$2.9M CFCU data breach class action settlement

Communication Federal Credit Union (CFCU) has agreed to a $2.9 million class action lawsuit settlement to resolve claims it failed to prevent a data breach that occurred between December 2023 and January 2024.

The Communication Federal Credit Union settlement benefits all U.S. residents whose personal information was potentially exposed in a data breach between Dec. 31, 2023, and Jan. 11, 2024.

The CFCU data breach compromised names, birth dates, addresses, Social Security numbers, driver’s license numbers, bank account information and card numbers.

Plaintiffs in the class action lawsuit claim the CFCU could have prevented the breach through reasonable cybersecurity measures but failed to do so.

Communication Federal Credit Union is a member-owned financial institution with locations in Oklahoma and Kansas.

CFCU has not admitted any wrongdoing but agreed to a $2.9 million class action settlement to resolve the allegations.

Under the terms of the Communication Federal Credit Union settlement, class members can receive either a cash payment or reimbursement for out-of-pocket expenses related to the data breach.

Class members who experienced out-of-pocket losses as a result of the CFCU data breach can receive up to $7,500 in reimbursement for expenses, such as credit-related fees, ID replacement costs, communication-related expenses and fraud or identity theft losses.

Class members who did not experience out-of-pocket losses can receive a pro rata share of the settlement fund. These payments are estimated to be around $125 but could be larger or smaller depending on the number of claims filed.

All class members are eligible for three years of free identity theft protection and credit monitoring services. These services include $1 million in identity protection insurance.

The deadline for exclusion or objection is Nov. 21, 2025.

The final approval hearing for the Communication Federal Credit Union data breach settlement is scheduled for Jan. 7, 2026.

To receive settlement benefits, class members must submit a valid claim form by Dec. 22, 2025.

Who’s Eligible

All residents of the United States whose personal information was potentially exposed in the Communication Federal Credit Union data breach from Dec. 31, 2023, to Jan. 11, 2024, including those who received a data breach notification letter.

Potential Award

Up to $7,500 for documented out-of-pocket losses or a pro rata payment estimated at $125.

Proof of Purchase

Documentation of out-of-pocket expenses, such as receipts or bank statements.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

12/22/2025

Case Name

In re: Communication Federal Credit Union Data Breach Litigation, Case No. CJ-2024-5388, in the District Court for Oklahoma County, Oklahoma

Final Hearing

01/07/2026

Settlement Website

CFCUDataIncidentSettlement.com

Claims Administrator

CFCU Data Incident Settlement
c/o Settlement Administrator
P.O. Box 25226
Santa Ana, CA 92799
[email protected]
844-496-1149

Class Counsel

William B. Federman
FEDERMAN & SHERWOOD

A. Brooke Murphy
MURPHY LAW FIRM

Defense Counsel

Nathan Whatley
MCAFEE & TAFT

Daniel E. Rohner
SHOOK, HARDY & BACON LLP