Subscribe To Our Newsletter
Subscribe To Our Newsletter
Denver-based manufactured housing operator Yes Communities, LLC has agreed to a class action settlement to resolve claims that it failed to protect sensitive consumer data during a December 2024 cyber incident.
Real estate operating company Yes Communities, LLC has agreed to a class action settlement following allegations that it failed to protect sensitive personal and financial data during a December 2024 security incident. The court-approved deal resolves claims for 10,675 consumers nationwide whose private records were exposed to unauthorized hackers.
Yes Communities, LLC—a Denver, Colorado-based real estate investment and management company that owns and operates affordable manufactured home communities across 23 states—experienced a major security incident in late 2024. According to court filings and state regulatory reports, an unauthorized third party gained access to the company’s internal network servers between December 9, 2024, and December 11, 2024.
During the cyberattack, unauthorized actors accessed and copied sensitive digital files containing private consumer records. Yes Communities detected the suspicious activity on its network and launched an internal investigation with cybersecurity specialists to assess the scope of the exposure.
By January 9, 2025, the company completed its preliminary data review to identify which individuals were impacted. On February 24, 2025, Yes Communities began mailing official data breach notification letters to affected residents and applicants nationwide.
Court documents confirm that the private information of 10,675 people was stored on the compromised network systems during the incident.
The personal and financial information exposed during the December 2024 cyberattack includes highly sensitive data points that place consumers at heightened risk for identity theft and financial fraud.
According to regulatory filings submitted to state authorities, the compromised data elements include:
Full legal names
Current and past residential addresses
Social Security numbers
Driver’s license numbers and state identification cards
Financial account information and banking details
When unauthorized third parties gain access to Social Security numbers and financial account details, everyday people face long-term risks of unauthorized credit applications, fraudulent loan sign-ups, and tax identity theft.
Following the notification letters sent in early 2025, affected consumers filed a federal class action lawsuit, O’Leary v. Yes Communities, LLC (Case No. 1:25-cv-00692), in the U.S. District Court for the District of Colorado.
Plaintiffs in the lawsuit alleged that Yes Communities failed to implement reasonable cybersecurity safeguards to protect the sensitive personal identifiable information (PII) entrusted to it by residents and prospective community members. The lawsuit asserted that the company stored sensitive files in an unencrypted or inadequately protected format on its network, leaving data vulnerable to foreseeable cyber intrusion.
Plaintiffs further claimed that affected individuals suffered concrete injuries, including time spent monitoring financial accounts, out-of-pocket costs incurred to prevent identity theft, and a heightened ongoing risk of fraud.
Yes Communities denies all allegations of legal liability, wrongdoing, and failure to safeguard customer data. No court or judicial body has ruled that Yes Communities acted unlawfully or violated consumer privacy statutes. Instead, both parties agreed to enter into a class action settlement to resolve the claims and avoid the substantial expense and delay of trial litigation.
On July 22, 2026, the court granted preliminary approval to the class action settlement agreement. The deal provides multiple forms of financial relief and identity protection services for eligible class members.
Settlement class members can select from the following cash and credit monitoring options:
Class members who experienced actual, unreimbursed financial losses directly linked to the data breach can file a claim to receive up to $2,500 in cash reimbursement. Covered expenses include unreimbursed fraud charges, fees paid for credit reports or credit freezes, professional fees for identity restoration services, and related out-of-pocket costs. Claimants must submit supporting receipts, bank statements, or official documentation along with their claim form.
Class members can claim reimbursement for up to four hours of lost time spent dealing with issues related to the cyber incident, calculated at a rate of $20 per hour (for a maximum payment of $80). This benefit can be claimed in addition to documented financial loss claims.
In lieu of submitting documentation for out-of-pocket losses or lost time, class members can choose to receive an alternative flat cash payment of $50. No proof or receipts are required to receive this baseline cash payment.
All settlement class members, regardless of whether they choose a cash payout option, are eligible to enroll in three years of free, single-bureau credit monitoring services provided through IDX. This service includes continuous credit bureau monitoring, dark web scan alerts, and fully managed identity restoration assistance.
| Settlement Benefit Option | Maximum Payment Value | Requirements / Conditions |
| Documented Loss Reimbursement | Up to $2,500 | Requires receipts, bank statements, or proof of fraud |
| Lost Time Reimbursement | Up to $80 ($20/hr, max 4 hrs) | Self-certification of time spent remedying breach issues |
| Alternative Flat Cash Option | $50 flat cash | No documentation required (in lieu of loss/lost time) |
| IDX Credit Monitoring | 3 Years Free Service | Available to all class members who elect coverage |
Under federal consumer protection standards and state data privacy laws, commercial real estate operators and property management firms hold a legal responsibility to protect the confidential information collected from tenants and job applicants.
When companies gather Social Security numbers, banking information, and background check records, they are expected to enforce industry-standard digital encryption, access controls, and network monitoring protocols.
When digital security systems fall short, class action litigation serves as a vital tool for everyday people. Individual consumers rarely have the resources to battle large corporations single-handedly, but class action lawsuits level the playing field—allowing affected individuals to join forces, hold companies accountable, and recover meaningful compensation for compromised privacy.
You may be eligible to participate in the settlement if you meet the specific court-defined class criteria:
Settlement Class Definition: You are a member of the settlement class if you reside in the United States and were sent an official notice letter by Yes Communities indicating that your private information was impacted during the December 2024 data breach.
If you received a data breach notification letter in the mail or via email from Yes Communities in or around February 2025, you are formally recognized as an impacted class member and will have the right to submit a claim for settlement benefits once the official portal opens.
The court-approved settlement website is currently being prepared by the settlement administrator and will be launched shortly to accept claims.
Here are the essential steps to prepare your claim once the settlement portal is active:
Locate Your Notice Letter: Find the original data breach notice sent by Yes Communities to retrieve your unique Settlement Notice ID or Claim ID.
Select Your Payout Option: Decide whether you want to file for documented out-of-pocket financial losses (up to $2,500), lost time reimbursement ($20 per hour), or the hassle-free $50 alternative flat cash payment.
Gather Proof if Filing Loss Claims: If you suffered financial fraud or paid out-of-pocket expenses to protect your credit, collect bank statements, police reports, or receipts to attach to your claim form.
Enroll in Credit Monitoring: Check the appropriate selection box on your claim form to activate your three years of complimentary IDX credit monitoring.
Submit Before the Deadline: Submit your claim form online through the official settlement website or mail a printed paper form postmarked prior to the court’s official submission deadline.
The court will review the settlement terms during an upcoming final approval hearing to determine whether the deal is fair, reasonable, and adequate. Cash distributions and credit monitoring enrollment codes will be issued after final court approval is granted and any legal appeals are resolved.
New cases and investigations, settlement deadlines, and news straight to your inbox.
