Cross Valley Federal Credit Union Data Breach Settlement, Are You Eligible to Claim Up to $5,000? Claim Deadline Is July 18, 2026

The Cross Valley Federal Credit Union data breach settlement covers members whose private information was potentially accessible in the December 2024 cyberattack, and allows eligible individuals to receive up to $5,000 for documented losses — or a flat $50 cash payment with no proof required — by filing before the July 18, 2026 deadline. The unauthorized access compromised sensitive member data including full names, addresses, and Social Security numbers, affecting 17,826 people. Cross Valley Federal Credit Union denies any wrongdoing but agreed to settle to avoid the expense and uncertainty of continued litigation.

Cross Valley FCU Data Breach Settlement Quick Facts

Field	Detail
Settlement Amount	Uncapped reimbursement fund — individual claims up to $5,050
Claim Deadline	July 18, 2026
Who Qualifies	Anyone whose private information was potentially accessible in the December 2024 Data Incident — including all who received a breach notice from CVFCU
Payout Per Person	Up to $5,000 (documented losses) OR ~$50 flat payment (no proof required)
Proof Required	Yes for documented loss claims; No for the $50 alternative cash payment
Settlement Status	Preliminarily Approved — pending Final Approval Hearing August 13, 2026
Administrator	Simpluris, Inc.
Official Website	cvfcudatasettlement.com
Last Updated	May 21, 2026

Current Status of the CVFCU Settlement

• The Court of Common Pleas for Luzerne County, Pennsylvania has granted preliminary approval to this settlement under Case No. 2025-03497.
• Settlement notices were mailed to class members starting May 19, 2026.
• The Final Approval Hearing is scheduled for August 13, 2026 at 9:30 a.m. ET via telephone conference.
• All claim forms, opt-out requests, and objections are due by July 18, 2026 — the same date for all three actions.

What Is the Cross Valley Federal Credit Union Lawsuit About? Chapple v. Cross Valley Federal Credit Union, No. 2025-03497

On December 4, 2024, Cross Valley Federal Credit Union discovered suspicious activity on its network. Its investigation confirmed that sensitive personal information belonging to members may have been compromised on or around November 19, 2024.

Cross Valley immediately took steps to secure its network and contain the intrusion. The credit union’s Chief Experience Officer confirmed the incident was a “data extortion” attack — but that it did not disrupt business operations and that hackers did not gain access to its core banking system.

Even without core banking access, the files that were exposed contained some of the most sensitive data a financial institution holds. Plaintiffs Colleen Chapple and Rich Andrews filed this class action on behalf of all affected members, arguing CVFCU failed to adequately protect private information it was trusted to secure. The case sits in Pennsylvania state court — the Court of Common Pleas for Luzerne County — which is where CVFCU is based, in Wilkes-Barre. Class counsel are Gary M. Klinger of Milberg PLLC and Gerald D. Wells III of Lynch Carpenter LLP. This case follows the same playbook as the Patelco Credit Union data breach settlement and the Fidelity data breach settlement — a financial institution holds sensitive member data, a threat actor extracts it, and members are left exposed to identity theft and credit monitoring concerns they never asked for.

Are You Part of the Cross Valley FCU Class Action?

The class action settlement eligibility test here comes down to one question: did you receive a breach notice from CVFCU?

You may qualify if:

• Your private information was potentially accessible in the December 2024 CVFCU Data Incident
• You received a written breach notification from Cross Valley Federal Credit Union
• You are not excluded under the exceptions below

You are likely NOT included if:

• You never received a breach notice from CVFCU
• You are a CVFCU officer, director, or attorney for the parties
• You were the individual or group responsible for the cyberattack
• You validly opt out of the settlement before July 18, 2026

Approximately 17,826 people were affected by this breach. If you received a notice letter but have misplaced it, contact the Settlement Administrator at (833) 386-6580 or email [email protected] to confirm your status and get your login credentials before the deadline.

Related article: Duke Health MyChart Privacy Settlement, Did You Log In Between 2019 and 2022? Here Is How to Claim Your Payment Before August 16

How Much Can You Get from the Cross Valley FCU Settlement?

You choose one of two cash payment options — you cannot combine them. You also receive free credit monitoring regardless of which option you select.

Option 1 — Documented Losses (up to $5,000, receipts required)

If the breach caused you real, provable financial harm, you can claim up to $5,000 for out-of-pocket expenses incurred between December 4, 2024 and July 18, 2026. Covered expenses include:

• Identity theft or fraud losses
• Fees for credit reports, credit monitoring, or credit freezes
• Costs to replace government-issued IDs
• Postage for correspondence with banks
• Other documented costs directly traceable to the breach

You must submit third-party documentation — bank statements, receipts, invoices. Self-written notes alone are not sufficient, but can supplement other proof.

Option 2 — Alternative Cash Payment (~$50, no proof needed)

If you have no documented losses, or simply prefer a faster payout, you can claim an estimated $50 flat cash payment with no documentation required at all. The final amount may be lower if a large number of class members file — the $50 estimate is based on projected claim volume.

Free Credit Monitoring — Available to Everyone

All class members can enroll in two years of CyEx Financial Shield Complete, which includes:

• Fraud and identity theft monitoring
• Unauthorized financial transaction alerts
• High-risk transaction monitoring
• $1 million in financial fraud insurance
• Access to a live fraud resolution agent

You do not need to file a cash claim to activate the credit monitoring. Check cvfcudatasettlement.com after August 13, 2026 for the activation code process once final approval is granted.

How to File Your Cross Valley FCU Settlement Claim

Step-by-step: how to file a CVFCU settlement claim:

1. Go to the official claim portal at cvfcudatasettlement.com/form/claim
2. Enter your Login and Password from the mailed breach notice — these are required to access the online form
3. Select your payment option: documented losses (up to $5,000) or the $50 alternative cash payment
4. If claiming documented losses, upload supporting documentation — bank statements, receipts, or similar third-party records
5. Review your claim and submit before July 18, 2026
6. Save your confirmation for your records

Prefer to mail your claim? Download the form at cvfcudatasettlement.com and mail it to: CVFCU Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958 — postmarked no later than July 18, 2026.

No login from your notice? Call (833) 386-6580 or email [email protected] before the deadline.

Estimated time to complete: 5–10 minutes for the no-proof option; 15–20 minutes if gathering documentation for a larger documented loss claim.

Cross Valley FCU Settlement Key Deadlines

Milestone	Date
Breach Occurred	On or around November 19, 2024
Breach Discovered	December 4, 2024
Breach Notifications Mailed	March 13, 2025
Settlement Notices Mailed	May 19, 2026
Claim Filing Deadline	July 18, 2026
Opt-Out Deadline	July 18, 2026
Objection Deadline	July 18, 2026
Final Approval Hearing	August 13, 2026 at 9:30 a.m. ET
Credit Monitoring Code Active	After August 13, 2026 — check cvfcudatasettlement.com
Expected Payment Date	TBD — distributed after final court approval and any appeals are resolved

Cross Valley Federal Credit Union Settlement Frequently Asked Questions

Is there a class action lawsuit against Cross Valley Federal Credit Union?

 Yes. Chapple v. Cross Valley Federal Credit Union, Case No. 2025-03497, is a class action pending in the Court of Common Pleas for Luzerne County, Pennsylvania. It alleges CVFCU failed to adequately protect member data that was stolen in a targeted cyberattack discovered December 4, 2024.

Do I need to do anything right now to be included?

 You are automatically included if you received a breach notice from CVFCU — but you must actively file a claim by July 18, 2026 to receive any payment or credit monitoring. Doing nothing means you get no benefit and still give up your right to sue CVFCU separately.

Do I need a lawyer to file a CVFCU settlement claim? 

No. Filing is free and takes under 10 minutes for the no-proof option at cvfcudatasettlement.com. A consumer rights lawyer is only worth consulting if you plan to opt out and pursue an individual lawsuit for losses above $5,000.

What personal information was exposed in the Cross Valley FCU breach?

 The breach potentially exposed full names, addresses, Social Security numbers, and other sensitive information. The specific data exposed varied by individual, and CVFCU sent notification letters confirming what was affected for each person.

When will I receive my Cross Valley FCU settlement payment? 

Payments go out after the Final Approval Hearing on August 13, 2026 and after any appeals are resolved. There is no specific payment date yet — check cvfcudatasettlement.com for updates after the hearing.

Can I file my own lawsuit against Cross Valley FCU instead? 

Yes, but only if you opt out by July 18, 2026. If you stay in the class and accept a payment, you release all related claims against CVFCU. If your documented losses significantly exceed $5,000, talk to a data privacy attorney before the opt-out deadline.

How will I know when the Cross Valley FCU settlement is approved?

 The Settlement Administrator will update cvfcudatasettlement.com after the August 13, 2026 hearing. You can also call (833) 386-6580 or email [email protected] for case updates.

Will my settlement payment affect my taxes?

 Reimbursements for documented out-of-pocket losses are generally not taxable. The no-proof $50 cash payment may be treated as ordinary income depending on your situation. Consult a tax professional if you are unsure how to report it.

Sources & References

• Official Settlement Website: cvfcudatasettlement.com
• Chapple v. Cross Valley Federal Credit Union, Case No. 2025-03497, Court of Common Pleas, Luzerne County, Pennsylvania
• Maine Attorney General Data Breach Notice, March 24, 2025
• SecurityWeek / Federman & Sherwood investigative reports, March–July 2025

Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against the official settlement administrator website (cvfcudatasettlement.com) and court-authorized case records on May 21, 2026. Last Updated: May 21, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.