim, and you tell the court what you dislike.
• Then wait for approval. The judge has not signed off yet. The final approval hearing is set for 16 November 2026 at 10:00 a.m. Mountain Time, and money only moves after that and after any appeals are resolved.

Frequently Asked Questions