HumanEdge Data Breach Lawsuit: Seven Federal Lawsuits, No Settlement
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
HumanEdge, a White Plains, New York staffing and recruiting firm, mailed breach notices on September 1, 2026 about a network incident from March 2026. Within days, lawsuits, including proposed class actions, were filed against it in federal court in New York. As of October 11, 2026 there is no settlement, no fund and no claim form. The one thing with a real deadline is the free IDX identity protection in your letter: enroll by December 1, 2026.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened in the HumanEdge Data Breach
According to HumanEdge’s own notice letter, the company experienced suspicious activity in its network on or about March 18, 2026 and opened an investigation with outside cybersecurity experts. It found that certain files may have been accessed and/or acquired without authorization. A review of those files to identify whose data was in them was completed on August 13, 2026, and letters went out dated September 1, 2026. The filing with the California Attorney General lists the breach dates as March 17 and March 18, 2026, and was reported on September 2, 2026.
The letter says the data “may have included your name” plus other fields that differ from person to person. The Toumazou complaint alleges the exposed fields were names and Social Security numbers. HumanEdge has not published a nationwide count of affected people in any official source we could verify.
An earlier lawsuit, filed in May 2026 before any notice went out, alleged that a ransomware group listed HumanEdge on its leak site on or about April 8, 2026. That is an allegation about a criminal group’s claim, not a finding.
Case Details
All of the cases are in the U.S. District Court for the Southern District of New York, where HumanEdge has its principal place of business. The first, Toumazou v. HumanEdge, Inc., No. 7:26-cv-07696, was filed September 8, 2026 and assigned to Judge Nelson Stephen Roman. It is a proposed nationwide class action pleading negligence, negligence per se and unjust enrichment, and it claims more than $5 million is in controversy.
Six more suits followed: Dease (7:26-cv-07768, September 9), Li (7:26-cv-07890, September 10), Stern (7:26-cv-07954) and Buchanan (7:26-cv-07959, both September 11), Bessent (7:26-cv-08002, September 14) and Mcrae (7:26-cv-08128, September 17). On September 10, 2026 the clerk referred Dease to Judge Roman as possibly related to Toumazou.
Separately, Purvis v. HumanEdge, Inc., No. 7:26-cv-04184, was filed May 19, 2026 and voluntarily dismissed without prejudice on June 25, 2026.
Status: Lawsuits Filed, No Settlement
Cases filed this close together against one company are usually combined before one judge, and the related-case referral to Judge Roman points that way. A combined case can take a year or more to reach a settlement, if it settles at all. The only date that matters to you today is the December 1, 2026 IDX enrollment deadline printed on your letter.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Am I Affected by the HumanEdge Data Breach?
The proposed class is everyone whose information was involved in the HumanEdge data breach. That likely means job candidates and placed workers whose records HumanEdge held, not just its own office staff. Nobody can join yet, and you will not need to sign up to be included if a class is certified or a settlement is reached.
The practical test is your mail. If you received a letter from HumanEdge dated September 1, 2026, it lists which of your fields were involved, and it carries a personal IDX enrollment code. Keep the letter: it is your proof of membership. If you never worked with HumanEdge and received no letter, you are very unlikely to be in this case.
Is There Money? Not Yet
What you can get now, from HumanEdge directly: IDX identity protection with 12 or 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy and identity-theft recovery services. Enrollment closes December 1, 2026. For how comparable breach cases have paid out, see our data breach settlement calculator.
HumanEdge Breach Timeline
- 1
March 17–18, 2026 — The Breach
HumanEdge detects suspicious activity in its network on or about March 18, 2026. The California filing lists March 17 and 18 as the breach dates.
- 2
May 19, 2026 — A First Lawsuit, Later Dropped
Purvis v. HumanEdge (7:26-cv-04184) is filed before any notice, citing a ransomware leak-site listing. It is voluntarily dismissed without prejudice on June 25, 2026.
- 3
August 13, 2026 — File Review Finished
HumanEdge completes its review of the affected files to identify the people whose data was involved.
- 4
September 1–2, 2026 — Letters Go Out
Notice letters dated September 1 offer IDX identity protection. The breach is reported to the California Attorney General on September 2.
- 5
September 8–17, 2026 — Seven Lawsuits
Toumazou (7:26-cv-07696) is filed September 8 before Judge Nelson Stephen Roman, followed by six more suits in the Southern District of New York.
- 6
December 1, 2026 — IDX Enrollment Closes
Last day to enroll in the free identity protection in the notice letter. This is not a lawsuit deadline; there is no claim deadline because there is no settlement.
Three Things to Watch For
A breach of job applicants’ Social Security numbers, followed by a wave of lawsuit ads, creates easy openings for imposters:
“Claim your HumanEdge settlement” messages
There is no HumanEdge settlement and no claims site as of October 11, 2026. A page or text asking for your Social Security number to “secure your payment” is collecting data, not filing a claim.
Fake recruiters using the HumanEdge name
Exposed staffing records make fake job offers convincing. Be wary of any “recruiter” who asks for your Social Security number, bank details for “direct deposit” or an upfront fee before a verified interview.
Calls about your IDX enrollment
The real IDX line printed in the letter is 1-866-200-0939. If someone calls you about protection services, hang up and dial that number yourself rather than reading out your enrollment code or Social Security number.
HumanEdge Data Breach — Questions People Actually Ask
Is there a HumanEdge data breach lawsuit?
Yes. Seven lawsuits, at least two of them pleaded as class actions, were filed in the Southern District of New York between September 8 and September 17, 2026, starting with Toumazou v. HumanEdge, Inc., No. 7:26-cv-07696, before Judge Nelson Stephen Roman. As of October 11, 2026 they are at the earliest stage, with no settlement.
How much compensation will I get for a data breach?
For HumanEdge, nothing is payable today: there is no settlement, no fund and no claim form, and no court has valued the claims. What you can take now is the free IDX protection offered in the letter, which includes a $1,000,000 insurance reimbursement policy. Enroll by December 1, 2026.
Is the data breach settlement legit?
For HumanEdge there is no settlement yet, so any message saying you are owed a HumanEdge settlement payment is not genuine. If a settlement is reached, a court-appointed administrator will send notice, and the court docket will name it. A real administrator never charges a fee.
Is the HumanEdge breach letter real?
A sample of the HumanEdge notice letter, dated September 1, 2026, is on file with the California Attorney General. It comes from HumanEdge, Inc. in White Plains, New York, offers IDX services through app.idx.us and lists 1-866-200-0939 for questions. If your letter matches those details, it is consistent with the official sample.
What data was exposed in the HumanEdge data breach?
The notice letter says the information may have included your name plus other fields listed individually in each letter. The Toumazou complaint alleges the data included names and Social Security numbers. Your own letter is the authoritative list for you.
How many people were affected?
HumanEdge has not published a nationwide total in any official source we could verify, and the California Attorney General listing gives no count. The Toumazou complaint claims more than $5 million in controversy but do not establish a headcount.
Do I need to do anything to join the lawsuit?
No. In a class action you are included automatically if a class is certified or a settlement is approved, unless you opt out. There is nothing to register for now. Signing with a law firm is a separate choice, not a requirement to be in the class.
What should I do right now?
Enroll in the free IDX protection by December 1, 2026 using the code in your letter. Freeze your credit at Equifax, Experian and TransUnion — free and reversible. Treat unexpected job offers that ask for your Social Security number with suspicion, and keep your notice letter.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Data Breach Settlement Calculator
Estimate what a breach case like this has paid in the past
Open Class Action Settlements
Settlements taking claims right now, with deadlines
Settlement Payout Calculator
How a fund divided among claimants turns into a check
Complete Payroll Solutions Breach
Another employment-side vendor breach and how it played out