Cox Enterprises Data Breach Lawsuit: A Settlement Notice, but No Claim Form Yet
Active Litigation
Claim deadline is October 21, 2026 · as of Oct 14, 2026
The Cox Enterprises data breach came through Oracle’s E-Business Suite, the back-office software Cox uses. Hackers got in between August 9 and 14, 2025, and Cox sent notice letters to 9,479 people. The Georgia lawsuit against Cox was dropped in December 2025. The claims against Cox continued inside a consolidated Oracle case in Texas, where a notice of settlement as to Cox was filed on June 18, 2026. As of October 14, 2026, no settlement website, claim form or deadline for Cox has been published.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
Can I Still File?
The claim deadline, what the settlement pays and where to file — plus other settlements still taking claims.
No. The claim deadline was October 21, 2026.
Other settlements with open claim windows
- Gabapentin Lawsuit$533M · claim by November 9, 2026
- RealPage Settlement$359.9 million · claim by January 29, 2027
- RealPage Payout Date$359.9M · claim by January 29, 2027
We are not a claims administrator and not affiliated with any settlement. File only at the official settlement website — filing is always free.
What Happened and What the Lawsuits Say
According to Cox’s own notice letter, Cox became aware of suspicious activity in Oracle’s E-Business Suite on September 29, 2025. Cox uses that platform for some of its back-office operations. Criminals had exploited a previously unknown (“zero-day”) flaw in it between August 9 and 14, 2025. Cox says the same flaw “affected many companies that use Oracle’s systems.” Other confirmed victims include Logitech, the Washington Post, GlobalLogic, Envoy Air and Harvard University.
On October 31, 2025, Cox determined that personal information may have been involved. Letters dated November 20, 2025 went to 9,479 people, according to the filing reported to the Maine Attorney General. The sample letter lists your name and blacks out the other fields, so your own letter is the only record of what was exposed for you. Cox has not named the attackers. A ransomware group claimed the attack and, by its own claim, posted Cox files on its leak site on October 27, 2025.
The first Cox Enterprises data breach lawsuit alleges that Cox failed to protect unencrypted personal information. It pleads negligence, breach of implied contract and unjust enrichment, and it also alleges the notice came late. These are allegations, and Cox has not admitted them.
Case details
Georgia (closed). Barnes v. Cox Enterprises, Inc., No. 1:25-cv-06871, was filed on December 1, 2025 in the U.S. District Court for the Northern District of Georgia and assigned to Judge Steven Daniel Grimberg. The plaintiff voluntarily dismissed it without prejudice on December 22, 2025, and the case was closed on December 30, 2025.
Texas (active). The claims against Cox continued in the Western District of Texas. There, suits like Barnes v. Oracle Corporation, No. 1:25-cv-01935, filed November 26, 2025, named both Oracle and Cox as defendants. The Texas cases were folded into In re Oracle Corporation Data Breach Litigation, No. 1:25-cv-01805, and the individual dockets were closed on January 5, 2026. That case is assigned to Judge Alan D. Albright, with Magistrate Judge Susan Hightower. It runs as a hub-and-spoke case: Oracle is the hub, and companies that ran its software, including Cox, are co-defendants. On June 18, 2026, two plaintiffs filed a “Notice of Settlement as to Cox Enterprises, Inc.” On October 13, 2026, the court entered an order on a motion to stay.
Status: Settlement Notice Filed, No Claims Process
If it turns out to be a class settlement, the judge must first grant preliminary approval. Notice would then go to class members, with a claim deadline. If it settles only the named plaintiffs’ own claims, nothing is paid to anyone else. Either way, there is nothing to file today.
Another company in the same case shows what a class deal looks like: Dartmouth College settled its part for $750,000, with its own administrator and a claim deadline of October 21, 2026. Nothing comparable has been published for Cox.
Don't miss the claim deadline
Claims are due by October 21, 2026. We'll email you 7 days and 1 day before the deadline.
Who Could Be Covered
The Georgia complaint proposed a nationwide class of people whose information was compromised in the breach, “including anyone who received a notice from Cox Enterprises.” That means the 9,479 letter recipients.
Your letter is the test. Look for a letter from Cox Enterprises, Inc. dated November 20, 2025 that mentions Oracle’s E-Business Suite. Keep it: it lists the fields involved and would be your proof of membership. If you are a Cox Communications or Cox Automotive customer and did not get a letter, you are probably not part of this group. Cox’s notice describes back-office business systems, not customer accounts.
Is There Money?
For context only: the Dartmouth settlement in the same Oracle case offers up to $5,000 for documented losses, an alternative pro rata cash payment and credit monitoring. That is one $750,000 deal for another defendant, not a prediction for Cox. Cox’s own offer was 12 or 24 months of free IDX credit monitoring, depending on the letter, with an enrollment deadline of February 20, 2026. That deadline has passed. To estimate a typical payout once terms exist, try the data breach settlement calculator.
How cases like this one end
Our copy of the federal courts’ own case database covers 129,730 other contract casesclosed in U.S. federal district courts between 2015 and 2026, 6% of them filed as class actions:
- 30.7% ended in a settlement recorded by the court. Another 20.2% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 30.7% and 50.9%.
- 7.5% were decided on a motion before any trial.
- 1 in 72 reached a trial (1.4%), after a median of 29.3 months.
- Median time from filing to the end of the case: 7.6 months.
- Only 7,691 of them (5.9%) record a money award at all; the median of those is $407,000.
These are base rates for this type of case (federal other contract cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Cox Enterprises Data Breach Timeline
August 9–14, 2025 — The Intrusion
Criminals exploit a zero-day flaw in Oracle’s E-Business Suite, which Cox uses for back-office operations.
September 29, 2025 — Cox Spots It
Cox becomes aware of suspicious activity. Oracle releases a patch on October 5, and a ransomware group posts Cox on its leak site on October 27.
November 20, 2025 — Letters Go Out
Cox mails notices to 9,479 people and offers free IDX credit monitoring, with an enrollment deadline of February 20, 2026.
December 2025 — Georgia Suit Filed and Dropped
Barnes v. Cox Enterprises (1:25-cv-06871) is filed on December 1 in the Northern District of Georgia and voluntarily dismissed without prejudice on December 22.
January 5, 2026 — Texas Consolidation
Texas suits naming Cox alongside Oracle are closed as separate dockets and continue in In re Oracle Corporation Data Breach Litigation, 1:25-cv-01805.
June 18, 2026 — Settlement Notice as to Cox
Plaintiffs tell the court the claims against Cox are settled. As of October 14, 2026, no terms, administrator or claim form are public.
Three Things to Watch For
A settlement notice with no published terms leaves a gap that imposters like to fill:
“Claim your Cox settlement” sites
No Cox claims site exists yet. A real one will be named in a court-approved notice and will ask for the ID printed on that notice. It will not ask for your full Social Security number up front.
Callers posing as Cox or IDX
The genuine notice line printed in Cox’s letter is 1-833-778-2773. Call that number yourself rather than trusting an incoming call. The IDX monitoring Cox offered is free to enroll in.
Mixing it up with Cox Communications billing cases
Ads for Cox internet or TV pricing claims are a different matter. They are not the data breach, and a payout there says nothing about this case. Check which case a message actually names before giving any details.
Cox Enterprises Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Cox Enterprises data breach settlement?
A notice of settlement as to Cox was filed on June 18, 2026 in In re Oracle Corporation Data Breach Litigation, No. 1:25-cv-01805 (W.D. Tex.). As of October 14, 2026, no settlement terms, fund, administrator, claim form or deadline have been published, and no court has approved anything.
How many people were affected?
Cox notified 9,479 individuals, according to the filing reported to the Maine Attorney General and the notice letters dated November 20, 2025.
What data was exposed?
The public sample letter confirms your name and blacks out the other fields, which varied from person to person. Your own letter lists what applied to you.
Was a lawsuit filed against Cox?
Yes. Barnes v. Cox Enterprises, Inc., No. 1:25-cv-06871 (N.D. Ga.), was filed on December 1, 2025 and voluntarily dismissed without prejudice on December 22, 2025. Cox was also named alongside Oracle in Texas suits that are now part of the consolidated Oracle case, No. 1:25-cv-01805.
I got a letter. Do I need to do anything now?
There is nothing to file. If a class settlement is approved, notice goes to class members directly. Keep your letter and your current mailing address on file, and check our open settlements list for new filings.
Was Cox hacked, or was it Oracle?
Both, in a sense. The attackers used a flaw in Oracle’s E-Business Suite software, and Cox’s copy of that software was the one accessed. That is why the lawsuits name Oracle as the hub and Cox as one of many co-defendant companies.
Is this the Cox Communications price case?
No. Separate claims say Cox Communications charged more for internet and TV plans than advertised. That has nothing to do with the breach. Other pages on our site that mention Cox companies, such as trucking accident lawsuits, Wheeler accident, Sony and Saks, cover unrelated matters.
What is worth doing right now?
Freeze your credit at all three bureaus; it is free and reversible. Review your bank and card statements. Treat any message about a “Cox settlement” that does not cite a court-approved notice as suspect.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Data Breach Settlement CalculatorEstimate what a breach settlement could pay per person
- Settlement Payout CalculatorHow fund size and claim rates shape individual payments
- Oracle Health Data Breach LawsuitA separate Oracle breach case, not the E-Business Suite one