The ACCC Data Breach Settlement Was Set for a Massachusetts Hearing on October 8 — Ten Days Later, the Official Site Still Shows No Ruling. What Happens Next: an Email to Pick Your Payment, 30 Days to Answer, 120 Days to Cash the Check

The short answer for the roughly 11,613 people in this class: nobody has been paid, and nobody should expect money before the court’s approval becomes final. The final approval hearing in Dinkel v. American Consumer Credit Counseling was scheduled for October 8, 2026 at 2:00 p.m. Eastern, held “by video teleconference via Zoom” in the Middlesex County Superior Court in Woburn. As of October 18, 2026, the settlement website has not posted a ruling. Its home page still shows the hearing under “Upcoming Important Dates” and links no final approval order. We could not get the state court docket, so we can’t say whether the judge has ruled. Missing paperwork on the site is not the same as a denial.

The FAQ states the rule that matters: “Settlement payments will be distributed if the Court grants final approval, and after any appeals are resolved.” The amended settlement agreement is more specific. The settlement becomes final on its Effective Date. That is when the final approval order “has been entered and all times to appeal therefrom have expired” with no appeal, or after any appeal ends with the judgment affirmed. An appeal only about the lawyers’ fees or the class representatives’ service awards “shall not” push that date back.

ACCC “denies that it did anything wrong, and denies all claims, allegations, and liability,” and the court has not found otherwise.

Only people who filed a valid claim by September 16, 2026 get money. That covers claims “submitted, emailed, or postmarked” by that date. Each claimant chose one cash category. Category 1 pays documented out-of-pocket losses up to $3,500.00 for losses between January 27, 2025 and September 16, 2026. It also pays lost time at $20.00 an hour for up to four hours, up to $80.00. By our arithmetic, the most one person can get is $3,580. Category 2 is a flat $45.00: “You do not have to provide any proof or explanation to claim this payment.” Either way, a claimant could also choose three years of CyEx Financial Shield Complete credit monitoring with $1 million of fraud insurance. The site does not give a total fund. ACCC pays each valid claim within these caps, and it pays fees of up to $225,000 separately, within 21 days of the Effective Date.

Once the Effective Date arrives, the agreement sets this order of events:

• Payment choice by email. “Settlement Class Members with Valid Claims shall receive an email instructing them to select the type of payment they wish to receive.” From the day that email is sent, you have 30 days to choose. If you don’t open it, or give incomplete electronic payment details, you get a paper check in the mail.
• Money out within 45 days. “Within 45 days after the Effective Date, the Settlement Administrator will disburse payments for all Valid Claims.”
• Monitoring code by email. Claimants who chose the CyEx monitoring get an email with enrollment instructions, “including the activation code.”
• 120 days to cash a check. A check not cashed within 120 days of its date expires. You can ask Simpluris for a new one once, within 30 days after it expires. The reissued check expires 30 days after it is issued. After that, the agreement says you have “waived any right to a cash payment.”

The site gives no payment date, and we won’t guess one until a ruling is posted.

If you filed a claim, there is no deadline right now. Keep your email address and mailing address current with the administrator, and watch your inbox, including the spam folder, for the payment-choice email. If your claim was incomplete, Simpluris “may send the Settlement Class Member a deficiency notice, explaining what information is missing or inaccurate.” Answer it. If you did not file, you cannot file now. The claim deadline was September 16, 2026, and objections were due August 17, 2026.

Earlier we noted that the court-approved notice offered no way to leave the settlement. The amended agreement explains why. Its first footnote says: “This amended agreement removes all opt-out provisions and supersedes the agreement executed by the Parties in January and February 2026.” Everyone in the class is bound by the release whether or not they filed.

Should I accept free credit monitoring after a data breach? If you chose it on your claim form, activate it when the code comes. It costs you nothing. But know its limits. The FTC warns that credit monitoring “won’t alert you when someone withdraws money from your bank account” or when someone uses your Social Security number to file a tax return and take your refund. Here, the exposed data may include Social Security and financial account numbers. So a credit freeze at each bureau is the stronger step. The FTC says “There’s no cost to place or lift a credit freeze, and it doesn’t affect your credit score.” A fraud alert is another option; an initial one lasts one year and can be renewed. Neither one depends on this settlement.

A genuine email asking you to pick a payment method is part of the settlement plan, so getting one is not a red flag in itself. Check it against the contacts on the official site, not the message: the website is acccsettlement.com, the email address is info@ACCCSettlement.com, the toll-free line (answered 24/7) is (833) 421-7260, and mail goes to ACCC Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799. The administrator is Simpluris, Inc. If a message pushes you somewhere else, or asks for your Social Security number by phone or text, call the number above yourself. The FTC’s general advice applies: “Don’t give your personal information to someone who calls, emails, or texts you.”

The FAQ also tells class members: “Do not contact the Court or Clerk of Court regarding this Settlement.” Public filings can be viewed at the Clerk’s office, 200 Trade Center Dr., Woburn, MA 01801. Comments posted under news articles about the case, such as “add me,” are not claims.

According to the agreement, on April 8, 2025, ACCC found that an unauthorized third party had accessed certain employee email accounts “between January 27 and February 18, 2025.” ACCC then mailed notices to 11,611 people whose Social Security number, driver’s license number, financial account number and payment card information “may have been implicated.” The class list counts about 11,613 members. The case started in federal court in Boston. Two complaints were filed there on July 22 and July 30, 2025, and on August 4, 2025 they were combined as In re American Consumer Credit Counseling, Inc. Data Breach Litigation, No. 1:25-cv-12056. The suits alleged negligence, breach of implied contract and unjust enrichment. After a private mediation on October 14, 2025, the plaintiffs filed the case again in Middlesex Superior Court on November 24, 2025, and settled it there.

Two search questions point elsewhere. Which credit bureau had the data breach? None, in this case. ACCC is a credit counseling agency, not a credit bureau. The best-known bureau breach is Equifax’s: the company announced it in September 2017, it exposed data on 147 million people, the settlement was up to $425 million, and its claim deadline was January 22, 2024. That case is separate, and the FTC’s Equifax refund page is the place to check it. Is consumer credit counseling a free service? This settlement does not answer that. The FTC says “Most reputable credit counselors are non-profit,” but warns that “‘non-profit’ status doesn’t guarantee that services are free, affordable, or even legitimate.” It suggests checking any agency with your state Attorney General and local consumer protection office.

For the full rundown of the claim options from before the deadline, see our earlier report.