loanDepot Data Breach Settlement: Approved, Claim Deadline Passed
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The loanDepot data breach settlement is the $25 million deal that resolves the class action over the January 2024 cyberattack on the mortgage lender. It covers about 16.9 million people who got a breach notice from loanDepot. The court granted final approval in August 2025. The claim deadline was May 27, 2025 — it has passed, and there is no way to file now. If you filed in time, the question left is when your payment arrives.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the loanDepot Lawsuit Was About
Between January 3 and 5, 2024, an unauthorized party got into loanDepot computer systems. loanDepot disclosed the incident on January 8, 2024, and on January 22, 2024 said the intruder had reached sensitive personal information of about 16.6 million people. The settlement notice later put the figure at about 16.9 million.
The exposed data may have included names, addresses, email addresses, financial account numbers, Social Security numbers, phone numbers and dates of birth. The loanDepot class action lawsuit alleged the company failed to adequately protect that information. loanDepot denies any wrongdoing, and no court found that it broke the law — the case ended in a settlement, not a verdict.
Case Details
The consolidated case is In re loanDepot Data Breach Litigation, No. 8:24-cv-00136-DOC-JDE, in the U.S. District Court for the Central District of California, Southern Division, before Judge David O. Carter. Suits were filed within weeks of the breach, among them Rosa v. LoanDepot, Inc., No. 8:24-cv-00167, filed January 23, 2024. The defendants are loanDepot, Inc. and loanDepot.com, LLC. The notices and claim form were hosted by the settlement administrator, Angeion, at LoanDepotBreachSettlement.com.
Status: Final Approval Granted, Claims Closed
Payment timing is the open question. As of October 2026 we could not confirm from any public court filing or administrator notice whether payments have gone out, and we found no published distribution date. Payments are issued only after final approval and the resolution of any appeals. If you filed, the administrator line in the notice, 1-844-996-4090, is the place to ask.
What is still active: loanDepot’s quarterly report for the period ended June 30, 2026 says it is cooperating with state regulators and attorneys general in ongoing investigations of the breach and believes a loss is probable. Those are government matters — they do not reopen the class claim deadline.
Who Is Covered by the loanDepot Settlement
The settlement class is about 16,924,007 people in the United States who were sent an individualized notice from loanDepot saying their personal information may have been affected by the breach. Customers, former applicants and others whose data sat in loanDepot systems could be in it — the notice is the test.
California residents formed a subclass with an extra payment under the California Consumer Privacy Act.
If you did nothing by May 27, 2025: you are still bound by the settlement and released your claims, but you get no cash or monitoring. The only benefit everyone receives is the security upgrades loanDepot committed to.
What the loanDepot Settlement Pays
Cash payment: a pro rata share, expected between $5.30 and $34.37 if 2% to 10% of the class filed. Some news sites quote higher ranges; the official notice controls.
California payment: an extra amount expected between $14.90 and $74.52.
Out-of-pocket losses: up to $5,000 with documentation, which may be reduced pro rata.
Monitoring: two years of financial monitoring and identity theft insurance from CyEx by Pango Group, including $1,000,000 of insurance.
loanDepot also committed to security improvements valued in excess of $9 million. Headlines citing an $86 million or $42 million settlement are counting monitoring and security spending; they do not mean bigger checks. Late claims are not accepted under the notice terms.
loanDepot Data Breach Timeline
- 1
January 3–5, 2024 — The Breach
An unauthorized party accesses loanDepot systems. The company discloses a cyber incident on January 8, 2024.
- 2
January 22, 2024 — 16.6 Million People
loanDepot says sensitive personal information of about 16.6 million people was accessed. Class actions follow, including Rosa, filed January 23, 2024.
- 3
January 2025 — Preliminary Approval
Judge David O. Carter preliminarily approves the $25 million settlement in No. 8:24-cv-00136. Notices go to about 16.9 million people.
- 4
May 27, 2025 — Claim Deadline
Last day to file a claim. Opt-outs and objections were due April 27, 2025.
- 5
August 2025 — Final Approval
Bloomberg Law reports final approval on August 28, 2025, with around 250 opt-outs.
- 6
October 2026 — Payment Date Unconfirmed
As of October 2026 no public distribution date has been confirmed. State attorney general investigations of the breach are ongoing per loanDepot’s June 30, 2026 quarterly report.
Three loanDepot Settlement Traps
A closed claim period with no published payment date leaves room for people pretending to speed things up:
“Your loanDepot payment is ready — confirm your details”
A real administrator pays through the claim process you used. It does not need your Social Security number, bank login or a fee to release a payment.
“You can still file” sites
The claim deadline was May 27, 2025. A page collecting loanDepot customer data for a “late claim” or a “second round” is not part of this settlement.
Calls that mention your mortgage
Breach data included addresses, phone numbers and financial account numbers, so a caller may know your lender and where you live. Hang up and call loanDepot or the administrator line, 1-844-996-4090, using a number you looked up yourself.
loanDepot Settlement — Questions People Actually Ask
Is the loanDepot data breach settlement real?
Yes. It is the court-approved settlement in In re loanDepot Data Breach Litigation, No. 8:24-cv-00136-DOC-JDE, in the Central District of California. The official site was LoanDepotBreachSettlement.com and the administrator line was 1-844-996-4090.
Can I still file a claim?
No. The deadline was May 27, 2025. The official notice gave no late-filing option.
How much will I get?
It depends on how many people filed. The notice estimated $5.30 to $34.37 for the basic cash payment, plus $14.90 to $74.52 for California residents, and up to $5,000 for documented losses. The final per-person figure has not been published.
When will loanDepot settlement payments arrive?
We could not confirm a payment date as of October 2026. Final approval was reported on August 28, 2025, and payments go out after approval and any appeals are resolved. Ask the administrator at 1-844-996-4090 for your claim status.
How many people were affected by the loanDepot data breach?
loanDepot first said about 16.6 million. The settlement notice put the class at approximately 16,924,007 people who were sent a breach notice.
I got a loanDepot breach letter but never filed. Do I get anything?
No cash or monitoring. You are still in the class and released your claims, but you benefit from the security upgrades loanDepot committed to.
Are there other loanDepot lawsuits?
Yes, unrelated to the breach. Per loanDepot’s June 30, 2026 quarterly report: Kearns v. loanDepot.com, LLC, a certified robocall (TCPA) class action filed in June 2022 in the Central District of California; a Truth in Lending Act class action filed in July 2025 in the District of Maryland; and a website-cookie privacy suit filed in December 2025 in Alameda County Superior Court. Separately, a $3.5 million investor settlement over the 2021 IPO survived an appeal in the Ninth Circuit. None of these has a claim form for breach victims.
What should I do now?
If you filed, keep your claim confirmation and make sure the email or payment account you listed still works. Everyone in the class should consider a free credit freeze at all three bureaus, since Social Security numbers were involved. You can also estimate typical outcomes with our data breach settlement calculator.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements still taking claims, with deadlines
Data Breach Settlement Calculator
Estimate what a breach settlement claim is worth
Settlement Payout Calculator
How pro rata shares shrink as more people file
Settlement Check Problems
Missing, expired or wrong payments and what to do