Finastra Lawsuit: The $3.125 Million Data Breach Settlement
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Finastra is a bank software company, so many people in this case never dealt with it directly — Finastra’s customers are financial institutions. Files were taken from a Finastra file-transfer platform on October 31, 2024. The class action has settled for $3.125 million. Claims are due November 27, 2026, and nothing is paid before final approval.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Says Happened
Finastra Technology, Inc. is, in the words of the settlement agreement, a “Florida-based financial services software company that provides lending, payments, and universal banking services.” Banks and other financial institutions are its customers. That is why a Finastra letter can reach you even if you never heard the name.
According to the settlement agreement, an unauthorized third party accessed Finastra’s Secure File Transfer Platform at various times between October 31, 2024 and November 8, 2024, and took certain files on October 31. Finastra identified the incident on November 7, 2024. The settlement website says the files may have contained names, dates of birth, Social Security numbers and financial account numbers.
The lawsuit alleges Finastra failed to adequately protect that information. Finastra denies that it did anything wrong, and the court has not decided who is right.
Case Details
The settlement is in Tina Parsley Hughes, et al. v. Finastra Technology, Inc., Case No. CACE26013154, Circuit Court for Broward County, Florida. Judge Carlos A. Rodriguez granted preliminary approval on August 19, 2026 and appointed Simpluris as settlement administrator.
The case started in federal court. Suits filed from July 2025 in the Middle District of Florida were consolidated as Polak v. Finastra Technology, Inc., No. 6:25-cv-01284, before Judge Paul G. Byron. The parties mediated on June 2, 2026 and agreed to settle on June 17, 2026. Per the agreement, they “determined that jurisdiction was proper in state court,” so the federal case was dismissed and the settlement was filed in Broward County. We found one settlement class action for this breach, not two competing ones.
Status: Settled, Claims Open Until November 27, 2026
No money moves before then. The notice says: “Settlement payments will be distributed if the Court grants final approval, and after any appeals are resolved.” Our full breakdown of the Finastra settlement covers the fee request, the claim form and what a share might be worth.
Don't miss the claim deadline
Claims are due by November 27, 2026. We'll email you 7 days and 1 day before the deadline.
Am I in the Finastra Settlement?
The class is defined as “All living individuals residing in the United States who were sent notice by Defendant that their Private Information may have been impacted in the Data Incident.” In practice: if Finastra sent you a breach letter, you are in, unless you opt out.
Finastra’s notification to the California Attorney General is dated July 3, 2025, so most letters went out in summer 2025. Finastra’s customers are financial institutions, which is why the letter can feel random.
The settlement notice is the second letter. It came by email (or postcard) from the administrator and carries a LoginID and PIN for the online claim. Lost it? The administrator can resend it: email info@FinastraDataSettlement.com with your full name and mailing address, or call (866) 719-4418.
What the Finastra Customer Data Lawsuit Payout Looks Like
Documented losses: up to $2,500. Out-of-pocket losses from the breach between October 31, 2024 and November 27, 2026, with proof such as bank statements or receipts. Notes you write yourself “alone are not enough.”
Or a pro rata cash share, no proof needed. An equal split of what is left among everyone who chooses it. As of October 2026, no estimate has been posted; the administrator says one will appear on the settlement website.
Plus credit monitoring: one year of CyEx Financial Shield Complete, with $1 million of financial fraud insurance, for anyone who claims it.
Be realistic: $2,500 is a ceiling for proven losses, not a typical payment. With a fund this size and a class in the hundreds of thousands, a no-proof share is likely to be modest. Try the data breach settlement calculator for a rough sense of scale.
Finastra Breach and Lawsuit Timeline
- 1
October 31 – November 8, 2024 — The Breach
An unauthorized party accesses Finastra’s Secure File Transfer Platform and takes files on October 31. Finastra identifies the incident on November 7, 2024.
- 2
July 2025 — Letters and First Lawsuits
Finastra reports the breach to the California Attorney General on July 3, 2025. Federal class actions follow in the Middle District of Florida, starting with Polak on July 11, 2025.
- 3
June 2026 — Settlement Reached
After a mediation on June 2, 2026, the parties agree to settle on June 17, 2026. The federal case is dismissed and the deal is filed in Broward County state court.
- 4
August 19, 2026 — Preliminary Approval
Judge Carlos A. Rodriguez preliminarily approves the $3.125 million settlement and appoints Simpluris as administrator.
- 5
November 13 and 27, 2026 — Deadlines
November 13, 2026 is the deadline to opt out or object. November 27, 2026 is the deadline to file a claim online or by mail (postmarked).
- 6
December 14, 2026 — Final Approval Hearing
The court decides whether to approve the settlement and the fee request. Payments follow only after final approval and any appeals.
Three Things to Watch For
A real settlement email from a company most people never heard of is an easy template to copy:
Look-alike Finastra settlement links
The only official site is FinastraDataSettlement.com, run by Simpluris. Type the address yourself rather than clicking a link in an email, and compare any phone number with (866) 719-4418.
Requests for your bank login or full card number
Because this breach involved bank software and financial account numbers, fake messages may pose as your bank. The claim form never needs your online banking password. Filing a claim is done with your LoginID and PIN or a paper form, and the notice mentions no filing fee.
“We’ll file your claim for a cut”
Filing is free and takes minutes with your LoginID and PIN. Anyone offering to file for a percentage of your payout, or promising the full $2,500 without receipts, is selling something the settlement does not offer.
Finastra Lawsuit — Questions People Actually Ask
Is the Finastra settlement email real?
Yes, a real notice went out: the settlement website dates the notification email September 18, 2026. It concerns Hughes v. Finastra Technology, Inc., No. CACE26013154. To be safe, go directly to FinastraDataSettlement.com instead of clicking links, and use the LoginID and PIN from your notice.
Why does a company I never heard of have my data?
Finastra sells lending, payments and banking software to financial institutions and supports them through a file-transfer platform. If your bank or another financial institution is a Finastra customer, your records could have been in files on that platform.
How much is the Finastra customer data lawsuit payout per person?
Up to $2,500 for documented losses, or an equal pro rata share with no proof required, plus one year of credit monitoring. As of October 2026, no pro rata estimate has been published. Our Finastra settlement article runs the numbers.
What is the deadline to file a claim?
November 27, 2026, online or by mail postmarked by that date. The opt-out and objection deadline is November 13, 2026. After November 27, 2026, new claims are late under the notice.
When will Finastra settlement payments be sent?
Only after the court grants final approval and any appeals are resolved. The final approval hearing is set for December 14, 2026. Payment options include direct deposit, PayPal, Venmo or paper check; checks must be cashed within 120 days.
What if I do nothing?
You stay in the class, get no money and give up the right to sue Finastra over this breach. Only people who file a valid claim receive benefits.
Is there more than one Finastra customer lawsuit?
For this breach, there is one Finastra customer class action settlement. The federal suits were consolidated as Polak v. Finastra Technology, Inc. and then resolved through the single Broward County settlement. We found no separate securities or government action over the breach. See other open class action settlements if you received several breach letters.
What should I do right now?
File a claim before November 27, 2026 and choose the credit monitoring. If you have receipts for breach-related costs, use the documented-loss option. Consider a free credit freeze, and watch your bank statements for unfamiliar activity.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Data Breach Settlement Calculator
Estimate what a breach claim like Finastra can be worth
Open Class Action Settlements
Settlements you can still file a claim in, with deadlines
Class Action Payout Calculator
How fees and claim rates shape a pro rata share
700Credit Data Breach Settlement
Another financial vendor breach you may not recognize