The Lawyers in This Data Breach Case Are Asking for $168,000 — Roughly What 3,360 Class Members Would Collect at $50 Each. And California Casualty, Not a Settlement Fund, Pays Both.

California Casualty is not a mass-market insurer. Its own website organises its business around a “Who We Serve” menu naming educators, firefighters, peace officers, nurses and higher-education employees — auto and home policies sold into those professions. That is worth holding in mind when you read the list of what was taken.

The court-authorized FAQ describes the incident: “This lawsuit alleges that during the September 2025 targeted cyberattack on California Casualty's computer systems, certain files that contained private information were accessed.” Those files “may have contained personal information such as name; medical information; taxpayer identification number; driver's license or state identification number; health insurance information; date of birth; social security number; passport number; and financial account number/payment card numbers.”

The window was narrow and specific. Reporting on the company's regulator filings puts the unauthorized access between September 2 and September 8, 2025, with discovery on November 5, 2025 and notification letters beginning November 19, 2025. That is roughly a ten-week gap between the intrusion ending and the letters going out — normal for forensic review, and long enough that anyone who saw fraud in the autumn may not have connected it to an insurance company at the time.

How many people? The settlement website does not say, and we are not going to invent a number for it. Coverage based on state regulator disclosures reports at least 6,416 current and former policyholders, with only a handful of residents in individual small states. Treat that as reported rather than official; the class definition, which is official, is broader in principle: “All living individuals residing in the United States whose PII was impacted in the Data Breach discovered by California Casualty in September 2025, including all those individuals who received notice of the breach.”

Data breach settlements advertise themselves with a fund. This one does not. Nowhere on the court-authorized website is a common fund figure stated — not on the home page, not in the 21-question FAQ. What the FAQ does state is who pays the costs, and the answer is the company, separately from anything class members receive:

“Class Counsel will ask the Court to approve $168,000.00 as reasonable attorneys' fees and reimbursement of litigation costs. This amount will be paid by California Casualty. Class Counsel will also ask for Service Award payments of $3,000.00 for each of the Class Representatives. Service Award payments will also be paid by California Casualty.”

$168,000 is a striking figure in this field. Fee requests in breach settlements we have covered this month run to $217,000 for a class of 10,675, and into the millions where classes reach six and seven figures. A fee ask this small is what a case looks like when the class is genuinely small — which is consistent with the roughly 6,400 people reported, and inconsistent with any expectation that this is a large payout event.

The structural upside for claimants is real, though. Where a fixed fund exists, the no-proof payment is usually described as an estimate that shrinks if too many people claim — that is why so many breach settlements pay out at a fraction of the advertised amount. Here the FAQ describes the $50 without any such hedge, and the fees and service awards sit outside whatever class members get. There is no pool for claimants to dilute one another in. We note the limits of that observation honestly: the settlement agreement itself, which would state a cap if one exists, is linked from the site but served through a script-rendered documents page we could not retrieve, so we are describing what the court-authorized FAQ says rather than the full agreement.

Every class member can take one of two cash options, and the credit monitoring on top of it. From FAQ 7: “All Class Members may enroll in Credit Monitoring Services and claim one of the two cash payment options.”

Option one — documented losses. “If you incurred actual, documented out-of-pocket losses due to the Data Incident, you can get back up to $4,000.00.” There is a date range on this that most people will miss: “The losses must have occurred between September 2, 2025, and November 16, 2026.” Covered items are the usual ones — losses from identity theft or fraud, credit report and credit freeze fees, the cost of replacing IDs, postage to write to banks. Self-made notes can support other proof but “those notes or papers alone are not enough to make a valid claim.” Anything a third party already reimbursed is out.

Option two — the flat payment. “Instead of any other payments, you may claim a one-time $50.00 cash payment. You do not have to provide any proof or explanation to claim this payment.”

Credit monitoring, for everyone. Two years of CyEx Financial Shield Complete, “with $1 million of financial fraud insurance,” monitoring for fraud or identity theft, unauthorized financial transactions and personal information appearing in high-risk transactions, with a fraud resolution agent on call. That is on top of the cash, not instead of it.

Now the dates, because there are two and they are twelve days apart. Claims are due November 16, 2026 — online by that date, or postmarked by it if you mail the form. But if you want to keep your own right to sue, or to tell the judge you object, that decision is due earlier: “The deadline to exclude yourself from the Settlement is November 4, 2026,” and objections are due the same day. The Final Approval Hearing is December 4, 2026 at 9:00 a.m.

One practical obstacle worth knowing before you start: the online claim form asks for a settlement login ID and PIN from the mailed notice. If you believe you were affected and no letter reached you, contact the administrator rather than assuming you are out — Simpluris, at (833) 360-6751 or info@CACasualtyDataSettlement.com, with mail to California Casualty Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799.

Finally, payment is not quick. The FAQ is candid about it: “Settlement payments will be distributed if the Court grants final approval, and after any appeals are resolved,” and it declines to predict whether appeals will be filed. December 4 is the hearing, not the payday.