|

Communications Data Group Data Breach Settlement, Check If You Qualify — Pierce v. Communications Data Group, No. 2026CH000032

If you got a letter about a February 2025 cyberattack on Communications Data Group, there’s money and free credit monitoring on the table — but only if you file. Eligible claimants can request up to $5,000 for documented losses, a flat $45 with no proof required, or three years of credit monitoring with $1 million in identity theft insurance. You have until November 10, 2026, to file.

Who Is Communications Data Group and Why Are They Being Sued for the Breach?

Communications Data Group, Inc. (CDG), based in Champaign, Illinois, is a software-as-a-service billing vendor for telecom companies — it doesn’t sell phone or internet service to the public directly, it handles billing behind the scenes for the companies that do. That’s exactly why one breach at CDG rippled outward: a single point of failure at a back-office vendor ended up exposing customers of Duo County Telephone Cooperative Corporation, Cumberland Cellular, LLC, and Home Wireless, Inc. all at once, none of whom had any direct relationship with CDG themselves.

What Did Communications Data Group Do to Its Customers’ Customers?

CDG discovered the attack on its network in February 2025. According to independent reporting, a cyber threat actor attempted to disrupt CDG’s systems in what looked like an effort to deploy ransomware and demand payment, and the ransomware group Qilin later claimed responsibility. CDG says it secured its systems, cut off the unauthorized access, and brought in law enforcement — but the damage to the data was already done.

The lawsuit, filed in the Circuit Court of the 6th Judicial Circuit in Champaign County, Illinois, claims CDG and the telecom companies it serves were responsible for the incident and asserts negligence, negligence per se, breach of implied contract, breach of a third-party beneficiary contract, unjust enrichment, and a request for declaratory judgment. In plain terms: the plaintiffs argue CDG had a duty to keep customer data secure and failed to meet it, and that the telecom companies who handed customer data to CDG share responsibility for what happened to it.

Approximately 137,059 people had their name, address, date of birth, driver’s license information, bank account information, or Social Security number potentially exposed. The defendants deny any wrongdoing and admit no liability, but agreed to settle to avoid the cost and risk of a trial.

That’s the part worth sitting with: none of these customers chose CDG. Their phone or internet provider did, on their behalf, and this is where that choice landed.

Read more: The Conduent data breach followed the same pattern — a back-office vendor breach that cascaded out to millions of people who’d never heard of the company that lost their data.

Communications Data Group Data Breach Settlement — Key Facts

Settlement AmountNo aggregate cap disclosed — CDG funds each valid claim directly (up to $5,000 per documented-loss claim, $45 flat for the no-proof option, or credit monitoring)
Claim DeadlineNovember 10, 2026
Who QualifiesU.S. residents whose Private Information was potentially impacted by the February 2025 Data Incident, including anyone mailed a breach notice
Estimated Payout$45 with no documentation, or up to $5,000 with documented, unreimbursed losses tied to the breach
Proof Required (Yes/No)Yes, for the Documented Loss claim (declaration under penalty of perjury plus supporting records); No, for the $45 Alternative Cash Payment
Settlement StatusPreliminarily approved; Final Approval Hearing set for November 16, 2026
Court & Case NumberCircuit Court of the 6th Judicial Circuit, Champaign County, Illinois, No. 2026CH000032
Law AllegedNegligence, negligence per se, breach of implied contract, breach of third-party beneficiary contract, unjust enrichment, declaratory judgment
AdministratorSimpluris
Official Claim Sitecommunicationsdatagroupsettlement.com
Last UpdatedSeptember 22, 2026

Who Qualifies for the Communications Data Group Settlement?

Here’s exactly how to know if this case includes you.

  • Anyone who received a notice letter about the February 2025 Data Incident from CDG or Home Wireless, Inc.
  • Customers of Duo County Telephone Cooperative Corporation, Cumberland Cellular, LLC, or Home Wireless, Inc. whose information was handled by CDG
  • U.S. residents whose Private Information — name, address, date of birth, driver’s license number, bank account information, or Social Security number — was potentially exposed
  • People who never dealt with CDG directly but whose telecom provider used CDG for billing

You do not qualify if you’re an employee, director, officer, or agent of any of the defendants, a government entity, or connected to the presiding judge’s chambers or staff.

Communications Data Group Data Breach Settlement, Check If You Qualify — Pierce v. Communications Data Group, No. 2026CH000032

Communications Data Group Breach Victims Outside Illinois — Are You Still Covered?

Yes. This is a nationwide settlement class. It doesn’t matter what state you live in — if you’re a U.S. resident whose data was exposed or who received a breach notice, you’re covered regardless of where the case was filed.

Not sure if you qualify for the Communications Data Group settlement? A free consultation with a data privacy attorney can help you sort out your eligibility before the November 10, 2026 deadline.

How Much Can Communications Data Group Settlement Class Members Get?

There are three settlement benefits, and you pick one path:

Documented Loss — up to $5,000 for expenses more likely than not caused by the breach and not reimbursed elsewhere: fraud or identity theft costs, attorney or accountant fees, credit repair fees, costs of freezing or unfreezing credit, credit monitoring you bought after getting the breach notice, and miscellaneous costs like notary or postage fees. This requires Reasonable Documentation and a signed declaration under penalty of perjury.

Alternative Cash Payment — a flat $45, no proof needed, in place of a documented-loss claim or credit monitoring.

Credit Monitoring — three years of monitoring through CyEx with one major credit bureau (Experian, Equifax, or TransUnion), including identity theft insurance up to $1,000,000 with no deductible. If you claim a Documented Loss, you can add Credit Monitoring on top of it.

Payments over $600 may appear on a 1099. Check with a tax professional.

How to File Your Communications Data Group Settlement Claim — Step by Step

  1. Go to communicationsdatagroupsettlement.com, the official claim site.
  2. Choose your benefit: Documented Loss, the $45 Alternative Cash Payment, or Credit Monitoring only.
  3. If claiming Documented Loss, gather your supporting records — receipts, bank statements, or other proof of unreimbursed expenses tied to the breach.
  4. Fill out the online claim form, or download and mail the paper version.
  5. Sign the declaration under penalty of perjury if you’re claiming a Documented Loss.
  6. Submit and save your confirmation — the Settlement Administrator may follow up with a Notice of Deficiency if anything’s missing, so watch your email.

Takes about 10 minutes for the $45 option; longer if you’re gathering documentation for a Documented Loss claim.

Should Communications Data Group Class Members Opt Out or Object Before October 26?

What Opting Out of the Communications Data Group Settlement Actually Means

Opting out means you get no payment, no credit monitoring, and no other benefit — but you keep your right to sue the defendants yourself over the same data incident. Most people should not opt out without legal advice. The exclusion request must be postmarked by October 26, 2026, and mailed to the Settlement Administrator with your name, address, phone number, signature, and a clear statement that you want to be excluded.

How to Object to the Communications Data Group Settlement

Objecting keeps you in the class while telling the court you disagree with some or all of the deal. Objections must be received by October 26, 2026, mailed to the Settlement Administrator (P.O. Box 25226, Santa Ana, CA 92799-9958) and filed with the court, and must include specific information the court requires — your contact details, the grounds for your objection, and whether you plan to appear at the hearing.

Talk to a data privacy attorney before October 26, 2026, if you’re considering either option.

Communications Data Group Settlement — Key Dates, 2026

MilestoneDate
Settlement ProposedUNVERIFIED — preliminary approval date not confirmed from a named primary source
Notification MailingSeptember 11, 2026
Claims Period OpensUNVERIFIED — exact claims-opening date not confirmed from a named primary source; claim form is currently available on the settlement site
Claim Filing DeadlineNovember 10, 2026
Opt-Out DeadlineOctober 26, 2026
Objection DeadlineOctober 26, 2026
Final Approval HearingNovember 16, 2026, 10:30 a.m. CT
Expected Payment DateUNVERIFIED — payment timing depends on final approval and any appeals, which the settlement administrator says could take more than a year

Communications Data Group Settlement — Frequently Asked Questions, No. 2026CH000032

Do I need a lawyer to file a Communications Data Group settlement claim?

 No. You can file directly at communicationsdatagroupsettlement.com or by calling (866) 601-3534. A data privacy attorney can help if you have questions about a larger Documented Loss claim, but it’s not required.

Is the Communications Data Group settlement legitimate?

 Yes. It’s part of Pierce, et al. v. Communications Data Group, Inc., et al., No. 2026CH000032, pending in the Circuit Court of the 6th Judicial Circuit, Champaign County, Illinois, before Judge Jason B. Bohm, and the notice was authorized by that court.

When will Communications Data Group settlement payments be sent?

 No payment date has been announced. The Final Approval Hearing is November 16, 2026, and the administrator says appeals and claim processing could take more than a year after that.

What if I missed the Communications Data Group claim deadline? 

The deadline hasn’t passed yet — you have until November 10, 2026. If that date passes without a claim from you, you won’t receive a payment or credit monitoring from this settlement.

Will my Communications Data Group settlement payment go on a 1099?

 Possibly. Payments over $600 may be reported. Check with a tax professional.

How do I know if my information was part of the Communications Data Group breach?

 If you received a notice letter from CDG or Home Wireless, Inc. about the February 2025 Data Incident, you’re likely covered. If you’re unsure, call (866) 601-3534.

What specific laws does Communications Data Group allegedly violate?

 The lawsuit alleges negligence, negligence per se, breach of implied contract, breach of a third-party beneficiary contract, unjust enrichment, and seeks declaratory judgment under Illinois law — not a specific state privacy statute.

How much could Communications Data Group breach victims get if this settles?

 It depends on which benefit you choose: a flat $45 with no proof, up to $5,000 with documented losses, or three years of credit monitoring with $1 million in identity theft insurance. There’s no single dollar figure for everyone.

Sources Used in This Communications Data Group Settlement Article

  • Official Settlement Administrator Website — Simpluris: https://communicationsdatagroupsettlement.com/
  • Official Settlement Administrator FAQ Page: https://communicationsdatagroupsettlement.com/faq/
  • Settlement Agreement — hosted by the Settlement Administrator: https://cw.simpluris.com/docs/public/downloads/CPC2/SETTLEMENT_AGREEMENT
  • Maine Attorney General, Office of Consumer Protection — Data Breach Notification record for Communications Data Group: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/943d1111-7f57-42a2-8259-b0de8e4ba981.html

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement administrator’s website and FAQ page, and against the Maine Attorney General’s data breach notification record, on September 22, 2026. Last Updated: September 22, 2026.

Disclaimer This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.

About the Author

Israr Ahmad is a legal content researcher with 4+ years of experience covering class action settlements and consumer rights cases. He has researched and published coverage of 2,500+ settlements using verified court records, settlement administrator filings, and government sources. Learn more about Israr.

Leave a Reply

Your email address will not be published. Required fields are marked *