Muscatine Power and Water Reaches $525,000 Settlement Following 2024 Utility Data Incident

Iowa municipal utility Muscatine Power and Water has agreed to establish a $525,000 fund to resolve a class action lawsuit stemming from a early 2024 cyberattack that exposed sensitive customer data.

If you received notice that your personal information was compromised in the January 2024 security incident, you may be eligible to claim compensation ranging from $100 for lost time up to $5,000 for documented identity theft losses.

The proposed settlement benefits approximately 36,995 individuals identified in the utility’s records. Impacted consumers must file a valid claim form before the court-ordered deadline on October 26, 2026.

What Happened During the January 2024 Muscatine Power and Water Cyberattack?

Muscatine Power and Water (MP&W) is a municipal utility providing electric, water, and communications services to residents across Muscatine County, Iowa. On or around January 26, 2024, an unauthorized third party breached the utility’s computer network, gaining access to private internal files.

Following an internal investigation, MP&W began notifying affected individuals in March 2024. The lawsuit, Cox v. Muscatine Power and Water (Case No. 07701 CVCV027276), was filed shortly thereafter in the Iowa District Court for Muscatine County.

Plaintiffs in the case alleged that the utility failed to implement reasonable cybersecurity safeguards to protect consumer data against foreseeable cyber threats. Although MP&W moved to dismiss the lawsuit, the court allowed major portions of the claims to proceed in early 2025. MP&W maintains that it did nothing wrong and denies all allegations of negligence, agreeing to the $525,000 settlement solely to avoid the costs and disruptions of ongoing litigation.

What Personal Information Was Exposed in the Security Breach?

Utility companies manage detailed records for thousands of households and businesses. When a municipal network is compromised, bad actors gain access to information that can be used for financial fraud and identity theft.

According to court filings, the files accessed during the January 2024 cyberattack contained sensitive personal information, including:

• Full legal names

• Social Security numbers

• Other personal data maintained in utility customer files

Exposing Social Security numbers presents long-term risks for consumers, as bad actors can attempt to open unauthorized lines of credit, file fraudulent tax returns, or access financial accounts.

Understanding Your Statutory Rights and Utility Accountability

When consumers sign up for essential public utilities, they must share private identifiers to establish accounts. Federal and state privacy frameworks obligate organizations to maintain administrative and technical safeguards to keep those records secure.

While public utilities focus on delivering vital services like power and water, modern cybersecurity requirements demand equal focus on digital network protection. When organizations fall short of industry security standards, class action litigation gives everyday people a structured path to seek compensation for their lost time, out-of-pocket expenses, and credit repair costs.

Overview of Settlement Benefits and Payout Tiers

The $525,000 settlement fund will cover administrative costs, court-approved attorneys’ fees, a service award to the lead plaintiff, and cash payments to eligible class members. Qualified claimants can request compensation across three distinct benefit tiers:

Note: Payments may be adjusted pro rata depending on the total number of valid claims submitted across the class.

Who Is Eligible to Claim Settlement Money?

You may be eligible to submit a claim if you meet the following criteria:

• You reside in the United States;

• Muscatine Power and Water’s internal records identify you as an individual impacted by the January 2024 data incident; and

• You were sent an official notice regarding the data breach or settlement.

Eligibility is based on whether your records were involved in the breach, regardless of whether you are a current or former MP&W customer.

Important Legal Deadlines and How to Submit Your Claim

If you qualify for compensation under the Muscatine Power and Water settlement, keep these key dates in mind:

• Opt-Out Deadline: October 9, 2026. This is the last day to exclude yourself from the settlement if you wish to preserve your right to sue MP&W independently.

• Objection Deadline: October 9, 2026. The deadline to file a written objection with the court if you disagree with any terms of the settlement.

• Claim Filing Deadline: October 26, 2026. All claim forms must be submitted online or postmarked by this date to receive a payment.

• Final Approval Hearing: December 17, 2026. The Iowa District Court for Muscatine County will hold a hearing to decide whether to grant final approval to the agreement.

To submit a claim online, visit the official settlement portal at MuscatineDataBreach.com. You will need the Login ID and PIN located on the official notice you received. You may also download a printable claim form from the site and submit it by mail to Muscatine Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958, or via email at info@MuscatineDataBreach.com.

When a cybersecurity incident impacts your private data, monitoring your financial accounts and taking advantage of available remedies is essential. Everyday people should not have to pay out of pocket to deal with the fallout of corporate data breaches.

If you received notice from Muscatine Power and Water, check your eligibility, gather any documentation of lost time or expenses, and submit your claim form before the October 26, 2026 deadline.