Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.

Crimson Wine Group Agrees to $637,500 Data Breach Settlement Following 2024 Cyberattack

In June 2024, Crimson Wine Group Ltd. experienced a targeted cyberattack that allowed unauthorized parties to access files containing the highly sensitive information of approximately 26,238 individuals—mostly current and former employees.

large-field-of-ripe-wheat-under-the-open-sky-on-a-2025-02-12-05-09-11-utc 1

A class action lawsuit filed against Crimson Wine Group Ltd. alleged that a targeted cyberattack on the company’s computer systems in June 2024 allowed unauthorized parties to access and acquire files containing private data. The security incident impacted approximately 26,238 individuals, including current and former employees, whose highly sensitive records were left vulnerable to hackers.

Plaintiffs in the lawsuit alleged that Crimson Wine Group failed to implement adequate cybersecurity measures to protect this sensitive data from digital thieves. While the company denies any wrongdoing, it agreed to the $637,500 settlement to avoid the ongoing expenses, distractions, and unpredictable risks associated with continued litigation.

What Data Was Exposed in the Crimson Wine Breach?

The personal data exposed in this breach is deeply sensitive and poses long-term security risks for the affected consumers. According to the lawsuit, the cyberattack compromised full names, Social Security numbers, and financial account information. This specific combination of data is highly valuable to identity thieves on the dark web.

When identity thieves gain access to Social Security numbers and bank accounts, they can open fraudulent lines of credit, drain bank balances, or file fake tax returns. Because this information cannot be easily changed, everyday people face years of heightened anxiety and the tedious chore of monitoring their credit profiles for suspicious activity.

Financial Relief Available Under the New Settlement

If you were affected by this data breach, you do not have to stand alone against the financial fallout. The $637,500 settlement provides multiple paths for financial relief, starting with reimbursement for out-of-pocket expenses. Class members can file a claim to receive up to $5,000 for documented losses directly traceable to the cyberattack.

Eligible out-of-pocket expenses include bank or credit card fees, overdraft fees, declined payment fees, and returned check charges. You can also claim the costs of replacing official identification cards, fees paid for credit reports, and any direct monetary losses stemming from identity theft or fraud.

Alternative Cash Options for Affected Consumers

Not everyone who suffers from a data breach experiences immediate, documentable financial fraud, but everyone loses peace of mind. To ensure all affected individuals receive justice, the settlement provides an alternative cash payment option. If you do not submit a claim for documented losses, you can request a one-time pro rata cash payment.

The settlement administrator estimates this alternative undocumented cash payment will be around $100. However, the final payout amount will depend entirely on how many eligible class members file a valid claim before the deadline. The remaining settlement funds will be distributed evenly among approved claimants.

Free Credit Monitoring to Protect Your Identity

In addition to the cash payments, Crimson Wine Group is providing critical protective resources to help you safeguard your identity moving forward. All eligible class members have the option to sign up for two full years of comprehensive credit monitoring services at no out-of-pocket cost.

This protective package includes real-time credit file monitoring through one major credit bureau, dark web scanning to see if your info is being traded, and public record monitoring. It also features identity theft insurance with no deductible and direct access to professional fraud resolution agents to help you recover if your identity is stolen.

Legal Frameworks Protecting Consumer Privacy Right

Data breach lawsuits rely on state and federal consumer protection laws to hold companies accountable for failing to secure personal data. When corporations collect sensitive records like Social Security numbers, they take on a legal and ethical duty to implement strong digital defenses.

Under various state privacy acts, companies can be held liable for damages if negligent security practices lead to a data breach. Class action lawsuits consolidate thousands of individual claims into a single powerful action, enabling everyday people to successfully challenge large corporations that fail to protect consumer data.

Am I Eligible to Receive a Settlement Payout?

You may be eligible to participate in this settlement if you reside in the United States and received a formal data breach notification stating that your private information was accessed or acquired during the June 2024 Crimson Wine Group security incident.

The data breach primarily affected current and former employees, along with other individuals associated with the winery group. If you received a letter or email notice about this specific security incident, you are considered a class member and have the legal right to claim your share of the settlement funds.

How to File a Claim and Collect Your Money

To secure your cash reimbursement or credit monitoring services, you must actively file a claim with the settlement administrator. You can easily complete and submit a claim form online through the official settlement website. Alternatively, you can print a physical PDF claim form and mail it directly to the administrator.

The mailing address for paper submissions is CWG Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799. When submitting your claim, you can choose to receive your payout via an electronic payment or a traditional paper check mailed to your home address.

Important Deadlines You Cannot Afford to Miss

When dealing with class action settlements, deadlines are strict and missing them means giving up your rights to compensation. If you wish to exclude yourself from the settlement to preserve your right to sue Crimson Wine Group individually, you must opt out by August 3, 2026.

The final deadline to file a valid claim form for cash or credit monitoring is September 1, 2026. A final court approval hearing is scheduled for October 13, 2026. The settlement administrator is legally required to distribute payments and credit monitoring access codes to approved claimants no later than 75 days after the court grants final approval.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
The Time for Action is Now!
Mass Arbitrations
Active Data Breaches
Date of Breach: March 24, 2026
Date of Breach: January 19, 2026
Date of Breach: May 14, 2026
Latest News