Subscribe To Our Newsletter
Subscribe To Our Newsletter
International Shoppes, LLC and Diplomatic Duty Free Shops of New York, Inc. reached a $500,000 class action settlement to resolve claims that a November 2023 cyberattack exposed sensitive data belonging to approximately 5,382 individuals.
International Shoppes, LLC and Diplomatic Duty Free Shops of New York, Inc. have agreed to a $500,000 class action settlement to resolve claims stemming from a November 2023 cyberattack. The security incident exposed sensitive personal information belonging to thousands of consumers. If you received a data breach notice regarding this incident, you may be eligible to claim up to $4,000 in cash reimbursement or an estimated $50 flat cash payment, along with free credit monitoring services.
In November 2023, cybercriminals gained unauthorized access to the network infrastructure of duty-free and specialty retailers International Shoppes, LLC and Diplomatic Duty Free Shops of New York, Inc. The companies discovered the intrusion in December 2023 and subsequently initiated an investigation to determine the scope of the exposure.
The class action lawsuit, Lazar v. International Shoppes, LLC, was filed on June 11, 2024, in New York state court. Plaintiffs alleged that the retailers failed to implement reasonable cybersecurity measures and safeguards necessary to secure consumers’ confidential information against foreseeable cyber threats. The lawsuit claimed that this administrative and technical oversight exposed highly sensitive personal and financial data to unauthorized third parties, placing affected consumers at a heightened risk of identity theft and financial fraud.
While International Shoppes and Diplomatic Duty Free Shops deny all allegations of wrongdoing and maintain that they took appropriate security measures, both parties agreed to settle the litigation to avoid the expense, risk, and disruption of a prolonged legal battle.
The exposure involved extensive personal, financial, and identifying information. According to court filings, approximately 5,382 people in the United States were affected by the incident.
The sensitive records potentially accessed or exfiltrated during the cyberattack include:
Full names and residential addresses
Dates of birth
Social Security numbers
Driver’s license and passport numbers
Financial account numbers
Health and medical information
When compromised, this combination of sensitive identifying and financial details provides bad actors with the necessary tools to commit tax fraud, open fraudulent lines of credit, or execute targeted identity theft schemes.
You may be eligible to participate in this class action settlement if you are a resident of the United States whose personal information was compromised during the November 2023 data breach discovered by International Shoppes in December 2023.
Generally, anyone whose information was impacted received a formal written notice of the data breach or settlement directly in the mail. The official settlement class encompasses all 5,382 individuals identified by the defendants as having had their private details exposed in the breach.
If you received a notice containing a Login ID and PIN, you are officially recognized as a class member and are eligible to file a claim for cash benefits or credit monitoring services.
The settlement establishes a $500,000 aggregate maximum benefit pool. Eligible class members who submit a timely and valid claim can choose from distinct compensation options depending on their individual circumstances.
If you suffered out-of-pocket expenses or financial losses directly related to the cyberattack, you can claim up to $4,000 in cash reimbursement. Eligible expenses incurred between November 16, 2023, and November 11, 2026, include:
Unreimbursed losses resulting from identity theft or bank fraud
Fees for credit reports or credit score monitoring services
Costs associated with freezing or unfreezing credit files with credit bureaus
Fees paid for replacement government-issued identification (such as driver’s licenses or passports)
Miscellaneous out-of-pocket expenses, including postage, notary fees, and long-distance phone charges
To claim reimbursement for documented losses, you must provide supporting documentation, such as account statements, receipts, invoices, or official correspondence verifying the expense.
If you did not incur out-of-pocket expenses or prefer not to compile receipts, you may elect to receive an estimated $50 flat cash payment instead of documented loss reimbursement. No documentation or proof of loss is required to select this cash benefit.
All class members—regardless of whether they choose documented loss reimbursement or the alternative cash payment—can sign up to receive two years of free credit monitoring through CyEx Financial Shield Complete. This service includes:
One-bureau credit file monitoring
Financial fraud insurance coverage
Dark web and identity theft monitoring for unauthorized transactions
Note: If the total value of all valid claims submitted exceeds the $500,000 settlement benefit cap, all cash payments (both documented loss reimbursements and flat cash amounts) will be reduced proportionally on a pro rata basis.
To receive any financial payment or credit monitoring benefits, you must file a valid claim form before the strict court-ordered deadline.
You can submit your claim form online by visiting the official settlement website at IShoppesDataSettlement.com. To log in to the portal, you will need the unique Login ID and PIN provided on the settlement notice you received by mail. Alternatively, you can download, print, complete, and mail a physical claim form to the settlement administrator.
Key Dates and Filing Deadlines:
Filing Deadline: All claim forms must be submitted online or postmarked by November 11, 2026.
Final Approval Hearing: The court received preliminary approval for the deal on July 14, 2026, and will hold a final approval hearing on November 16, 2026, to decide whether to grant final approval to the settlement terms.
Payments and access to credit monitoring activation codes will be distributed only after the court grants final approval and any potential appeals are resolved.
Data breach class actions like this one rely on established consumer protection standards and state privacy statutes. Laws such as the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act, the California Consumer Privacy Act (CCPA), and federal guidelines set by the Federal Trade Commission (FTC) require businesses to maintain reasonable administrative, technical, and physical safeguards for sensitive consumer information.
When corporations fail to implement adequate cybersecurity measures—such as strong encryption, multi-factor authentication, or routine network monitoring—they leave personal data vulnerable to unauthorized access. Class action lawsuits hold companies accountable for these failures, compensating affected consumers for the risk and inconvenience caused by compromised personal data.
Don’t stand alone when dealing with corporate data breaches. If your personal information was exposed in the International Shoppes cyberattack, you have rights and options available to protect your identity and recover losses.
Take a few minutes to check your eligibility, locate your settlement notice, and submit your claim before the November 11, 2026 deadline.
New cases and investigations, settlement deadlines, and news straight to your inbox.
