New York School of Interior Design Data Breach Settlement, $50 Cash or Up to $5,500 in Documented Losses, Plus 3 Years of Credit Monitoring

Claim form required • Opt-out and objection deadline: December 28, 2026 • Claim deadline: January 12, 2027 • Final approval hearing: January 27, 2027

People whose personal information was involved in the November 2023 cyberattack on the New York School of Interior Design (NYSID) may be able to claim benefits from a class action settlement in Priti Patel v. New York School of Interior Design, Index No. 156767/2026 (Supreme Court of the State of New York, New York County).

Every eligible class member who files a valid, timely claim can enroll in three years of three-bureau credit monitoring with $1 million in identity theft insurance, and can then choose either a flat $50 cash payment (no proof needed) or reimbursement of documented losses. NYSID denies doing anything wrong, and the court has not decided who is right.

Time-sensitive (as of November 9, 2026): The opt-out and objection deadline is December 28, 2026, about seven weeks away. The claim deadline is January 12, 2027, about nine weeks away. Do not wait. The notice was mailed in October 2026, so check your mail and email for your LoginID and PIN.

Key Takeaways

• You must file a claim. The official site says the only way to receive benefits is a valid, timely Claim Form.
• Credit monitoring is available to every class member, regardless of which cash option you pick.
• Pick one cash path: a $50 alternative payment or documented-loss claims. You cannot get both.
• Documented losses: up to $500 (ordinary losses, with lost time counting toward that cap) and up to $5,000 (extraordinary losses from identity theft or fraud). Because the FAQ lets you claim extraordinary losses, ordinary losses and/or lost time, the combined maximum appears to be up to $5,500. The settlement agreement controls.
• No settlement fund to share. Fees ($265,000 requested) and the $5,000 service award are paid separately by NYSID, so they do not reduce your benefits.
• Doing nothing means no benefits and you give up the right to sue NYSID over the covered claims.
• Payments come only after final approval and the resolution of any appeals.

NYSID Data Breach Settlement: Quick Facts

Detail	Information
Defendant	New York School of Interior Design (NYSID)
Class representative	Priti Patel
Lawsuit	Priti Patel v. New York School of Interior Design
Index number	156767/2026
Court	Supreme Court of the State of New York, New York County
Incident	Targeted cyberattack, November 2023
Settlement type	Claims-made (no shared cash fund); fees paid separately by NYSID
Credit monitoring	3 years, three-bureau, $1 million identity theft insurance
Ordinary losses	Up to $500 (includes up to $100 for lost time)
Extraordinary losses	Up to $5,000
Alternative cash payment	$50, no proof required
Claim form required?	Yes
Claim deadline	January 12, 2027 (online, or postmarked)
Opt-out deadline	December 28, 2026 (postmarked or emailed)
Objection deadline	December 28, 2026 (filed with the court)
Final approval hearing	January 27, 2027, 9:30 a.m. Eastern Time, Room 418, 60 Centre St., New York, NY 10007
Class counsel	Strauss Borrelli PLLC
Settlement administrator	Simpluris
Administrator phone / email	(833) 417-4986 / [email protected]
Status	Preliminarily approved (order filed September 14, 2026); final approval pending

What Happened in the NYSID Data Breach?

According to the settlement materials and public reporting on the incident:

• November 2–26, 2023: An unauthorized actor accessed certain NYSID files and systems.
• November 27, 2023: NYSID became aware of suspicious activity on its network.
• June 17, 2024: NYSID completed its review of potentially affected individuals (as reported).
• July 2024: NYSID began sending breach notices; approximately 18,491 people were notified (as reported).

NYSID is a private, nonprofit college in New York City. The settlement website says the files accessed may have contained, depending on the person:

• Social Security numbers
• Driver’s license or state ID numbers
• Passport numbers
• Financial account and payment card information
• Health insurance and medical information
• Taxpayer identification numbers
• Student identification numbers
• Biometric information

The affected information varies by person. Your breach notice letter lists what was involved for you.

Why Was NYSID Sued?

Data breach class actions generally allege that an organization failed to protect sensitive information adequately. The settlement site states the lawsuit alleges that certain files containing private information were accessed during the November 2023 cyberattack. NYSID denies any wrongdoing. The parties settled to avoid the costs, risks and uncertainty of continued litigation. The court has not ruled on the merits.

Which Laws Apply? Data Breach and Privacy Law, Explained

The settlement notice does not list each legal theory, so the points below are general background, not statements about what the complaint pleaded. Read the complaint on the settlement website if you want the specific claims.

Law	Why it matters
New York General Business Law § 899-aa (breach notification)	Requires covered entities to notify affected New Yorkers (and certain state agencies) after a breach of private information
New York General Business Law § 899-bb (SHIELD Act)	Requires businesses holding New Yorkers’ private information to maintain reasonable administrative, technical and physical safeguards
New York CPLR Article 9	Governs class actions in New York state court. CPLR 908 says a class action cannot be settled or dismissed without court approval, and notice must go to class members. That is why the January 27 hearing matters
FERPA, 20 U.S.C. § 1232g	Federal law protecting student education records, enforced by the U.S. Department of Education. It generally does not let individuals sue schools directly
Gramm-Leach-Bliley Act and the FTC Safeguards Rule (16 C.F.R. Part 314)	Colleges that handle student financial aid are generally treated as subject to financial-data safeguarding requirements
Fair Credit Reporting Act, 15 U.S.C. § 1681c-1	Gives consumers the right to a free credit freeze and fraud alerts
State laws elsewhere	Because the class covers U.S. residents nationwide, other states’ breach-notification and consumer-protection laws may also be relevant

Practical tip: Because federal law makes credit freezes free, you generally should not pay a fee for one. A real fee you incurred (for example, a paid credit report or monitoring subscription) might be claimable, but check the claim form’s instructions first.

Who Qualifies for the NYSID Settlement?

The court defined the class as:

“All individuals residing in the United States whose PII was impacted in the Data Incident affecting Defendant in or around November 2023, including all those individuals who received notice of the Data Incident.”

(“PII” means personally identifiable information.)

You may qualify if you:

• Received a breach notice from NYSID, or
• Received the settlement notice, or
• Believe your information was involved in the November 2023 incident

The class is not limited to current students. Former students, applicants, employees and others whose information was impacted can be included. If you got a notice with a LoginID and PIN, NYSID’s records indicate you are a potential class member.

Who Is Excluded?

1. NYSID and its officers, directors and related companies
2. Anyone who validly opts out
3. The judge in the case and the judge’s family and staff
4. Anyone who perpetrated the data incident

What Benefits Does the Settlement Provide?

All class members who submit a valid, timely claim can enroll in credit monitoring and then choose one cash path:

• Path A: Claim documented losses (ordinary, extraordinary and/or lost time), or
• Path B: Take the $50 alternative cash payment

You cannot take the $50 payment and also get reimbursement for losses or lost time. Credit monitoring is available either way.

1. Credit Monitoring (All Class Members)

• Three years of three-bureau credit monitoring
• $1 million in financial fraud insurance
• Monitoring for fraud or identity theft, unauthorized financial transactions, and personal information associated with high-risk transactions
• Access to a fraud resolution agent if something suspicious happens

2. Ordinary Losses: Up to $500

For actual, documented, out-of-pocket expenses caused by the data incident, such as:

• Fees for credit reports, credit monitoring, or freezing and unfreezing your credit
• The cost to replace IDs
• Postage to contact banks by mail

Rules:

• The loss must have occurred between November 2, 2023 and January 12, 2027.
• You need proof, such as receipts. Self-prepared notes may help explain other proof, but notes alone are not enough.
• Your proof or notes should show the expense was because of the data incident.
• You cannot claim expenses already reimbursed by a third party.

3. Lost Time: Up to $100

• Up to 4 hours at $25 per hour
• For time spent on tasks related to the incident, such as changing passwords, investigating suspicious account activity, or researching the incident
• Counts toward the $500 ordinary-loss cap

4. Extraordinary Losses: Up to $5,000

For documented money lost to identity theft or fraud. You must show that:

• The theft or fraud was probably caused by the data incident
• The loss is not already covered under Ordinary Losses
• You tried to prevent or recover the loss (for example, by using insurance you already have)

The same November 2, 2023 – January 12, 2027 window, proof requirements and no-double-reimbursement rule apply.

5. Alternative Cash Payment: $50

A one-time $50 payment with no proof or explanation required. It is available instead of the other cash options.

Which Option Is Better?

• Choose the $50 payment if you did not have out-of-pocket costs or fraud losses, or you do not have documents.
• Choose documented losses if you spent money or lost money and have records showing the incident caused it.

Remember that the choice is yours and cannot be changed by combining the two paths. Submit only truthful information.

Is There a Settlement Fund? Do Fees Reduce My Payment?

This is a claims-made settlement. The official FAQ does not describe a shared cash fund that gets divided among claimants, and public summaries note it does not describe a pro rata reduction. Class Counsel will ask the court to approve:

• $265,000 in attorneys’ fees and litigation costs
• A $5,000 service award for Priti Patel

Both are paid by NYSID separately, so according to the FAQ they do not come out of class members’ benefits. The court decides the final amounts. Class members do not pay Class Counsel directly.

Do You Need to File a Claim?

Yes. Per the official website, the only way to receive benefits or payments is to submit a valid and timely Claim Form.

How to File Online (Fastest)

1. Go to the official settlement website.
2. Open the Claim Form.
3. Enter the LoginID and PIN printed on your notice.
4. Choose credit monitoring and either documented losses or the $50 payment.
5. Upload receipts or other proof if you are claiming losses.
6. Submit by January 12, 2027 and keep your confirmation.

Lost Your LoginID or PIN?

Email [email protected] with your full name and mailing address to request them.

How to File by Mail

Download the paper Claim Form, complete and sign it, attach supporting documents, and mail it postmarked no later than January 12, 2027 to:

NYSID Data Incident Settlement c/o Settlement Administrator P.O. Box 25226 Santa Ana, CA 92799

Can You Opt Out?

Yes, by December 28, 2026. If you opt out, you receive no settlement benefits or payment, but you keep any right to sue NYSID on your own over the legal issues in the case (at your own expense if you hire a lawyer).

A valid Request for Exclusion must include:

1. The case name: Priti Patel v. New York School of Interior Design, Index No. 156767/2026, Supreme Court for New York County, New York
2. Your full name, mailing address, telephone number and email address
3. Your personal signature
4. The words “Request for Exclusion” or a clear, similar statement that you do not want to participate

You may exclude only yourself, not anyone else. Send it to:

NYSID Data Incident Settlement ATTN: Exclusion Request P.O. Box 25226 Santa Ana, CA 92799 Email: [email protected]

It must be postmarked or emailed by December 28, 2026.

Do not file a claim if you opt out. Opting out and claiming benefits are incompatible, and if you opt out you also cannot object.

Can You Object to the Settlement?

Yes, if you do not opt out. If you object, you may still file a claim. To be valid, your objection must include all of the following:

1. The case name and index number (Priti Patel v. New York School of Interior Design, Index No. 156767/2026)
2. Your full name, mailing address, telephone number and email address
3. A clear description of all your reasons for objecting, with any supporting documents or legal support
4. If you hired a lawyer: the lawyer’s name, bar number and contact information
5. Whether you or your lawyer want to speak at the hearing
6. Proof that you are a class member (such as your notice)
7. Your signature (or your lawyer’s)

You must file the complete objection with the Clerk of the Court by December 28, 2026:

Clerk of the Court 60 Centre St. New York, NY 10007

You must also send a copy to the Settlement Administrator (NYSID Data Incident Settlement, ATTN: Objections, P.O. Box 25226, Santa Ana, CA 92799), to Class Counsel, and to counsel for NYSID. The addresses for the lawyers are in the official Notice.

Note: Unlike the opt-out, which can be emailed, an objection must be filed with the court by the deadline.

What Happens If You Do Nothing?

If you do nothing:

• You receive no benefits and no payment, including no credit monitoring.
• You remain in the class and, unless you opt out, give up the right to sue, continue to sue, or join another lawsuit against NYSID over the claims resolved by the settlement.

The “Releases” section of the Settlement Agreement (Paragraphs 68–71) describes exactly which claims you release. Read it before deciding.

When Is the Final Approval Hearing?

Detail	Information
Date	January 27, 2027
Time	9:30 a.m. Eastern Time
Place	Supreme Court for New York County, Room 418, 60 Centre St., New York, NY 10007

The court will decide whether to approve the settlement, how much to award Class Counsel, and whether to award the service award. It will also consider objections. The date and time may change without further notice, so check the settlement website. You do not have to attend, and a timely objection is considered even if you do not appear. Do not contact the Court or the Clerk about the settlement.

When Will Benefits Be Issued?

No payment date has been set. Benefits are distributed only if the court grants final approval and after any appeals are resolved. The FAQ says it does not know whether appeals will be filed or how long they would take.

Protect Yourself After a Data Breach

Whether or not you claim, consider these steps, especially because Social Security numbers and government IDs may have been involved:

1. Freeze your credit at Equifax, Experian and TransUnion. It is free and prevents new accounts from being opened in your name.
2. Review your credit reports for free at AnnualCreditReport.com.
3. Watch bank and card statements and set up account alerts.
4. Request an IRS Identity Protection PIN if your Social Security number was exposed, to reduce tax-refund fraud.
5. Report identity theft at IdentityTheft.gov (Federal Trade Commission) and keep copies of every report, since these records can support an Extraordinary Loss claim.
6. Be wary of phishing that refers to the breach or the settlement. The administrator will not ask for your Social Security number or bank password by email or phone.
7. Keep receipts for anything you spend responding to the incident.

Is the NYSID Settlement Legitimate?

Yes. A court authorized the notice, and Simpluris is the court-approved administrator. There is no fee to file a claim. Only use the official website, nysiddatasettlement.com, and the contacts below.

Contact the Settlement Administrator

Simpluris Phone: (833) 417-4986 Email: [email protected] Mail: NYSID Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

Class Counsel: Strauss Borrelli PLLC

Official Resources

• Official Settlement Website
• Notice of Class Action Settlement (PDF)
• Settlement Agreement (PDF)
• Claim Form (PDF)
• Online Claim Form
• Frequently Asked Questions
• Important Documents
• Important Dates

Frequently Asked Questions

1. Is the NYSID data breach settlement real?

Yes. It is documented on the official Simpluris settlement website for Priti Patel v. New York School of Interior Design, Index No. 156767/2026. It has preliminary approval; final approval is pending.

2. Who qualifies?

All individuals residing in the United States whose personally identifiable information was impacted in the November 2023 NYSID data incident, including everyone who received notice of it.

3. Do I have to be a current or former NYSID student?

No. The class is defined by whether your information was impacted, not by student status.

4. Do I need to file a claim?

Yes. A valid, timely Claim Form is the only way to receive benefits.

5. What is the claim deadline?

January 12, 2027 (online, or postmarked if mailed).

6. How much can I get?

Credit monitoring for all, plus either $50 cash or documented losses of up to $500 (ordinary, including up to $100 lost time) and up to $5,000 (extraordinary).

7. Can I get both the $50 and reimbursement for losses?

No. You choose one or the other, but you can claim credit monitoring either way.

8. What proof do I need?

Receipts or similar records for losses. Notes alone are not enough. The $50 payment needs no proof.

9. What if I lost my LoginID and PIN?

Email [email protected] with your full name and mailing address.

10. Can I get reimbursed for something my bank already refunded?

No. You cannot claim expenses already reimbursed by a third party.

11. What period do losses have to fall in?

November 2, 2023 through January 12, 2027.

12. Do attorneys’ fees reduce my payment?

According to the FAQ, no. NYSID pays the $265,000 fee request and $5,000 service award separately.

13. How do I opt out?

Send a signed Request for Exclusion with the required details, postmarked or emailed by December 28, 2026.

14. How do I object?

File a written objection with the Clerk of the Court by December 28, 2026, and send copies to the administrator, Class Counsel and NYSID’s counsel.

15. What happens if I do nothing?

You receive nothing and give up the right to sue over the released claims.

16. When is the final approval hearing?

January 27, 2027 at 9:30 a.m. Eastern Time, Room 418, 60 Centre St., New York.

17. When will I get paid?

After final approval and any appeals. No date is set.

18. Did NYSID admit wrongdoing?

No. NYSID denies any wrongdoing, and the court has not decided who is right.

19. Is the payment taxable?

The settlement materials do not give tax advice. Talk to a qualified tax professional about your situation.

20. Who do I contact with questions?

The administrator at (833) 417-4986 or [email protected]. Do not contact the court or the Clerk.

Final Takeaway: What Should Affected People Do Before January 12?

If you were notified of the November 2023 NYSID data breach, you may qualify for free three-year credit monitoring and either a $50 payment or reimbursement of documented losses.

1. Find your notice and your LoginID and PIN, or email the administrator to get them.
2. File your claim by January 12, 2027. Decide whether the $50 payment or documented losses fits your situation, and gather receipts if you claim losses.
3. Only if you want to sue NYSID yourself, opt out by December 28, 2026, and do not file a claim.
4. Protect yourself now with a free credit freeze and regular monitoring.

The settlement is not final, and payments will not be made until the court grants final approval and any appeals are resolved.

Official settlement website: nysiddatasettlement.com

Researched and written by Israr Ahmad, Legal Content Researcher, AllAboutLawyer.com. This article is for general informational purposes only and is not legal, tax or financial advice. AllAboutLawyer.com is an independent legal-information website and is not a law firm, is not affiliated with the New York School of Interior Design, the court, Class Counsel or the Settlement Administrator, and does not create an attorney-client relationship. Settlement terms, deadlines and hearing details can change. The official notice, Settlement Agreement and court orders control eligibility, deadlines, benefits and your legal rights. If you have legal questions, consult a licensed attorney.

Sources: Official settlement website and FAQ (nysiddatasettlement.com); Notice of Class Action Settlement, Settlement Agreement and Claim Form (Simpluris); Patel v. New York School of Interior Design, Index No. 156767/2026 (Sup. Ct. N.Y. Cnty.), preliminary approval order (NYSCEF Doc. No. 20, filed Sept. 14, 2026); NYSID breach disclosures as reported; N.Y. Gen. Bus. Law §§ 899-aa, 899-bb; N.Y. CPLR art. 9 (incl. § 908); 20 U.S.C. § 1232g; 16 C.F.R. pt. 314; 15 U.S.C. § 1681c-1.