HEXPOL Exposed Your Social Security Number — Here’s How to Claim Up to $5,250 Before June 15, 2026

A cyberattack on HEXPOL Compounding Americas in December 2024 exposed the names and Social Security numbers of roughly 1,723 current and former employees. Two plaintiffs filed a class action lawsuit alleging HEXPOL failed to protect that data. HEXPOL has agreed to settle without admitting wrongdoing. The claim deadline is June 15, 2026, and eligible individuals can receive up to $5,250 in cash plus three years of free credit monitoring.

Quick Facts

Field	Detail
Settlement Amount	TBD (fund size scales with claims filed)
Claim Deadline	June 15, 2026
Who Qualifies	Current and former U.S.-based HEXPOL employees who received a breach notice
Max Payout Per Person	Up to $5,250 (documented losses + lost time)
No-Proof Cash Option	$70 flat payment
Proof Required	Yes — for documented loss and lost time claims
Settlement Status	Open for Claims
Administrator	Simpluris
Official Website	hexpoldatasettlement.com

Where Things Stand Right Now

• The settlement is open for claims. The court has not yet granted final approval — that hearing is set for August 11, 2026.
• The deadline to opt out or object to the settlement passed on May 15, 2026.
• Payments will go out after the court grants final approval and Simpluris finishes reviewing all submitted claims.

A Hacker Got Into HEXPOL’s Systems and Copied Files With Your SSN

HEXPOL Compounding Americas is a U.S. subsidiary of the Swedish industrial group HEXPOL, which manufactures rubber compounds, gaskets, and polymer-based products for automotive, industrial, and transportation markets.

On December 22, 2024, HEXPOL discovered an unauthorized actor had accessed its network. The company launched a forensic investigation, and by June 25, 2025, confirmed that the attacker had copied files containing personal employee information — specifically names and Social Security numbers belonging to approximately 1,723 individuals.

Related article: Your INIU Power Bank Could Catch Fire and the Company May Have Known

HEXPOL began mailing breach notification letters on July 3, 2025. Two affected individuals, identified in court records as Stovall and Lozner, filed a class action lawsuit (CV-2025-07-3212) in Ohio shortly after. The lawsuit alleges HEXPOL failed to implement reasonable cybersecurity safeguards, leaving sensitive employee data vulnerable to exactly the kind of attack that occurred.

Did You Get a Letter From HEXPOL? Then You’re Almost Certainly In

The settlement class is narrow and specific — this is not a broad consumer breach. It covers people who had a direct employment relationship with HEXPOL.

• You may qualify if you are a current or former HEXPOL employee who lived in the United States at the time of the breach.
• You may qualify if you received a data breach notification letter from HEXPOL on or after July 3, 2025.
• You may qualify if your name and Social Security number were stored in HEXPOL’s network systems.
• You may qualify even if you have not experienced any identity theft or fraud yet — the $70 flat payment requires no proof of harm.
• You may not qualify if you are a customer, vendor, or third party who never had an employment relationship with HEXPOL.

Three Ways to Get Paid — Including $70 With Zero Documentation

The settlement offers three separate benefit tracks. You can only choose one cash track, but everyone can add free credit monitoring on top.

Track 1 — Documented Out-of-Pocket Losses (up to $5,000) This covers real money you lost or spent because of the breach: fraudulent charges on your accounts, fees you paid to freeze or unfreeze your credit on or after July 3, 2025, costs to replace government-issued IDs, postage when contacting banks or credit agencies, and fees tied to tax-related identity theft issues. You must submit receipts, bank statements, or other supporting documents.

Track 2 — Lost Time on Tax-Related Issues (up to $250) If you spent time dealing with tax problems caused by the breach, you can claim up to 10 hours at $25 per hour. You need third-party documentation and a written description of what you did.

Track 3 — $70 Flat Cash Payment (no proof needed) If you do not have documentation or did not experience measurable losses, you can still claim a guaranteed $70 payment. No receipts, no paperwork — just your notice ID and PIN.

Free Credit Monitoring (available to everyone) All class members can enroll in three years of CyEx Financial Shield Pro regardless of which cash track they choose. It monitors for fraud, unauthorized transactions, and high-risk financial activity, and includes $1 million in identity theft insurance.

The maximum anyone can receive combining Track 1 ($5,000) and Track 2 ($250) is $5,250 — before adding the value of credit monitoring.

How to File Your Claim Before the June 15 Deadline

Step 1 — Find your settlement notice letter. HEXPOL mailed notices starting July 3, 2025. The letter contains a unique ID and PIN you need to file online.

Step 2 — Visit the official claim portal at hexpoldatasettlement.com/form/claim.

Step 3 — Enter your ID and PIN, then select your benefit option (documented losses, lost time, or $70 flat payment). Select credit monitoring if you want it.

Step 4 — Upload your documentation if you are claiming documented losses or lost time. Acceptable documents include bank statements, receipts, and written descriptions of tax-related issues.

Step 5 — Choose your payout method. Options include PayPal, Venmo, Zelle, virtual prepaid card, or a paper check.

Step 6 — Submit and save your confirmation number.

Prefer paper? Download the PDF claim form from the settlement website and mail it to: Hexpol Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799. It must be postmarked by June 15, 2026.

Estimated time to complete: 5–10 minutes for the $70 flat payment; 15–20 minutes if uploading documentation.

Key Dates in the HEXPOL Timeline

Milestone	Date
Cyberattack Discovered	December 22, 2024
Forensic Investigation Concluded	June 25, 2025
Breach Notification Letters Mailed	July 3, 2025
Class Action Filed (Stovall v. HEXPOL)	July 2025
Claims Period Opens	TBD
Opt-Out / Objection Deadline	May 15, 2026
Claim Filing Deadline	June 15, 2026
Final Approval Hearing	August 11, 2026
Expected Payment Date	TBD (after August 11, 2026)

Frequently Asked Questions

Do I need a lawyer to file a claim?

 No. You file directly through the official settlement website at hexpoldatasettlement.com. The process takes under 20 minutes. Class counsel is already appointed to represent the class, so you do not need your own attorney to receive settlement benefits.

Is this settlement legitimate? 

Yes. The case — Stovall and Lozner v. HEXPOL Compounding Americas LLC and HEXPOL Holding Inc., case number CV-2025-07-3212 — is a real court proceeding. Simpluris administers the settlement. The official website is hexpoldatasettlement.com. Do not trust any third-party site asking for payment to file your claim — filing is always free.

When will I receive my payment? 

Payments will go out after the court grants final approval at the August 11, 2026 hearing and after Simpluris finishes reviewing all claims. Expect payment several weeks to a few months after that date, depending on appeal activity.

What if I missed the claim deadline?

 If you file after June 15, 2026, the settlement administrator will not accept your claim. The opt-out deadline of May 15, 2026 has already passed, which means you also cannot file your own separate lawsuit over this breach. Contact class counsel if you believe you have exceptional circumstances.

Will this settlement payment affect my taxes?

 Potentially. Settlement payments that compensate for actual financial losses are generally not taxable, but flat cash payments may be. The IRS does not provide a universal rule for class action settlements. Consult a tax professional about your specific situation before filing your taxes for the year you receive payment.

Only 1,723 people are affected — how do I know if I’m really one of them? 

HEXPOL mailed breach notification letters to all identified affected individuals starting July 3, 2025. If you received one of those letters, you are on the class list. If you never worked for HEXPOL or did not receive a letter, you are unlikely to qualify.

I got a letter but I haven’t experienced any fraud yet — should I still file?

 Yes. Social Security numbers do not expire, and identity thieves can hold stolen data for months or years before using it. The $70 flat payment and three years of free credit monitoring cost you nothing to claim and provide real protection going forward.

Sources & References

1. Official settlement website: hexpoldatasettlement.com
2. Maine Attorney General data breach notification filing: maine.gov/agviewer
3. Federman & Sherwood investigation notice (July 9, 2025): federmanlaw.com

Last Updated: April 2, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.