Olinsky & Associates Data Breach Settlement, Check If You Qualify — Leon-Roman v. Olinsky & Associates, PLLC, No. 5:25-cv-000462-ECC-CBF

There’s a $40 check heading to your mailbox — automatically — if Olinsky & Associates, PLLC lost your data in a January 2025 cyberattack. No form. No proof needed. Olinsky agreed to pay every affected person $40 plus three years of credit monitoring. You have until October 26, 2026, to opt out or object if you don’t want in.

Olinsky & Associates Data Breach Settlement — Key Facts

Settlement Amount	$40.00 cash payment per Class Member (automatic); total fund value UNVERIFIED — not disclosed
Claim Deadline	None. No claim required.
Who Qualifies	Anyone Olinsky identified as impacted by the January 28, 2025 Data Incident, including everyone sent notice
Estimated Payout	$40.00 flat, plus 3 years of credit monitoring
Proof Required (Yes/No)	No
Settlement Status	Preliminarily approved; awaiting final approval hearing
Court & Case Number	U.S. District Court, N.D.N.Y., No. 5:25-cv-000462-ECC-CBF
Law Alleged	Negligence, breach of implied contract, unjust enrichment
Administrator	Simpluris
Official Claim Site	olinskydatasettlement.com
Last Updated	September 18, 2026

Who Is Olinsky & Associates and Why Are They Being Sued for a Data Breach?

Olinsky & Associates, PLLC is a law firm based in Syracuse, New York. Law firms hold exactly the kind of files that make a breach expensive for the people caught up in it — Social Security numbers, medical records, and financial details gathered while representing clients. That’s the same category of data now exposed after the firm’s January 2025 cyberattack.

What Did Olinsky Do to Class Members Between January and March 2025?

On or around January 28, 2025, Olinsky discovered unauthorized access to its computer systems. The firm’s investigation found that names, addresses, Social Security numbers, driver’s license numbers, financial account details, medical records, and health insurance information for roughly 526 people — including named plaintiff Felipe Leon-Roman — may have been exposed. Some numbers were truncated. Others weren’t.

Notice letters went out starting around March 11, 2025. Leon-Roman then sued, claiming Olinsky was negligent, breached an implied duty to protect client data, and was unjustly enriched by skipping on security spending. Olinsky isn’t backing down on liability — the firm “denies any wrongdoing and would assert various defenses” if the case went to trial. That’s boilerplate in almost every breach settlement, and it doesn’t mean the underlying incident wasn’t real.

If your health records were part of what leaked, it’s worth reading through what to do if you’re a victim of medical identity theft — a $40 check doesn’t undo the exposure itself.

Who Qualifies for the Olinsky & Associates Data Breach Settlement?

Here’s exactly how to know if you’re covered, and how to check your Olinsky data breach settlement eligibility without digging through the court file yourself.

• Anyone Olinsky identified as impacted by the January 2025 Data Incident
• Everyone who received a notice letter starting in March 2025
• People whose Social Security number, driver’s license, or medical records showed up in Olinsky’s internal review
• Felipe Leon-Roman and the roughly 526 other individuals the firm’s investigation flagged

Not included: Olinsky itself, its officers, directors, employees, and any judge assigned to the case, along with their immediate families.

Olinsky Data Breach Class Members Outside New York — Are You Still Covered?

Yes. This is a federal case, and the class isn’t limited by state. If Olinsky’s records show you were affected, your location doesn’t matter — you’re covered whether you live in Syracuse or across the country.

Not sure if you qualify for the Olinsky & Associates data breach settlement? A free consultation with a data privacy attorney can help before the October 26, 2026 deadline.

How Much Can Olinsky & Associates Data Breach Settlement Class Members Get? $40 Per Person

Every Class Member who doesn’t opt out gets a $40.00 check, full stop — no tiers, no proof of loss required. You’ll also get an enrollment code for three years of CyEx Financial Shield Complete, which includes $1,000,000 in identity theft insurance and real-time account monitoring. Want your $40 sent digitally instead of by mail? Olinsky’s payment election form lets you choose Zelle, PayPal, Venmo, Mastercard, or ACH.

Payment goes out after the December 2, 2026 final approval hearing, and after any appeals wrap up. $40 falls well under the $600 threshold where the IRS expects a 1099, so that’s one thing you probably don’t need to worry about here.

Here’s something most articles on cases like this skip: Class Counsel is asking the court for $55,000 in fees and a $2,000 service award for Leon-Roman. Those come from Olinsky directly — separately from the money going to the class. Your $40 isn’t getting carved up to pay the lawyers first. That’s not how most common-fund settlements work, and it’s worth knowing.

What Do Olinsky Settlement Class Members Need to Do Right Now?

1. Nothing, if you’re fine with the default. Your $40 check and credit monitoring code arrive automatically.
2. Want the money sent digitally instead of mailed? Fill out the payment election form.
3. Lost your credit monitoring enrollment code? Request a replacement through the enrollment instructions page.
4. Activate your CyEx Financial Shield Complete code once the court grants final approval.
5. Watch your mail and email for updates from the Settlement Administrator.

Should Olinsky Class Members Opt Out or Object Before October 26, 2026?

What Opting Out of the Olinsky Settlement Actually Means

Opting out means you get no payment and no credit monitoring — but you keep the right to sue Olinsky yourself over this breach. Most people shouldn’t opt out without talking to a lawyer first. The deadline to exclude yourself is October 26, 2026.

How to Object to the Olinsky Settlement

Objecting is different. You stay in the class, but you tell the court in writing why you don’t like the deal. Your objection has to include your contact information, proof you’re a Class Member, and your specific grounds — mailed to the Settlement Administrator, postmarked by October 26, 2026.

Talk to a class action lawsuit attorney before October 26, 2026, if you’re considering either option.

Olinsky & Associates Data Breach Settlement — Key Dates, 2026

Milestone	Date
Notice Date	September 11, 2026
Claim Filing Deadline	None — no claim required
Opt-Out Deadline	October 26, 2026
Objection Deadline	October 26, 2026
Final Approval Hearing	December 2, 2026
Expected Payment Date	UNVERIFIED — administrator hasn’t published a specific date; payment follows final approval and any appeals

For context, another small breach settlement worth comparing is the Muscatine Power and Water data breach settlement — a similarly modest case with a similarly modest payout, just structured with a claims process instead of an automatic one.

Olinsky & Associates Data Breach — Frequently Asked Questions, No. 5:25-cv-000462-ECC-CBF

Do I need a lawyer to get my Olinsky settlement payment? 

No. The $40 payment and credit monitoring code are automatic if you don’t opt out. You don’t need to file anything or hire anyone to receive them.

Is the Olinsky & Associates settlement legitimate?

 Yes. It’s administered by Simpluris under a settlement reached in the U.S. District Court for the Northern District of New York and still requires final court approval.

When will Olinsky settlement payments be sent? 

After the December 2, 2026 final approval hearing, and after any appeals are resolved. No exact payment date has been published yet.

What if I want to opt out after the deadline?

 You can’t. Requests for exclusion must be postmarked by October 26, 2026. After that, you’re automatically part of the settlement.

Will my Olinsky settlement payment go on a 1099? 

Unlikely. The IRS 1099 reporting threshold is $600, and this payment is $40.

Do I need to prove I was harmed to get the $40?

 No. Unlike settlements that require documented losses, this one pays every Class Member the same $40 with no proof required.

What did the lawsuit actually accuse Olinsky of doing?

 The complaint alleges negligence, breach of implied contract, and unjust enrichment tied to the firm’s handling of client data before the January 2025 breach.

Sources Used in This Olinsky & Associates Article

• Official Settlement Website — Leon-Roman v. Olinsky & Associates, PLLC, Home page: https://olinskydatasettlement.com/
• Official Settlement Website — FAQ: https://olinskydatasettlement.com/faq/
• Settlement Administrator (Simpluris) — Long Form Notice: https://cw.simpluris.com/docs/public/downloads/OLO1/LONG_FORM_NOTICE
• Settlement Administrator (Simpluris) — Settlement Agreement: https://cw.simpluris.com/docs/public/downloads/OLO1/SETTLEMENT_AGREEMENT

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. All facts verified against the official settlement website and Simpluris-administered notice on September 18, 2026. Last Updated: September 18, 2026.

This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.