Only About 4,361 of the 4.25 Million People in the OneTouchPoint Breach Settlement Can Claim Money — Their Lawyers Ask $1.5 Million, and the Claim Deadline Is November 16, 2026

The onetouchpoint data breach settlement covers about 4.25 million people, but almost all of them cannot file for cash. That is the new fact in the papers class counsel filed on October 2, 2026 and the settlement administrator posted on the official site on October 8. In the affidavit supporting the fee request, co-lead counsel Gary M. Klinger of Milberg swears: “The Settlement Class contains approximately 4,248,363 Settlement Class Members. There are approximately 4,361 Settlement Class Members in the Monetary Settlement Class and approximately 4,244,002 in the Injunctive Relief Settlement Class.”

By our arithmetic, 4,361 is about 0.1 percent of the class — roughly one person in 974. The split follows the settlement’s two class definitions. The money class is people “whose Private Information was determined by OTP’s investigation to have been impacted,” plus the named plaintiffs. Everyone else who received a 2022 breach letter is in the injunctive class: “sent notice by OTP of potential impact to their Private Information in the April 2022 Data Incident, but for whom the impact could not be confirmed.” The official FAQ is blunt: “Injunctive Relief Class Members cannot file a claim for monetary compensation or credit monitoring.” What they get is OTP’s security work for at least five years, which counsel value at about $2 million.

The class is also larger than the breach count most coverage uses. HIPAA Journal reported in September 2022 that the breach was reported as affecting 2,651,396 people (first reported as 1.1 million) across at least 34 client organizations. The settlement papers do not explain the gap to 4,248,363.

If you are one of the roughly 4,361, the official FAQ, the notice and the settlement agreement all list the same options. Either a one-time $75 “Alternative Cash Payment” with no documents, or reimbursement instead: ordinary out-of-pocket losses up to $500, extraordinary documented losses up to $5,000, and lost time at $25 an hour for up to four hours ($100 maximum). Either way you can add two years of one-bureau credit monitoring with at least $1 million in fraud protection. Claims are “subject to review for completeness and plausibility.”

One discrepancy in the new filing: counsel’s fee memorandum twice describes the flat option as “an alternative cash payment of $65.” The signed agreement, the court-approved notice, the FAQ and the claim form all say $75. The agreement is what the court approves, and nothing we found changes the amount. We read the $65 as an error in the brief.

No one is paid before final approval. The notice says benefits go out “if the Court grants final approval of the Settlement and after any appeals are resolved, or after the period to seek an appeal has expired.” Under the agreement, the “Effective Date” is 35 days after the final judgment if nobody appeals. OTP then funds valid claims within 30 days of the later of that date or the administrator’s confirmation of the claim. If the judge approves on November 18 and nobody appeals, that is December 23, 2026 and January 22, 2027 by our count, so payments could not start before late January 2027. Payment goes by the electronic method you chose or by paper check. Checks are void 90 days after issuance, and uncashed money goes back to OTP.

How do I know if I was affected by the data breach? For this settlement, the test is whether OTP’s investigation confirmed your information was impacted. People in the money class were sent a notice with a Claim Number and PIN, by email or on a postcard. The FAQ says you file online “using the Claim Number and PIN found in the email we sent you or the postcard notice you received in the mail.” A 2022 breach letter on its own does not put you in the money class. If you lost the notice, the agreement lets the administrator reissue the unique identifier. If you are unsure which class you are in, the notice says to ask the administrator.

Claims must be filed online or postmarked by November 16, 2026. The paper address is OTP Data Incident Settlement, c/o Analytics Consulting LLC, PO Box 2005, Chanhassen, MN 55317-2005. The deadline to opt out or object was October 16, 2026, and it has passed. Money-class members who did not opt out are bound by the settlement and keep their right to claim. If you do nothing, you get nothing and still give up your claims against OTP.

The notice is real. It is court-authorized (“A court has authorized this notice. This is not a solicitation from a lawyer.”) and points to OTPDataIncident.com, run by Analytics Consulting LLC. Claims are filed through the “File Claim” button on that site. The notice’s toll-free number is 866-996-3808, and the email is OTPDataIncident@noticeadministrator.com. One thing to watch: the site’s FAQ prints the number as “886-996-3808,” a typo for 866. Call the 866 number.

A genuine message from this settlement will not charge a fee to file. It will also not ask you to call a number that does not match the notice, or to re-enter information beyond what the claim form asks. Lawyer ads that only mention the case are not settlement notices. If a message does not lead back to OTPDataIncident.com, type that address in yourself instead of clicking the link.

Class counsel — Gary F. Lynch of Lynch Carpenter and Gary M. Klinger of Milberg, with Strauss Borrelli — ask Judge Melvin for $1,500,000, including $13,210.99 in expenses. They say the request is “6 % of the of the value of the Settlement,” well below the 33 to 40 percent common in contingent-fee cases. They also report 746.98 hours and a lodestar of $657,197.90 through September 25, 2026, which they call a “modest multiplier of 2.28.” OTP pays fees, administration and $1,000 service awards for each class representative separately. The notice says so, so the fee does not reduce claim payments.

The 6 percent depends on the valuation. Counsel put the settlement at “at least $24,846,406.” By our arithmetic, that is exactly 4,361 people times $5,238.80 (the $5,000 maximum plus credit monitoring valued at $9.95 a month, or $238.80), plus the $2,000,000 in security work. In other words, it assumes every member of the money class files and gets the maximum. That almost never happens in a claims-made settlement. If all 4,361 took the $75 flat payment, the cash would be $327,075, less than a quarter of the fee request. The judge decides the fee at the hearing. As of October 17, 2026, no objection appears on the settlement site.

Under the agreement’s schedule, counsel must file the motion for final approval 14 days before the hearing, which is November 4, 2026 by our count. That filing and the fee memo’s promise to “address any objections and requests for exclusion following the deadline” should show how many people opted out or objected by October 16. As of October 17, 2026, the official documents page lists only the claim form, notice, agreement and the two fee papers. The final approval hearing is set for November 18, 2026, at 10:00 a.m. at the Waukesha County Circuit Court, 515 W Moreland Blvd, Waukesha, WI 53188. OTP denies wrongdoing.

The case began in federal court in Wisconsin in 2022 and was re-filed in Waukesha County to settle. Counsel say they partially defeated OTP’s motion to dismiss, and three full-day mediations failed before a deal was reached. The court granted preliminary approval on July 16, 2026. For background on the breach, the vendor and the full benefit rules, see our first report below.

Searchers also ask about the Capital One and Lake View settlements. Those are separate cases. This article does not answer their status or legitimacy, so check each case’s own court-approved settlement website. As for how much you can get in a data breach case: here the most is $5,000 in documented losses, or $75 without documents, and only for the money class.