$2.39M Union Bank and Trust MOVEit Data Breach Settlement, Check If Your Personal Data Qualifies for a Cash Payment

Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against the official Long Form Notice and Claim Form from UBTDataSettlement.com on April 28, 2026. Last Updated: April 28, 2026

The Union Bank and Trust Company MOVEit Data Breach Settlement is a $2,389,976 class action settlement where eligible UBT customers whose personally identifiable information was exposed in the May 2023 MOVEit security incident can receive reimbursement of up to $10,000 in documented losses, a flat $100 cash payment, or two years of free credit monitoring — by filing a claim before July 21, 2026. Cybercriminals exploited a vulnerability in the MOVEit Transfer file-transfer software between May 27 and May 31, 2023, gaining unauthorized access to PII that UBT stored within that system. The case is currently pending final approval before Judge Allison D. Burroughs of the United States District Court for the District of Massachusetts.

Quick Facts: UBT MOVEit Data Breach Settlement

Field	Detail
Settlement Amount	$2,389,976
Claim Deadline	July 21, 2026 (online or postmarked)
Who Qualifies	All U.S. persons whose PII was included in files affected by the UBT MOVEit Security Incident
Payout Per Person	Up to $2,500 ordinary losses; up to $10,000 extraordinary losses; or $100 flat cash payment (subject to pro rata adjustment)
Proof Required	Yes — for loss reimbursement tiers; no proof required for the $100 flat payment
Settlement Status	Preliminarily approved — Final Approval Hearing set for August 6, 2026
Administrator	RG/2 Claims Administration LLC, P.O. Box 59479, Philadelphia, PA 19102-9479 — 800-464-3215
Official Website	UBTDataSettlement.com
Last Updated	April 28, 2026

Current Status of the UBT MOVEit Settlement

• The settlement has been preliminarily approved by the court. The Final Approval Hearing is scheduled for August 6, 2026, at 9:30 a.m. in Courtroom 17 of the John Joseph Moakley U.S. Courthouse, 1 Courthouse Way, Boston, Massachusetts.
• The opt-out and objection deadline is June 22, 2026. If you want to preserve your right to sue UBT independently, you must opt out by that date via mailed letter to RG/2 Claims Administration LLC.
• Payments will go out after the court grants final approval and resolves any appeals — expect several months after the August 6 hearing before checks or electronic payments arrive.

What Is the Union Bank and Trust Lawsuit About? Scott et al. v. Union Bank & Trust Co. et al., Case No. 1:23-cv-12436-ADB (D. Mass.)

Between May 27 and May 31, 2023, a group of cybercriminals exploited a known vulnerability in MOVEit Transfer — a third-party file-transfer software made by Progress Software Corporation — and gained unauthorized access to sensitive data stored by dozens of organizations that used the software, including Union Bank and Trust Company. The plaintiffs, who filed their case in 2023, allege that UBT was negligent in its data security practices and failed to adequately protect the personally identifiable information it entrusted to the MOVEit platform. UBT denies all allegations of wrongdoing and disputes that it would be found liable if the case went to trial.

The case has been transferred to and coordinated within the larger multi-district litigation, In re: MOVEit Customer Data Security Breach Litigation, MDL No. 1:23-md-03083-ABD, also before Judge Burroughs in the District of Massachusetts. This MDL consolidates claims from hundreds of organizations whose customers were affected by the same MOVEit vulnerability. Importantly, claims against Progress Software Corporation — the company that made MOVEit — have not been resolved and that litigation continues separately.

If you received a data breach notification letter from Union Bank and Trust telling you your PII may have been compromised in the May 2023 incident, this case directly affects you. Customers whose Social Security numbers, financial account information, dates of birth, or other sensitive identifiers were exposed faced real risks of identity theft and financial fraud — and this settlement exists to compensate them for that exposure. For context on how MOVEit affected other financial institution customers, see our coverage of the Cadence Bank $5.25M MOVEit data breach settlement, which involves the identical software vulnerability and a nearly identical benefit structure.

Who Qualifies for the UBT MOVEit Data Breach Settlement?

If you want to know whether the UBT data breach compensation program covers your situation, here is how to figure it out quickly.

You may qualify if:

• You are a U.S. person (individual or entity) whose personally identifiable information was included in the files affected by the UBT MOVEit Security Incident between May 27 and May 31, 2023
• You received a written notification from Union Bank and Trust Company informing you that your PII may have been compromised in the incident
• You suffered a recognized loss — financial, time-based, or identity-related — as a result of the breach, or you simply want to claim the no-documentation $100 flat payment or the two years of free credit monitoring
• You are a lawful successor, custodian, trustee, or financial professional filing on behalf of individuals whose data was compromised — you may file on their behalf and must allocate any payment received to those individuals

You do NOT qualify if:

• You did not receive a breach notification from UBT and have no connection to the May 2023 MOVEit incident
• You are a UBT officer, director, employee, or immediate family member of a presiding judge in this case
• You submit a valid opt-out request postmarked by June 22, 2026 — opting out removes you from the settlement entirely

If you are unsure whether you are included, call RG/2 Claims Administration LLC at 800-464-3215 or visit UBTDataSettlement.com for a free eligibility check. You do not need a consumer rights lawyer to determine whether you qualify.

How Much Can You Get from the UBT MOVEit Settlement?

The $2,389,976 fund covers three separate benefit tiers — and you can only select one cash payment option, though you can combine it with the free credit monitoring claim.

Tier 1 — Ordinary Losses (up to $2,500 with documentation): This covers real, out-of-pocket expenses you incurred because of the breach — bank fees, long-distance phone calls, postage, local travel costs, and cell or data charges. It also covers up to four hours of lost time at $25 per hour (maximum $100 total for time). You must provide documentation: receipts, bank or credit card statements, invoices, or phone records. Personal statements alone will not work, but they can supplement other records.

Tier 2 — Extraordinary Losses (up to $10,000 with documentation): This tier covers serious, proven monetary losses — identity theft lawsuit-level harm like unauthorized account withdrawals, fraudulent charges, and costs to restore your credit or financial identity. To qualify, the loss must have been an actual, documented, unreimbursed monetary harm more likely than not caused by the breach, occurring between May 31, 2023, and the close of the claims period. The documentation bar here is higher — you need clear third-party records showing the amount, date, and connection to the UBT breach.

Tier 3 — Alternative Cash Payment ($100, no documentation required): If you do not want to gather documents or cannot prove specific losses, you can claim a flat $100 payment. No receipts, no proof — just fill out the claim form and select this option. This amount is subject to pro rata adjustment. If total claims exceed the net fund after fees and costs are deducted, payments drop proportionally. If fewer people claim than expected, your $100 could increase — up to a maximum of $1,000.

Credit Monitoring (available to all class members in addition to any cash tier): Every eligible class member can also claim two years of three-bureau credit monitoring through the settlement, regardless of which cash tier they pick. The package includes dark web monitoring, $1 million in identity theft insurance, real-time monitoring with Equifax, Experian, and TransUnion, and access to fraud resolution specialists. This is the kind of personal data stolen settlement benefit that costs $200 or more per year if you buy it independently — claim it even if your losses were minimal.

Step-by-Step: How to File Your UBT Data Breach Settlement Claim

Filing your UBT MOVEit claim is straightforward. Have your breach notification letter and brokerage or bank records ready before you start.

Step 1 — Go to the official settlement website: UBTDataSettlement.com. Use the Claimant ID and password printed on your breach notification letter to log into the online claim portal.

Step 2 — Enter your personal details — name, address, and contact information — and confirm your identity as a settlement class member.

Step 3 — Select your claim type: Ordinary Losses (up to $2,500), Extraordinary Losses (up to $10,000), or the Alternative Cash Payment ($100). You may also add the free credit monitoring to any of these options.

Step 4 — If claiming Ordinary or Extraordinary Losses, upload your supporting documentation. Acceptable records include credit card or bank statements, emails, invoices, receipts, telephone records, or photographs of the same. Personal statements alone do not count as documentation — pair them with a third-party record.

Step 5 — Review your submission carefully. Note the current USPS postmark rule change: as of December 24, 2025, USPS postmarks now reflect when mail reaches an automated processing facility, not when it is dropped off. If mailing a paper form, submit it well ahead of the July 21 deadline to avoid a late-postmark situation. Filing online eliminates this risk entirely.

Step 6 — Submit your claim and save your confirmation. Keep a copy of everything you submitted in case the administrator follows up with questions.

Estimated time to complete: 10–15 minutes online with documentation ready; longer if you need to locate old bank or credit card records.

If you prefer paper, download the claim form from UBTDataSettlement.com and mail it to: Union Bank and Trust Company Data Breach Settlement, c/o RG/2 Claims Administration LLC, P.O. Box 59479, Philadelphia, PA 19102-9479.

Important Deadlines: UBT MOVEit Data Breach Settlement

Milestone	Date
MOVEit Security Incident	May 27–31, 2023
Lawsuit Filed	2023 — transferred to MDL
Preliminary Approval Granted	TBD — pending confirmation in court docket
Opt-Out Deadline	June 22, 2026 (postmarked)
Objection Deadline	June 22, 2026 (filed or postmarked)
Attorneys’ Fee Application Filed	No later than June 1, 2026
Motion for Final Approval Filed	July 7, 2026
Claim Filing Deadline	July 21, 2026 (online by 11:59 p.m.; mailed claims postmarked by July 21)
Final Approval Hearing	August 6, 2026, at 9:30 a.m., Courtroom 17, Boston, MA
Expected Payment Date	TBD — after final approval and resolution of any appeals

Frequently Asked Questions

Is there a class action lawsuit against Union Bank and Trust?

Yes. The case is Scott et al. v. Union Bank & Trust Co. et al., Case No. 1:23-cv-12436-ADB, filed in the United States District Court for the District of Massachusetts and coordinated within the broader MOVEit MDL. UBT agreed to pay $2,389,976 to resolve claims that it negligently protected customer PII stored in the MOVEit file-transfer system.

Do I need to do anything right now to be included?

Yes — unlike some class actions where class members receive money automatically, you must actively file a claim by July 21, 2026, to receive any payment or credit monitoring from this settlement. Doing nothing means you receive no payment and waive your right to sue UBT separately for the same claims.

How much will I get from the UBT settlement?

It depends on which tier you choose. The flat $100 alternative cash payment requires no documentation and is the fastest option. Documented ordinary losses can reach $2,500 and extraordinary losses can reach $10,000, but you need supporting records for both. The $100 flat payment may increase up to $1,000 if total claims are lower than expected — or decrease if claims exceed the net fund.

Do I need a lawyer to file a claim?

No. Class Counsel — including attorneys from Berger Montague, Lynch Carpenter LLP, Cohen Milstein Sellers & Toll PLLC, and other firms — represents the class at no charge to you. You do not need to hire your own attorney to file a claim or receive a payment. A free legal consultation may be worth pursuing only if your losses were substantial and you are considering opting out to file an individual claim.

When will the UBT settlement pay out?

Payments will be issued after Judge Allison D. Burroughs grants final approval at the August 6, 2026 hearing, and after any appeals are resolved. If no one appeals, expect payments to arrive several months after August 2026. Check UBTDataSettlement.com for updates after the hearing.

What if I opt out of the UBT settlement?

Opting out by June 22, 2026, preserves your right to file your own lawsuit against UBT for the same claims. You give up all settlement benefits — including the cash payment and free credit monitoring — and pursue recovery independently at your own expense. You cannot opt out and also object; the two are mutually exclusive.

Will my settlement payment affect my taxes?

Possibly. The tax treatment of lawsuit settlement checks depends on the nature of the payment — reimbursements for documented financial losses are often treated differently than general damages. This settlement does not constitute legal advice, and Anthropic is not your tax professional. Speak with a CPA or tax advisor about how to report any payment you receive.

What happened to the claims against Progress Software, the maker of MOVEit?

Claims against Progress Software Corporation — the company that licensed the MOVEit Transfer software — are not part of this settlement and continue in separate litigation. The UBT settlement only resolves claims specifically against Union Bank and Trust Company. If you were affected by MOVEit through another organization, that company may have its own separate settlement. See our article on the Cadence Bank MOVEit settlement as an example.

Sources & References

• Official Settlement Website: UBTDataSettlement.com
• Long Form Notice (PDF): ubtdatasettlement.com/pdf/Long_Form_Notice.pdf
• Claim Form (PDF): ubtdatasettlement.com/pdf/Claim_Form.pdf
• Court Docket via PACER: Scott et al. v. Union Bank & Trust Co. et al., Case No. 1:23-cv-12436-ADB, U.S. District Court for the District of Massachusetts — ecf.mad.uscourts.gov

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.