Ally Financial Lawsuit: The FBCS Data Breach Case, and Why There Is No Claim Form
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The Ally Financial lawsuit people are searching for is a data breach class action. It says a debt collector Ally used, Financial Business and Consumer Solutions (FBCS), was hacked in February 2024 and that Ally customers' Social Security numbers were taken. As of October 2026 there is no Ally Financial settlement, no claim form and no deadline. Ally's large past settlements closed years ago.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Ally Financial Class Action Lawsuit Says
The Ally Financial class action lawsuit is about a vendor. FBCS is a debt collection agency in Hatboro, Pennsylvania that collects credit card, consumer loan and auto debts for lenders. According to FBCS's own account, quoted in the complaints, an outsider had access to its network between February 14 and February 26, 2024. FBCS announced the breach on April 26, 2024.
The Ally case was filed by Robert Hamilton. It alleges that the breach exposed the personal information of more than 4.2 million Ally customers: names, Social Security numbers, dates of birth and account details. The complaint says the data was not encrypted or redacted. It also alleges that Ally failed to check whether FBCS could keep that data safe before handing it over. The claims are negligence, negligence per se, breach of express and implied contract, and unjust enrichment. These are allegations. No court has found Ally or FBCS liable.
Case Details
The main Ally Financial data breach case is Hamilton, et al. v. Ally Financial Inc., et al., No. 2:25-cv-00629 in the U.S. District Court for the Eastern District of Pennsylvania. It was filed on February 5, 2025 against Ally Financial Inc., Ally Bank and FBCS. A docket listing names Judge Nitza I. Quiñones Alejandro, but we could not open the docket itself to confirm this.
The same court already oversees the main FBCS case, Reichbart v. Financial Business and Consumer Solutions, Inc., No. 24-cv-1876. On July 18, 2024 the court consolidated 17 related FBCS suits into it. That case covers everyone in the FBCS breach, not only Ally customers. FBCS has put the number of people affected at 3,226,631.
Two earlier Ally suits were filed in North Carolina federal court in September 2024. Owens v. Ally Bank, No. 3:24-cv-00811, was voluntarily dismissed with prejudice on February 17, 2025. A separate North Carolina filing, Hamilton v. Ally Financial, No. 3:24-cv-00818, came before the Pennsylvania case.
Status: Pending, No Ally Financial Settlement
We could not see the current docket entries for No. 2:25-cv-00629, so we cannot tell you whether it is still pending on its own, has been joined with the FBCS case, or has been dismissed. Ally's quarterly report for the period ending June 30, 2026 does not single out this case. It says Ally does not expect its pending lawsuits to be material to its finances.
Some sites have listed an “Ally Financial settlement” for this breach. That listing does not match any approved settlement we could find.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is in the Proposed Class
The Hamilton complaint asks for a nationwide class of people whose information was exposed in the Ally Financial data breach. In practice, that means Ally customers whose files had been passed to FBCS, usually because an account had gone to collection.
Check your mail from spring and summer 2024. FBCS mailed breach notices starting April 26, 2024. If you got one that names Ally, keep the letter and the envelope. It is your best proof that you belong to any future class.
You do not have to sign up for a class action. If a class is certified or a settlement is approved, a court-appointed administrator notifies class members.
What You Can Get Right Now: Nothing Yet
Ally's earlier payouts are finished, and you cannot file a claim in them now:
Repossession notices: a $787.5 million settlement in Ally Financial Inc. v. Haskins, a Missouri state court case, received final approval on August 31, 2021. It paid class members automatically, with no claim form.
Auto loan pricing: in a 2013 order, the CFPB required Ally to pay $80 million in damages and $18 million in penalties. The CFPB lists that action as terminated.
For data breaches like this one, settlements have usually repaid documented losses and given smaller flat payments. Our data breach settlement calculator shows what comparable cases paid. It is not a prediction for this case.
How cases like this one end
Our copy of the federal courts’ own case database covers 15,171 other personal property damage casesclosed in U.S. federal district courts between 2015 and 2025, 10.4% of them filed as class actions:
- 33.2% ended in a settlement recorded by the court. Another 19.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 33.2% and 52.3%.
- 5.9% were decided on a motion before any trial.
- 1 in 90 reached a trial (1.1%), after a median of 27.4 months.
- Median time from filing to the end of the case: 8.5 months.
- Only 236 of them (1.6%) record a money award at all; the median of those is $496,000.
These are base rates for this type of case (federal other personal property damage cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Ally Financial Data Breach Timeline
- 1
February 14–26, 2024 — FBCS Is Breached
Per FBCS's account in the complaints, an outsider has access to the debt collector's network. FBCS finds the intrusion on February 26.
- 2
April 26, 2024 — Notices Go Out
FBCS announces the breach and files notice with the Maine Attorney General. FBCS later raises the count of people affected to 3,226,631.
- 3
July 18, 2024 — FBCS Suits Consolidated
The Eastern District of Pennsylvania consolidates 17 FBCS breach suits under Reichbart v. FBCS, No. 24-cv-1876.
- 4
September 2024 — Ally Sued in North Carolina
Owens v. Ally Bank (No. 3:24-cv-00811) and Hamilton v. Ally Financial (No. 3:24-cv-00818) are filed in the Western District of North Carolina.
- 5
February 2025 — Hamilton Filed in Pennsylvania
Hamilton v. Ally Financial, No. 2:25-cv-00629, is filed in the Eastern District of Pennsylvania on February 5 against Ally and FBCS. Owens is voluntarily dismissed with prejudice on February 17.
- 6
October 2026 — No Settlement
No settlement, administrator, claim form or deadline has been announced in the Ally or FBCS breach cases.
Three Things to Watch For
The FBCS breach exposed people who already had an account in collection. Scammers target that group:
“Ally settlement claim” pages
There is no Ally Financial data breach settlement, so there is no real claims page. A site asking for your Social Security number or Ally account number to “file” is collecting your data, not filing a claim.
Calls about a debt that cite the breach
The stolen files came from a debt collector, so callers may know a real balance or account number. Do not pay over the phone. Ask for written validation of the debt, and call Ally on the number printed on your statement.
Fake Ally text alerts
Messages saying your Ally account is locked “because of the data breach” and linking to a login page are phishing. Log in only through the Ally app or a site address you type in yourself.
Ally Financial Lawsuit — Questions People Actually Ask
What is the Ally Financial lawsuit about?
The current Ally Financial lawsuit is a data breach class action. It alleges that FBCS, a debt collector Ally used, was breached in February 2024 and that the personal information of more than 4.2 million Ally customers was exposed. The case is Hamilton v. Ally Financial Inc., No. 2:25-cv-00629, in the Eastern District of Pennsylvania.
Is there an Ally Financial settlement I can claim from?
No. As of October 2026 there is no Ally Financial settlement for the data breach, no claim form and no deadline. Ally's older settlements over repossession notices and auto loan pricing closed years ago.
Is there a class action lawsuit Ally Financial customers can join?
You do not join a class action by registering anywhere. If the court certifies a class or approves a settlement, a court-appointed administrator notifies class members, who are included automatically unless they opt out.
Was Ally itself hacked?
According to the complaint, the breach happened at FBCS, the debt collector, not inside Ally's own systems. The lawsuit alleges Ally is responsible because it handed unencrypted customer data to a vendor it did not properly vet. Ally has not admitted that.
What data was exposed in the Ally Financial data breach?
The Hamilton complaint lists names, Social Security numbers, dates of birth and account details. FBCS said the stolen data varied by person and could also include addresses and driver's license numbers. Your own notice letter says which fields applied to you.
How do I know if I was affected?
FBCS sent notice letters starting April 26, 2024. A letter that names Ally means your file was involved. If you had an Ally account sent to collection but never got a letter, that alone does not prove you were in the breach.
What happened to the other Ally Financial class action cases?
Owens v. Ally Bank, a 2024 data breach suit in North Carolina, was voluntarily dismissed with prejudice on February 17, 2025. A 2021 suit over a coding error that exposed usernames and passwords, De Medicis v. Ally Bank (No. 7:21-cv-06799, S.D.N.Y.), was dismissed after the judge found no injury had been shown.
What should I do right now?
Freeze your credit at all three bureaus. It is free and you can undo it. Keep any FBCS notice letter. Treat any call or message about an Ally debt or an Ally settlement with suspicion until you have checked it through Ally directly. See our list of open class action settlements for settlements that are actually taking claims.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements that are taking claims right now, with deadlines
Data Breach Settlement Calculator
What comparable breach settlements have paid per person
Comcast Xfinity Data Breach
Another company whose customer data was exposed through a vendor
OneMain Financial Lawsuit
A different consumer lender and its separate case