WaterStreet Company Reaches Class Action Settlement Following 2025 Data Breach Impacting Over 70,000 Consumers

The class action lawsuit stems from a significant cybersecurity incident that occurred on March 17, 2025. WaterStreet Company, which provides specialized cloud-based software and operational support services for property and casualty insurance providers, discovered that unauthorized cybercriminals had successfully breached its digital network.

The security failure allowed hackers to access and steal private files containing the sensitive personal data of tens of thousands of consumers. Impacted individuals primarily included policyholders whose insurance information was managed through WaterStreet’s infrastructure. Affected consumers later received data breach notification letters alerting them that their personal information had been exposed to the dark web.

What Sensitive Personal Data Was Exposed to Cybercriminals?

The data stolen during the network breach included highly confidential details that identity thieves frequently use to commit financial fraud. According to legal filings, the compromised data included full names, Social Security numbers, bank account information, and taxpayer identification numbers.

Security experts warn that when this specific combination of personal identifiable information (PII) falls into the wrong hands, affected individuals face an ongoing, long-term risk of identity theft. Cybercriminals can use these stolen credentials to open fraudulent bank accounts, file deceptive tax returns, or drain existing financial accounts, forcing victims to spend significant time and money restoring their financial identities.

What Are the Claims and Accusations in the Lawsuit?

Following the data breach, consumer protection attorneys filed a class action lawsuit on behalf of the affected victims. The lawsuit brought forward serious legal claims, including negligence, breach of implied contract, and unjust enrichment.

The plaintiffs alleged that WaterStreet Company failed to implement and maintain adequate cybersecurity protocols to safeguard the highly private data entrusted to them by everyday people. The lawsuit argued that the company should have anticipated the threat of a cyberattack and done more to protect its systems. While WaterStreet Company has agreed to the settlement terms to resolve the litigation, the company has not admitted any wrongdoing or liability regarding the security failure.

Who is Eligible to File a Claim for Compensation?

You may be eligible to participate in this class action settlement if you reside in the United States and received a formal data breach notice indicating that your private information may have been impacted by the WaterStreet Company data incident.

The settlement is designed to directly benefit the 70,072 individuals nationwide who were identified as victims of the breach. To file a claim successfully through the official online portal, class members must provide the unique Login ID and PIN that was printed on the data breach settlement notice mailed to them by the settlement administrator.

How Much Cash Can Class Members Receive From the Fund?

The settlement establishes a structured payout system that allows approved claimants to choose between two distinct cash payment options, depending on how the data breach affected them financially.

• Cash Payment Option A (Documented Losses): Class members can claim up to $3,000 in reimbursement for documented, out-of-pocket financial losses traceable to the data breach. Eligible expenses must have been incurred between March 17, 2025, and August 19, 2026. This includes monetary losses from actual identity theft or fraud, fees paid for credit reports, costs associated with freezing or unfreezing credit files, expenses for replacing government-issued identification cards, and postage costs used to correspond with financial institutions or credit bureaus.

• Cash Payment Option B (Alternate Cash Payment): Class members who did not experience out-of-pocket expenses or prefer not to submit a documented losses claim can choose a one-time alternate cash payment. This payment is currently estimated at $55. However, the settlement administrator will determine the final individual payout amount based entirely on the total number of valid claims filed against the consumer fund.

What Credit Monitoring Services Are Provided to Victims?

In addition to or as an alternative to cash benefits, all eligible class members can elect to receive three years of comprehensive credit monitoring and identity theft protection services through CyEx Financial Shield Complete.

This premium security service includes continuous monitoring for signs of identity theft, fraud alerts, and tracking of unauthorized financial transactions. It also alerts users if their personal information is associated with high-risk digital transactions. Crucially, the service provides $1 million in financial fraud insurance to give everyday people peace of mind and financial protection against potential future identity theft attempts.

How Are the Total Settlement Funds Distributed?

The total financial structure of the class action settlement includes capped limits for consumer payouts, legal fees, and administrative expenses. Up to $500,000 total has been allocated specifically for payments to approved consumer claimants.

The court has also cap-allocated up to $282,500 to cover attorneys’ fees and litigation costs, while the class representatives who stepped forward to lead the lawsuit against the company will receive service awards of $2,500 each. The overall cost for the three years of provided credit monitoring services will be determined by how many eligible class members enroll in the program before the deadline.

When Will Approved Claimants Receive Their Payouts?

Everyday people who file a valid, approved claim will not have to wait indefinitely for their compensation. The settlement administrator is legally required to issue all cash payments and credit monitoring enrollment information to approved claimants no later than 75 days after the court grants final approval of the settlement.

If the judge approves the settlement during the scheduled September 3, 2026, hearing and no legal appeals are filed by outside parties, consumers can expect to receive their payouts or digital identity protection credentials before the end of November 2026. Approved claimants can choose to receive their funds via modern digital payment methods—including PayPal, Venmo, Zelle, or a virtual prepaid card—or request a traditional paper check mailed to their home address.