Doxim Data Incident Settlement: What That Postcard From Your Credit Union Means
Doxim prepares account statements and tax forms for credit unions — and a December 2023 breach of its network exposed data of about 1.1 million members, including Social Security numbers. A $5.5 million settlement is now open; postcard notices started mailing in late July 2026. Claims are due October 13, 2026.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Alleges
Doxim, Inc. is a customer-communications vendor that prepares account statements and tax forms for credit unions and banks — most members have never heard its name. On December 30, 2023, Doxim detected that an unauthorized actor had accessed the part of its network supporting credit union services and removed files containing members' names, addresses, account numbers, and Social Security numbers. Six class actions filed from June 2024 were consolidated as In re Doxim, Inc. Data Security Incident Litigation, also naming credit unions Credit Union ONE and Beacon Credit Union; members of other Doxim clients (including Truliant Federal Credit Union and Financial Plus Credit Union) are covered by the settlement class as well. Doxim denies wrongdoing but agreed to a $5.5 million non-reversionary settlement.
Case Details
U.S. District Court for the Eastern District of Michigan, Southern Division. Case No. 2:24-cv-11550 (In re Doxim, Inc. Data Security Incident Litigation, Hon. Terrence G. Berg). Settlement administrator: Doxim Data Incident Settlement Administrator, P.O. Box 2509, Portland, OR 97208-2509, phone 1-877-318-7817.
Current Status
Don't miss the claim deadline
Claims are due by October 13, 2026. We'll email you 7 days and 1 day before the deadline.
How to File — and How to Reach the Administrator
You do not need a lawyer and you do not pay anything. Claims go directly to the court-appointed administrator. Anyone who asks you for a fee to file, or to “check your status”, is not the administrator.
The official, court-authorized settlement website is doximdatasecuritysettlement.com — type that address into your browser yourself rather than following a link from an email or a text message.
The court-appointed administrator is Epiq.
If you cannot find your postcard notice or the claim form will not accept your details, contact the administrator directly:
- By phone: 1-877-318-7817
- In writing: the “Contact” link at the bottom of the official settlement website
The claim deadline is October 13, 2026.
Settlement Insight is not the administrator and has no access to their claimant records, so we cannot look up your ID or check your claim for you.
Who Is Affected & Can You Join?
The class covers all living U.S. residents identified by Doxim who were sent notice — by Doxim or by their credit union — that their information was involved in the December 2023 incident. If you received the 2024 breach letter or the new 2026 settlement postcard, you are in the class. Your credit union's own systems were not breached; Doxim held your data because it produced your statements.
Is There a Payout?
Case Timeline
- 1
December 30, 2023: Breach detected
Doxim detects suspicious activity in the network segment serving credit unions, takes systems offline, and brings in forensic investigators. Files containing member data — including Social Security numbers — had been removed.
- 2
May–June 2024: Letters & lawsuits
Doxim and affected credit unions begin mailing breach letters on May 31, 2024, offering 12 months of Kroll credit monitoring. The first of six class actions is filed June 13, 2024; they are later consolidated in the Eastern District of Michigan.
- 3
November 7, 2025: Mediation deal
After motions to dismiss and a full-day mediation, the parties agree on material settlement terms; the amended settlement agreement is filed with the court on May 5, 2026.
- 4
June–July 2026: Approval & postcards
Preliminary approval lands June 5, 2026. The settlement site goes live around July 24, 2026 and postcard notices start reaching ~1.1 million members — triggering the current wave of questions.
- 5
October 13 → October 28, 2026: Deadlines
Claims are due October 13, 2026; opt-outs and objections around September 28. The final approval hearing is October 28, 2026 — payments follow only after approval is final and appeals resolve.
Scam & Misinformation Warnings
Whenever a brand lawsuit goes viral, scam sites and bad actors follow. Watch for these red flags:
The postcard is real — but verify the URL
The only official claim portal is doximdatasecuritysettlement.com. Type it yourself rather than following links in unexpected emails, and never pay anyone to file for you.
Opt-outs only work by mail
Exclusion requests must be mailed — anyone claiming they can opt you out (or get you paid faster) by phone or email for a fee is not legitimate.
SSNs were exposed — watch for impersonation
Treat unexpected calls or emails claiming to be your credit union about "the Doxim breach" with suspicion — go directly to your credit union's site or the official settlement portal. A free credit freeze at the three bureaus blocks new-account fraud.
Frequently Asked Questions
I got a postcard about a Doxim settlement — is it legitimate?
Yes. Postcard notices from the court-appointed administrator started going out in late July 2026 after the settlement's June 5, 2026 preliminary approval. File at doximdatasecuritysettlement.com or call 1-877-318-7817.
How much will I get?
Either up to $5,000 with documentation of actual losses, or a pro-rata cash payment (estimated around $100; the final amount depends on claim volume) — and you can additionally elect one year of credit monitoring either way.
Why does Doxim have my data if I've never heard of them?
Doxim produced account statements and tax forms on behalf of credit unions — including Credit Union ONE, Beacon, Truliant, and Financial Plus. Your credit union sent member data to Doxim for that purpose; the breach hit Doxim's network, not your credit union's.
What are the deadlines?
Claims: October 13, 2026 (online by 11:59 p.m. ET or postmarked). Opt-out/objection: around September 28, 2026 (opt-out by mail only). Final approval hearing: October 28, 2026.
When will payments arrive?
Only after the October 28, 2026 final approval hearing, once approval is final and any appeals are resolved — realistically late 2026 into 2027.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Latest on This Case
What changed most recently — approvals, payment dates, deadlines, and the questions people keep asking.