Subscribe To Our Newsletter
Subscribe To Our Newsletter
Olinsky & Associates, PLLC (also known as Olinsky Law Group) has agreed to a class action settlement to resolve claims arising from a January 2025 cyberattack that exposed sensitive personal and health records.
If you received a notice from Olinsky & Associates regarding a cyberattack on its computer systems, your personal information may have been exposed. The national disability law firm has agreed to a class action settlement to resolve claims that it failed to protect sensitive client and personal data during a January 2025 security incident.
Under the terms of the proposed settlement, impacted individuals do not need to file a formal claim to receive benefits. Instead, eligible class members can receive a $40 cash payment along with three years of complimentary credit monitoring services designed to safeguard against identity theft and fraud.
In late January 2025, Syracuse, New York-based disability law firm Olinsky & Associates PLLC discovered a cybersecurity incident that compromised private records stored on its network. Upon discovering the intrusion on or around January 28, 2025, the firm initiated an investigation to determine the nature and scope of the breach.
The investigation revealed that an unauthorized third party gained access to systems containing sensitive personal identifiable information (PII) and protected health information (PHI). Beginning in March 2025, the law firm began notifying approximately 526 affected individuals that their private records may have been compromised in the attack.
A class action lawsuit, Leon-Roman v. Olinsky & Associates PLLC (Case No. 5:25-cv-000462), was subsequently filed in federal court. The lawsuit alleged that Olinsky & Associates failed to implement reasonable cybersecurity measures to prevent the breach, breaching its duty of care and leaving clients and other individuals vulnerable to financial fraud and identity theft.
The type of data compromised in the security incident varied by individual. However, court filings show that the exposed records included highly sensitive personal, medical, and financial details, such as:
Full names and postal addresses
Social Security numbers (in some cases, truncated to the last four or five digits)
Financial account numbers and banking details
Disability payment information
Medical records and treatment histories
Health insurance details
Driver’s license numbers
When sensitive healthcare records and financial information are exposed, impacted consumers face heightened risks of medical fraud, unauthorized credit accounts, and tax identity theft.
Olinsky & Associates denies all claims of wrongdoing and maintains that it acted responsibly. However, the firm agreed to the class action settlement to avoid the expense, delay, and uncertainty of ongoing litigation. The settlement offers two main forms of relief to all class members:
$40 Cash Payment: Every eligible class member will receive a base cash payment of $40. Class members can elect to receive these funds electronically via Zelle, Mastercard prepaid card, or ACH direct deposit. If no digital payment method is selected, a physical check will be mailed automatically to the address on file.
Three Years of Credit Monitoring: All class members are eligible to enroll in three years of free credit monitoring through CyEx Financial Shield Complete. This service includes single-bureau credit monitoring, real-time transaction and bank account alerts, and direct access to fraud resolution agents if identity theft occurs.
In addition to cash and credit monitoring, the settlement agreement includes commitments from the firm regarding upgraded cybersecurity protections and internal data management protocols.
You may be eligible for settlement benefits if you were formally notified by Olinsky & Associates that your personal or health information was potentially compromised during the January 2025 data breach.
The settlement class encompasses approximately 526 individuals identified by the firm during its forensic investigation. If you received a mailed settlement notice containing a unique Login ID and PIN, you are automatically included in the settlement class.
Because the settlement relies on direct notice to affected individuals, you do not need to file a complex claim form or provide receipts for out-of-pocket losses to receive the $40 cash payment or the credit monitoring offer.
While no formal claim form is required, class members must take minor administrative steps to select a digital payment preference or activate credit monitoring services:
Select Electronic Payment: Visit the official settlement website at OlinskyDataSettlement.com and log in using the Login ID and PIN provided on your mailed notice. From there, you can submit a Payment Election Form to select Zelle, direct deposit, or a virtual card.
Request Credit Monitoring Instructions: Enter your Login ID and PIN on the settlement website to sign up for an email alert. Once the settlement receives final court approval, you will receive an activation code and instructions to set up your free CyEx Financial Shield Complete subscription.
Update Your Mailing Address: If you have moved since receiving initial notices from Olinsky & Associates, update your mailing address on the portal to ensure your physical check reaches you if you do not select a digital payment option.
If you are a class member, keep the following dates in mind to protect your legal rights:
Opt-Out Deadline: October 26, 2026 — Deadline to exclude yourself from the settlement if you wish to retain the right to sue Olinsky & Associates individually.
Objection Deadline: October 26, 2026 — Deadline to submit a written objection to the court regarding the terms of the settlement.
Payment Election Deadline: December 2, 2026 — Deadline to select a digital payment method (Zelle, ACH, or prepaid card) or update your address online.
Final Approval Hearing: December 2, 2026 — The court will hold a hearing to decide whether to grant final approval to the settlement agreement.
Settlement payments and credit monitoring activation codes will be distributed approximately 60 days after the court grants final approval and any potential appeals are resolved.
When consumers share personal, health, and financial information with law firms, they do so under the expectation that their data will be safeguarded. Laws governing negligence, contract obligations, and health data privacy require organizations to maintain industry-standard administrative, physical, and technical safeguards.
When data breaches occur, affected individuals often expend significant time and resources monitoring their accounts, freezing credit reports, and managing potential identity theft. Class action litigation allows everyday consumers to band together, hold corporations and professional organizations accountable, and recover compensation for exposed privacy.
If you received a notice regarding the Olinsky & Associates data breach, here is how you can protect yourself and secure your benefits:
Locate Your Notice: Check your mail or files for the official settlement notice containing your Login ID and PIN.
Visit the Official Settlement Website: Go to [www.OlinskyDataSettlement.com](https://www.OlinskyDataSettlement.com) or call the toll-free helpline at 1-877-723-7125 to select your preferred payment method before December 2, 2026.
Monitor Your Credit Reports: Request free copies of your credit reports at AnnualCreditReport.com and review them for unauthorized accounts or inquiries.
Seek Experienced Legal Counsel: If you suffered substantial financial loss or identity theft exceeding the standard settlement benefits, you have no obligation to accept the settlement and can consult an attorney to explore individual legal options.
New cases and investigations, settlement deadlines, and news straight to your inbox.
