Cadence Bank Data Breach Settlement: $5.25 Million, Claim Deadline Passed
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The Cadence Bank data breach settlement is the $5.25 million deal that resolves the MOVEit hack of May 2023 for about 869,411 people Cadence notified. The claim deadline was June 4, 2026, and it has passed. The final approval hearing was set for July 9, 2026. Payments go only to people who filed a valid claim, and only after approval becomes final.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Cadence Bank Lawsuit Was About
Cadence Bank used MOVEit Transfer, a third-party file-transfer application licensed by Progress Software, in its ordinary business. Between May 28 and May 31, 2023, outsiders exploited an alleged vulnerability in MOVEit and reached files containing customers' personally identifying information. Cadence began mailing notices on or about September 15, 2023.
The Cadence Bank class action lawsuit alleges that the bank's data security practices were negligent. Cadence denies any wrongdoing and agreed to settle to avoid the cost and risk of trial. Claims against Progress Software itself were not part of this deal and continue separately.
Case Details
The case is Pratt v. Cadence Bank, No. 1:23-cv-12996-ADB, filed December 6, 2023 in the U.S. District Court for the District of Massachusetts. It is coordinated with the nationwide MOVEit litigation, In re: MOVEit Customer Data Security Breach Litigation, No. 1:23-md-03083, before Judge Allison D. Burroughs. The settlement agreement is dated December 15, 2025; the judge granted preliminary approval on January 5, 2026 (ECF No. 1661). The court-appointed administrator is Simpluris, and the official site is MOVEitCadenceSettlement.com.
Status: Claims Closed, Final Approval Pending Confirmation
We could not confirm a final approval order or a payment date as of October 8, 2026. The official site says payments are made only after approval becomes final and any appeals are resolved, and that updates will be posted there. If you filed a claim, that site is where the payment date will appear.
Who Is Covered by the Cadence Bank Settlement
The settlement class is all persons in the United States who were notified by Cadence Bank that their personally identifying information was included in files affected by the MOVEit Data Breach — roughly 869,411 people by the settlement agreement's estimate.
The test is the letter. If Cadence notified you about the Cadence Bank data breach in 2023, you are in the class unless you opted out by May 5, 2026. Being a Cadence customer without a notice does not put you in it. Class members who did not file a claim by June 4, 2026 get no payment but are still bound by the release.
What the Cadence Bank Settlement Pays
Documented losses: ordinary losses up to $2,500 (including lost time, per ClassAction.org up to four hours at $25 per hour) and extraordinary losses up to $10,000, with proof required.
Alternative cash payment: $100, which rises or falls pro rata depending on how many valid claims were filed.
Any claimant could also choose two years of credit monitoring and identity theft protection. Nothing is paid until the approval is final. If you did not file by June 4, 2026, there is no late route to money.
How cases like this one end
Our copy of the federal courts’ own case database covers 111,990 other personal injury casesclosed in U.S. federal district courts between 2015 and 2025, 3.6% of them filed as class actions:
- 39.9% ended in a settlement recorded by the court. Another 13.8% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 39.9% and 53.7%.
- 5.7% were decided on a motion before any trial.
- 1 in 106 reached a trial (0.9%), after a median of 23.9 months.
- Median time from filing to the end of the case: 9 months.
- Only 771 of them (0.7%) record a money award at all; the median of those is $500,000.
These are base rates for this type of case (federal other personal injury cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Cadence Bank Data Breach Timeline
- 1
May 28–31, 2023 — The MOVEit Breach
Attackers exploit an alleged flaw in the MOVEit Transfer application that Cadence used, reaching files with customers' personal information.
- 2
September 15, 2023 — Notices Go Out
Cadence begins notifying affected people on or about this date. Those letters later define who is in the class.
- 3
December 6, 2023 — Pratt v. Cadence Bank Filed
The class action is filed in Massachusetts federal court as No. 1:23-cv-12996 and coordinated with the MOVEit litigation before Judge Burroughs.
- 4
January 5, 2026 — Preliminary Approval
The court preliminarily approves the $5.25 million settlement signed December 15, 2025. Notices are mailed March 6, 2026.
- 5
June 4, 2026 — Claim Deadline Closes
The last day to file online or by postmarked mail. The opt-out and objection deadline had already passed on May 5, 2026.
- 6
July 9, 2026 — Final Approval Hearing
The hearing on final approval was scheduled for this date. As of October 2026 we had not confirmed the ruling or a payment date.
Three Things to Watch For
A closed claim period and a pending payout is when fake “Cadence settlement” messages work best:
“Late claim” or “reopened deadline” offers
The claim deadline was June 4, 2026. A site or email offering to file a Cadence Bank settlement claim now, for a fee or in exchange for your Social Security number, is not the administrator.
“Confirm your bank details to release your payment”
Claimants chose check or electronic payment on the claim form. If a message asks you to re-enter your Cadence account login or card number, call Simpluris at (833) 647-9001 — the number on the official site — instead of replying.
Look-alike settlement sites
The only official site is MOVEitCadenceSettlement.com, which used the unique ID and PIN printed on your notice. Many blogs copy its wording; none of them can file or pay anything.
Cadence Bank Settlement — Questions People Actually Ask
Is the Cadence Bank data breach settlement real?
Yes. It is a $5.25 million class settlement in Pratt v. Cadence Bank, No. 1:23-cv-12996, part of the MOVEit litigation in the District of Massachusetts. The administrator is Simpluris and the official site is MOVEitCadenceSettlement.com.
Can I still file a claim?
No. The claim deadline was June 4, 2026, online or postmarked. Claims filed after that date are not accepted under the settlement terms.
When will Cadence settlement payments be sent?
Only after the court grants final approval and any appeals are resolved. The final approval hearing was scheduled for July 9, 2026. As of October 8, 2026 we could not confirm a final order or a payment date; the official site posts updates.
How much will I get?
It depends on your claim. Documented ordinary losses up to $2,500, extraordinary losses up to $10,000, or a $100 alternative cash payment that may be adjusted pro rata. Credit monitoring was available on request.
Who is in the class?
Everyone in the United States whom Cadence Bank notified that their personal information was in files affected by the MOVEit breach — about 869,411 people per the settlement agreement.
I am a Cadence customer but never got a letter. Am I included?
Probably not. The class is defined by the notice from Cadence, not by being a customer. If you are unsure, the administrator answers that question at (833) 647-9001.
Does this settlement end the case against Progress Software?
No. Only the claims against Cadence are resolved. Claims against Progress Software, the licensor of MOVEit Transfer, continue in the MOVEit litigation.
Did Cadence admit wrongdoing?
No. The lawsuit alleged negligent data security practices; Cadence denies the allegations and settled to avoid the cost and risk of trial. The court did not decide who was right.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements still accepting claims, sorted by deadline
Bank of America MOVEit Settlement
Another bank caught in the same 2023 MOVEit attack
Data Breach Settlement Calculator
Estimate what a data breach claim typically pays
Settlement Payout Calculator
How fund size and claim rates shape per-person payments