Subscribe To Our Newsletter
Subscribe To Our Newsletter
If you banked with Heritage South Credit Union and received a security notice regarding a 2025 data breach, you may be eligible to receive cash compensation and free identity protection services.
Alabama-based Heritage South Credit Union (HSCU) has agreed to a class action settlement to resolve allegations that the financial institution failed to implement reasonable cybersecurity safeguards to protect its members’ sensitive personal and financial data during a February 2025 cyberattack.
The settlement agreement received preliminary court approval on May 18, 2026. While HSCU denies any legal wrongdoing or liability, the credit union agreed to resolve the pending lawsuit to avoid the expense, disruption, and uncertainty of a trial.
In February 2025, unauthorized third parties breached Heritage South Credit Union’s computer systems. Following an internal investigation, HSCU determined that cybercriminals gained access to files containing private member information stored on its network.
A class action lawsuit filed in Alabama state court (In re: Heritage South Credit Union Data Breach Litigation) alleged that HSCU failed to maintain industry-standard physical, technical, and administrative security measures. Plaintiffs argued that had HSCU properly encrypted sensitive files and maintained adequate network protections, the security intrusion could have been prevented.
According to court documents and data breach notifications, the compromised information may have included:
Full names and home addresses
Social Security numbers
Financial account numbers and banking details
When unauthorized individuals gain access to this level of sensitive financial and identifying information, affected consumers face an elevated long-term risk of identity theft, unauthorized account takeovers, and financial fraud.
The court-approved settlement covers all living United States residents who were identified by Heritage South Credit Union as having been impacted by the February 2025 breach and were sent a formal notice.
Eligible class members who submit a timely and valid claim form can receive a combination of cash recovery benefits and financial protection services:
Documented Out-of-Pocket Loss Reimbursements (Up to $2,000): Class members who incurred financial expenses directly linked to the data breach between February 12, 2025, and October 5, 2026, can claim up to $2,000. Reimbursable items include losses from identity theft or fraud, credit report fees, credit monitoring services, fees to freeze or unfreeze credit files, replacement government ID fees, and postage or notary costs.
Compensation for Lost Time (Up to $80): Affected members can claim reimbursement for up to four hours of lost time spent responding to the incident at a rate of $20 per hour (a maximum payout of $80). Qualifying activities include changing passwords, investigating suspicious charges, contacting credit bureaus, or researching the breach.
One Year of Free Financial Protection: All eligible class members can elect on their claim form to receive one year of CyEx Financial Shield Total, a specialized service that provides monitoring for unauthorized financial transactions and financial fraud insurance coverage.
Financial institutions hold a strict statutory and common law duty to safeguard the confidential information entrusted to them by consumers. Lawsuits involving credit union and bank data breaches frequently rely on key consumer protection frameworks:
Gramm-Leach-Bliley Act (GLBA): Requires financial institutions to establish administrative, technical, and physical safeguards to ensure the security and confidentiality of customer records.
State Deceptive Trade Practices Laws: Prohibit businesses from engaging in unfair practices, enforcing that entities collecting sensitive consumer data must maintain reasonable, industry-aligned cybersecurity standards.
Common Law Duty of Care: Mandates that corporations holding private consumer records must take proactive measures to guard against foreseeable cyberattacks and unauthorized data disclosures.
When companies fail to uphold these standards, everyday people have the right to seek financial recovery through class action lawsuits and hold corporations accountable for the resulting harm.
You may be eligible to participate in the settlement and receive benefits if you meet the following criteria:
You are a living resident of the United States or its territories.
Heritage South Credit Union identified you as an individual whose private information may have been compromised in the February 2025 data breach.
You received an official data breach notice letter or communication directly from HSCU.
If you received a settlement notice in the mail, it should contain a unique Login ID and PIN required to complete your submission online quickly.
New cases and investigations, settlement deadlines, and news straight to your inbox.
