Universal Lenders Data Breach Class Action Settlement, Are You Eligible to Claim? Claims Until April 13, 2026

Universal Lenders, LLC agreed to settle a class action lawsuit stemming from a targeted cyberattack on its computer systems that occurred in November 2024. The breach exposed personal information including names, Social Security numbers, financial account numbers, and driver’s license numbers. 

All individuals to whom Universal Lenders mailed breach notification letters may file a claim for up to $2,500 in documented expense reimbursement, three years of credit monitoring, or a flat $50 cash payment. The claim deadline is April 13, 2026.

Quick Facts

Current Status & What Happens Next

• The opt-out and objection deadlines are March 14, 2026 — class members who want to preserve the right to sue Universal Lenders separately must submit an exclusion request postmarked by that date.
• The court will hold a Final Approval Hearing on April 21, 2026, at 9:00 a.m. Central Time, in Courtroom C-204 of the Circuit Court for the Nineteenth Judicial District, Lake County, Illinois, 18 N County Street, Waukegan, IL 60085.
• If the court approves the settlement, payments will distribute after the court grants final approval and resolves any appeals — the timeline for distribution is approximately 75 days after final approval.

What Is the Universal Lenders Data Breach Lawsuit About?

On November 7, 2024, Universal Lenders, LLC experienced a network disruption at its Oak Park, Illinois headquarters. The company launched an investigation with independent cybersecurity experts, and by December 5, 2024, the investigation revealed that certain files had been accessed and potentially acquired without authorization.

It was not until January 14, 2025, that Universal Lenders confirmed the breach had exposed personal information including names, Social Security numbers, driver’s license numbers, and financial account information. The breach affected approximately 19,575 individuals across the United States.

Plaintiffs Matthew Bakale, Samantha Krulicki, Akeem Shannon, and Mary Wilson filed the class action lawsuit, alleging Universal Lenders failed to adequately safeguard customer data against the targeted cyberattack. Universal Lenders denies all wrongdoing, and the court has not decided who is right. Both parties agreed to settle to avoid the costs, risks, and uncertainties of continued litigation.

Who Is Eligible to File a Claim?

The settlement class is defined as all individuals to whom Universal Lenders, LLC mailed notices that their private information was potentially compromised in the data breach discovered in November 2024.

• You may qualify if you received a mailed data breach notification letter from Universal Lenders, LLC on or around January 2025 confirming your personal information may have been compromised.
• You may qualify if your name, Social Security number, financial account number, or driver’s license number was stored in Universal Lenders’ systems and accessed during the November 2024 cyberattack.
• You may qualify whether or not you experienced actual identity theft or fraud — receiving the notification letter is the primary eligibility trigger.
• You may not qualify if you are Universal Lenders itself, its officers, directors, or related companies; a governmental entity; an attorney for the parties; the presiding judge or their family and staff; or anyone who perpetrated the data breach.
• You may not qualify if you validly opted out of the settlement by the March 14, 2026 deadline.

If you received a notification letter but lost it, contact the settlement administrator at [email protected] or (833) 647-8961 — your Unique ID and PIN from the postcard mailed on January 13, 2026, are needed to file online.

How Much Can You Receive?

All class members may claim three years of credit monitoring services and one of two cash payment options: expense reimbursement of up to $2,500 with documentation, or a one-time $50 alternative cash payment requiring no proof.

Option 1 — Expense Reimbursement (with proof, up to $2,500)

Class members who incurred actual, documented out-of-pocket expenses due to the data breach can receive reimbursement up to $2,500. Covered expenses include costs to obtain credit reports, fees relating to a credit freeze, card replacement fees, late fees, over-limit fees, interest and fees on payday loans taken as a result of the breach, bank or credit card fees, postage, mileage, and other incidental expenses, and costs associated with up to one year of credit monitoring or identity theft insurance purchased between June 3, 2024, and August 29, 2025.

Receipts, bank statements, or similar third-party documentation are required. Self-prepared notes alone do not constitute sufficient proof.

Option 2 — Alternative Cash Payment (no proof required)

Instead of expense reimbursement, class members may claim a one-time $50 cash payment. No proof or explanation is required to claim this payment.

Credit Monitoring (available to all class members)

All class members are eligible to enroll in three years of single-bureau credit monitoring services. This benefit includes $1 million in identity theft insurance, real-time monitoring of your credit file, dark web scanning, and comprehensive public records monitoring. A fraud resolution agent is available if anything suspicious is detected.

How to File a Claim

Step 1 — Visit the official settlement website at ULDataSettlement.com to access the online claim form.

Step 2 — Locate your Unique ID and PIN from the settlement postcard mailed to you on or around January 13, 2026, and use them to log in to the online portal.

Step 3 — Select your benefit option: expense reimbursement (up to $2,500) or the flat $50 alternative cash payment.

Step 4 — If claiming expense reimbursement, upload supporting documentation — receipts, bank statements, or similar third-party proof — showing your out-of-pocket expenses relate to the November 2024 data breach.

Step 5 — Enroll in three years of free credit monitoring if desired, regardless of which cash option you select.

Step 6 — Submit your claim online by April 13, 2026, or download and print the claim form and mail it postmarked no later than April 13, 2026, to: UL Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958.

Save your confirmation number and copies of all submitted documents for your records. For questions, contact the administrator at [email protected] or (833) 647-8961.

Estimated time to complete: 5–10 minutes.

Important Deadlines & Dates

Frequently Asked Questions

Do I need a lawyer to file a claim? 

No. The court has appointed attorney Gary Klinger of Milberg Coleman Bryson Phillips Grossman, LLC, as Class Counsel to represent all class members at no charge. You can file your claim directly at ULDataSettlement.com without hiring your own attorney. If you want separate legal representation, you may hire one at your own expense.

Is this settlement legitimate? 

Yes. The case, Bakale v. Universal Lenders, LLC, Case No. 2025LA00000214, is pending in the Circuit Court for the Nineteenth Judicial District, Lake County, Illinois. The settlement is administered by Simpluris, a court-appointed administrator. Always use only the official website at ULDataSettlement.com before submitting any personal information.

When will I receive my payment? 

Payments and credit monitoring services will be distributed approximately 75 days after final court approval, which is scheduled for April 21, 2026, or within 30 days of claim processing completion — whichever is later. If no appeals are filed, expect payments in mid-to-late 2026.

What if I missed the claim deadline? 

The claim deadline is April 13, 2026. Missing that date disqualifies you from receiving any payment or credit monitoring from this settlement. If you also failed to opt out by March 14, 2026, you automatically release your right to sue Universal Lenders separately over these claims.

Will this settlement payment affect my taxes? 

Settlement payments for documented out-of-pocket expenses may be treated as a non-taxable reimbursement, while the $50 flat cash payment may be considered taxable income. Tax treatment depends on your individual circumstances — consult a qualified tax professional for advice specific to your situation.

What personal information was actually exposed in the Universal Lenders breach? 

The files accessed during the November 2024 cyberattack may have contained names, Social Security numbers, financial account numbers, and driver’s license numbers. The specific data types exposed for your account depend on the information Universal Lenders stored for you — your notification letter identifies which data types were involved.

Can I claim both the $50 cash payment and expense reimbursement?

 No. Class members must choose one of the two cash options — either expense reimbursement of up to $2,500 with documentation, or the one-time $50 alternative cash payment. Both options are available in addition to the three years of free credit monitoring, which all class members may enroll in regardless of which cash option they select.

How does this settlement compare to similar data breach cases? 

This settlement follows the standard structure seen in recent financial services data breach cases. If your information was also compromised in other recent breaches, you may have additional claims to file — for example, if you received a notice about the Lockton data breach settlement claims from the same November 2024 period. Similarly, victims of the M&R Printing Equipment data breach settlement — which also involved a Simpluris-administered case with identical data types exposed — may recognize this claims process.

Sources & References

• Official Settlement Website (Simpluris): ULDataSettlement.com
• Official Settlement FAQ: ULDataSettlement.com/faq
• Maine Attorney General — Universal Lenders Data Breach Filing (January 21, 2025): maineag.gov
• JDSupra — Universal Lenders Breach Notice Reporting (January 2025): jdsupra.com

Last Updated: March 10, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah