Woodloch Pines Data Breach Class Action Settlement, $60 Cash or Up to $3,500, Plus 2 Years of Credit Monitoring

People whose personal information was implicated in a May 2024 cyberattack on Woodloch’s computer systems may be eligible for benefits under the Woodloch Pines data breach class action settlement. Eligible class members can choose one cash option, either a $60 alternative cash payment with no documentation or reimbursement of up to $3,500 for documented out-of-pocket losses. They can also enroll in two years of credit monitoring with $1 million in identity theft insurance.

Claim deadline: January 13, 2027. Opt-out and objection deadline: December 14, 2026. Final approval hearing: February 24, 2027.

Official settlement website: WoodlochSettlement.com | File your claim online: woodlochsettlement.com/form/claim

The settlement has received preliminary approval (September 15, 2026). The court has not yet granted final approval, and no payment date has been announced.

Woodloch Pines Data Breach Settlement: Quick Facts

Detail	Information
Settlement name	Woodloch Data Incident Settlement
Lawsuit	In re: Woodloch Pines Data Breach Litigation
Case number	594-CV-2024
Court	Court of Common Pleas of Wayne County, Pennsylvania
Defendants	Woodloch Pines, Inc.; Woodloch Spa Resort, LP (d/b/a The Lodge at Woodloch); The Woodloch Lodge and Spa, LLC
Related released party (not a named defendant)	Woodloch Spa Resort, LLC
Class representatives	Christopher Rhatigan and Amanda Young
Data incident	May 2024 targeted cyberattack
Cash Payment A	Up to $3,500 for documented losses (proof required)
Cash Payment B	$60 alternative cash payment (no proof required)
Credit monitoring	2 years of CyEx Financial Shield Complete, with $1 million identity theft insurance
Who can claim	All living individuals in the United States whose Private Information was implicated in the Data Incident
Claim form required?	Yes
Official settlement website	WoodlochSettlement.com
Online claim form	woodlochsettlement.com/form/claim
Claim deadline	January 13, 2027 (online, or paper claim postmarked)
Opt-out deadline	December 14, 2026
Objection deadline	December 14, 2026
Final approval hearing	February 24, 2027, 9:00 a.m. ET
Settlement administrator	Simpluris
Administrator phone / email	(833) 296-0849 (toll-free, 24/7) / [email protected]

What Happened in the Woodloch Data Breach?

The lawsuit alleges that during a targeted cyberattack on Woodloch’s computer systems in May 2024, unauthorized parties accessed certain files containing private information. Woodloch operates resort and hospitality businesses in Pennsylvania, including Woodloch Pines and The Lodge at Woodloch.

The files may have contained:

• Names and addresses
• Social Security numbers
• Dates of birth
• Driver’s license or state ID numbers
• Financial account information
• Payment card information
• Passport numbers
• Taxpayer ID numbers
• Medical information
• Health insurance policy information

Not every person had every category exposed. The information involved depended on the records tied to each individual. Woodloch denies any wrongdoing, and the court has not decided who is right. Both sides agreed to settle to avoid the cost and risk of continued litigation.

Who Qualifies for the Woodloch Settlement?

The court defined the settlement class as:

“All living individuals in the United States whose Private Information was implicated in the Data Incident.”

This means:

• The class is nationwide. You do not have to live in Pennsylvania.
• You do not have to have stayed at a Woodloch resort. What matters is whether your Private Information was implicated in the incident.
• Only living individuals are included.

Excluded from the class: Woodloch and its officers, directors and related companies; governmental entities; the judge in the case and the judge’s family and staff; and anyone who validly opts out.

Does a Settlement Postcard Mean I Qualify?

People identified in Woodloch’s records were sent a notice, including a postcard with a LoginID and PIN for online claims. Receiving a notice does not mean you will be paid automatically. You must submit a valid Claim Form by January 13, 2027.

What If I Did Not Get a Notice?

Do not assume you are excluded. The administrator offers free help to anyone unsure whether they are a class member:

• Phone: (833) 296-0849 (toll-free, 24/7)
• Email: [email protected]
• Mail: Woodloch Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25191, Santa Ana, CA 92799

Include your full name and mailing address.

Settlement Benefits: How Much Can You Get?

Eligible class members who submit a valid, timely claim can choose one cash payment and may also enroll in credit monitoring.

Benefit	Amount	Proof required?
Cash Payment A: Documented Losses	Up to $3,500	Yes
Cash Payment B: Alternative Cash Payment	$60 flat	No
Credit monitoring (CyEx Financial Shield Complete)	2 years	No proof; enrollment after a valid claim

You cannot receive both cash payments. Credit monitoring is separate and is available alongside either cash option.

Cash Payment A: Up to $3,500 for Documented Losses

This option reimburses actual, documented out-of-pocket losses caused by the Data Incident that were incurred between May 4, 2024, and January 13, 2027. Covered expenses include:

• Losses from identity theft or fraud
• Fees for credit reports
• Fees for credit monitoring
• Fees to freeze or unfreeze credit
• The cost to replace IDs
• Postage to contact banks by mail

Proof: You must send documents such as bank statements or receipts showing how much you spent or lost. You may also submit notes or papers you prepared yourself to explain or support other proof, but those notes alone are not enough to make a valid claim. Your proof should show the expenses were because of the Data Incident. Expenses already reimbursed by a third party cannot be claimed.

Is $3,500 guaranteed? No. It is a maximum. You can be reimbursed only for qualifying, documented losses, up to that cap.

Related article: Case Foods Data Breach Class Action Settlement, $45 Cash or Up to $2,000 for Affected Individuals

Cash Payment B: $60 Alternative Cash Payment

You may instead claim a one-time $60 payment. You do not have to provide any proof or explanation. You still must submit a valid Claim Form.

Credit Monitoring and Identity Theft Insurance

All class members who file a valid claim may enroll in two years of CyEx Financial Shield Complete. The service includes monitoring for:

• Fraud or identity theft
• Unauthorized financial transactions
• Personal information associated with high-risk transactions

It also includes $1 million of identity theft insurance and access to a fraud resolution agent if something suspicious happens. The $1 million is insurance coverage, not a cash payment to class members, and is subject to the policy’s terms and conditions.

Is There a Total Settlement Fund?

No fixed total fund amount has been stated. This is a claims-made settlement. Woodloch has agreed to pay the approved benefits, notice and administration costs, attorneys’ fees and costs, and any service awards.

How Much Will the Lawyers Be Paid?

Class Counsel will ask the court to approve up to $125,000 in attorneys’ fees and litigation costs, plus service awards of up to $2,500 for each class representative. Woodloch pays these amounts, subject to court approval. You are not charged for Class Counsel’s services.

How to File a Woodloch Settlement Claim

Option 1: File Online (Fastest)

1. Find your settlement notice and locate your LoginID and PIN.
2. Go to woodlochsettlement.com/form/claim.
3. Choose Cash Payment A ($3,500 max, with proof) or Cash Payment B ($60).
4. Choose whether to enroll in credit monitoring.
5. If claiming losses, upload your supporting documents.
6. Submit before January 13, 2027 and save your confirmation.

Lost Your LoginID or PIN?

Email [email protected] with your full name and mailing address, or call (833) 296-0849.

Option 2: File by Mail

Download the printable Claim Form from the settlement website, or request one by phone, email or mail. Complete and sign it, attach supporting documentation, and mail it to:

Woodloch Data Incident Settlement c/o Settlement Administrator P.O. Box 25191 Santa Ana, CA 92799

Mailed claims must be postmarked no later than January 13, 2027.

Important Woodloch Settlement Deadlines

Event	Date
Preliminary approval order	September 15, 2026
Notice date	October 15, 2026
Opt-out (exclusion) deadline	December 14, 2026
Objection deadline	December 14, 2026
Claim deadline	January 13, 2027
Final approval hearing	February 24, 2027, 9:00 a.m. ET

Your Legal Options: Claim, Opt Out, Object or Do Nothing

1. Submit a Claim

Submit a valid claim to receive benefits. You will be bound by the settlement release if the court grants final approval.

2. Opt Out (Deadline: December 14, 2026)

If you opt out, you receive no settlement benefits, but you keep any right to sue Woodloch on your own over the issues in this case. A valid Request for Exclusion must include:

1. The case name: In re: Woodloch Pines Data Breach Litigation, Case No. 594-CV-2024, Court of Common Pleas of Wayne County, Pennsylvania
2. Your full name, mailing address, telephone number and email address
3. Your personal signature
4. The words “Request for Exclusion” or a clear statement that you do not want to participate

Mail it to the administrator at the P.O. Box above, postmarked by December 14, 2026. You may exclude only yourself, not anyone else.

3. Object (Deadline: December 14, 2026)

You may object only if you do not opt out. Your objection must include:

1. The case name and number
2. Your full name, mailing address, telephone number and email address
3. A clear description of all reasons for your objection, with any legal support
4. Your lawyer’s name, bar number and contact information, if you hired one
5. A list of any other objections you or your lawyer made in the past five years
6. Whether you or your lawyer want to speak at the Final Approval Hearing
7. A list of any witnesses or documents you plan to present
8. Your own signature (your lawyer’s signature alone is not enough)

File the complete objection with the Clerk of Court, Court of Common Pleas of Wayne County, 925 Court Street, Honesdale, PA 18431, by December 14, 2026. Also send copies to the Settlement Administrator, Class Counsel and defense counsel. Objecting is different from opting out. Objecting tells the court you do not like the settlement, and you stay in the class. Opting out removes you from it.

4. Do Nothing

You receive no benefits and you give up the legal claims covered by the settlement release (Section XI of the Settlement Agreement), so you cannot join another lawsuit against Woodloch over those issues.

Final Approval Hearing and Payment Timing

The court will hold the Final Approval Hearing on February 24, 2027, at 9:00 a.m. Eastern Time in the Court of Common Pleas of Wayne County, 925 Court Street, Honesdale, PA 18431. The judge will decide whether to approve the settlement, how much to award Class Counsel and whether to grant service awards, and will consider any objections. You do not have to attend. The date and time may change without further notice.

When will payments arrive? No date has been announced. Benefits and credit monitoring enrollment will be issued only if the court grants final approval and after any appeals are resolved. Do not contact the court or the Clerk about the settlement. Contact the administrator instead.

Laws and Legal Rules Relevant to the Woodloch Data Breach

The settlement website does not publish a list of the original legal claims, and the court has made no finding that Woodloch violated any specific law. The following is general legal background to help readers understand how data breach cases and settlements work.

Pennsylvania Breach of Personal Information Notification Act (73 P.S. § 2301 et seq.)

Pennsylvania’s data breach statute generally requires entities that maintain computerized personal information to notify affected Pennsylvania residents after a qualifying breach, without unreasonable delay. Section 8 of the Act provides that a violation is treated as a violation of the Unfair Trade Practices and Consumer Protection Law and gives the Pennsylvania Attorney General exclusive authority to bring that enforcement action. As a result, a private class action is generally not itself an enforcement action under this notification law.

Act 33 of 2024: Pennsylvania Credit Monitoring Amendment

Pennsylvania Act 33 of 2024, signed June 28, 2024, amended the breach notification law. For covered breaches involving a person’s name together with a Social Security number, bank account number or driver’s license/state ID number, it generally requires the breached entity to offer 12 months of free credit monitoring and access to a credit report, and it expanded notification to the Attorney General for larger breaches. Whether that amendment applies to a particular incident depends on its effective date and the statute’s terms. The Woodloch settlement is a private class settlement, and it separately provides two years of credit monitoring to claimants.

Pennsylvania Unfair Trade Practices and Consumer Protection Law (73 P.S. § 201-1 et seq.)

This law permits certain consumers who suffer an ascertainable loss from an unlawful practice involved in a personal, family or household purchase to bring a private action. Whether it applies to a given data breach claim depends on the facts and the claims actually pleaded.

Pennsylvania Negligence Law

In Dittman v. UPMC (Pa. 2018), the Pennsylvania Supreme Court recognized that an employer can owe a common-law duty of reasonable care to protect employees’ personal data it collects and stores on its computer systems. Negligence-based theories are commonly raised in data breach class actions, but the Woodloch settlement does not publicly itemize the claims asserted, and Woodloch denies liability.

Pennsylvania Class Action Rules (Pa.R.C.P. 1701 et seq.)

Class actions in Pennsylvania state court are governed by Chapter 1700 of the Pennsylvania Rules of Civil Procedure. Under Rule 1714, a class action cannot be settled or dismissed without court approval, which is why the Final Approval Hearing is required before benefits are paid.

State Breach Notification Laws Outside Pennsylvania

Every U.S. state has its own data breach notification law. Because the Woodloch class is nationwide, class members in other states may be protected by their own state’s notification statutes in addition to the settlement.

Federal Laws: FTC Act, HIPAA and the Fair Credit Reporting Act

• FTC Act (15 U.S.C. § 45): The Federal Trade Commission can pursue unfair or deceptive practices, including certain data security failures. The settlement materials do not describe any FTC enforcement action against Woodloch.
• HIPAA: Medical information in a company’s records does not by itself make HIPAA apply. HIPAA covers specific “covered entities” and “business associates.” The settlement materials do not describe this as a HIPAA case.
• Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.): Federal law gives consumers the right to free annual credit reports and, since 2018, free credit freezes and fraud alerts. This matters if you are weighing paid protection against the free options.

Steps to Protect Yourself After a Data Breach

• Review bank, card and credit statements for unfamiliar activity.
• Check your free credit reports at AnnualCreditReport.com.
• Consider a free credit freeze with Equifax, Experian and TransUnion.
• If your Social Security number was involved, consider an IRS Identity Protection PIN to help prevent tax-return fraud.
• Report identity theft to the FTC at IdentityTheft.gov to get a recovery plan.
• Keep receipts and records of any breach-related expenses, since you will need them for a Cash Payment A claim.
• Be cautious of unexpected calls, emails or texts that reference the breach. Settlement claims are filed only through the official website or administrator.

Who Represents the Class?

The court appointed the following Class Counsel:

• Leigh S. Montgomery, Ellzey Kherkher Sanford Montgomery LLP (Houston, TX)
• Melissa G. Meyer, Levi & Korsinsky, LLP (New York, NY)
• Jacob U. Ginsburg, Kimmel & Silverman, P.C. (Ambler, PA)

Counsel for Defendants is Jeffrey S. Haut of McDonald Hopkins LLC. You do not have to hire your own lawyer to file a claim, but you may hire one at your own expense.

Related Data Breach Settlements

• Lowe Engineers Data Breach Settlement: $50 Cash or Up to $5,500 in Documented Losses, Plus Two Years of Credit Monitoring
• NYSID Data Breach Settlement: $50 Cash or Up to $5,500
• Sherr Puttmann Akins Lamb $455,000 Data Breach Settlement

These are separate cases with different companies, class definitions and conditions. Qualifying for one does not qualify you for another.

Frequently Asked Questions

Is the Woodloch Pines data breach settlement real?

Yes. It is administered by Simpluris through the official website WoodlochSettlement.com. The case is In re: Woodloch Pines Data Breach Litigation, Case No. 594-CV-2024, in the Court of Common Pleas of Wayne County, Pennsylvania.

How much money can I get from the Woodloch settlement?

You can claim a one-time $60 payment with no proof, or up to $3,500 for documented out-of-pocket losses. You can also enroll in two years of credit monitoring.

Can I get both $60 and $3,500?

No. You must choose one cash payment. Credit monitoring is available in addition to either.

Do I need receipts to claim $60?

No. The $60 payment requires no proof or explanation, but you must still submit a valid Claim Form.

Do I need proof to claim up to $3,500?

Yes. You need bank statements, receipts or similar documentation showing the amount and that the expense was because of the Data Incident. Your own notes alone are not enough.

Do I have to live in Pennsylvania?

No. The class includes all living individuals in the United States whose Private Information was implicated.

Do I have to have stayed at Woodloch?

Not necessarily. Eligibility depends on whether your Private Information was implicated in the Data Incident. Contact the administrator if you are unsure.

What if I lost my postcard, LoginID or PIN?

Email [email protected] with your full name and mailing address, or call (833) 296-0849.

What is the claim deadline?

January 13, 2027. Online claims must be submitted by then and mailed claims must be postmarked by then.

What is the opt-out deadline?

December 14, 2026, postmarked.

Has the settlement received final approval?

Not yet. Preliminary approval was granted September 15, 2026. The Final Approval Hearing is February 24, 2027.

When will payments be sent?

No date has been announced. Benefits are issued only after final approval and after any appeals are resolved.

What happens if I do nothing?

You receive no benefits and you give up the legal claims covered by the settlement release.

Can a settlement payment affect my taxes?

Possibly. Tax treatment of settlement payments depends on your situation, so consult a qualified tax professional.

Legal Disclaimer

This article is for general informational purposes only and is not legal, tax or financial advice. The settlement remains subject to final court approval. Eligibility, benefits and claim requirements are governed by the official Long-Form Notice, Settlement Agreement and any later court orders. Dates and terms may change, so confirm all details on the official settlement website before acting. AllAboutLawyer.com is an independent legal information website, not a law firm, and does not represent any class member in this case. If you need advice about your own rights, including whether to opt out, consult a licensed attorney.

Sources

• Official Settlement Website: https://woodlochsettlement.com/
• Official FAQ: https://woodlochsettlement.com/faq/
• Important Dates: https://woodlochsettlement.com/dates/
• Online Claim Form: https://woodlochsettlement.com/form/claim
• Long-Form Notice: https://cw.simpluris.com/docs/public/downloads/WDC1/LONG_FORM_NOTICE
• Settlement Agreement: https://cw.simpluris.com/docs/public/downloads/WDC1/SETTLEMENT_AGREEMENT
• Printable Claim Form: https://cw.simpluris.com/docs/public/downloads/WDC1/CLAIM_FORM
• Pennsylvania Breach of Personal Information Notification Act, 73 P.S. § 2301 et seq.
• Pennsylvania Act 33 of 2024 (amending the Breach of Personal Information Notification Act)
• Pennsylvania Unfair Trade Practices and Consumer Protection Law, 73 P.S. § 201-1 et seq.
• Pennsylvania Rules of Civil Procedure, Chapter 1700 (Class Actions), including Rule 1714
• Dittman v. UPMC, 196 A.3d 1036 (Pa. 2018)
• Federal Trade Commission Act, 15 U.S.C. § 45
• Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq.