Closed
Spear Wilderman Data Breach Settlement
The claim window closed on November 27, 2023. The court granted final approval in December 2023, and payments were distributed in 2024.
Case record
- Case
- Hassell v. Spear Wilderman, P.C. (consolidated with Raniell v. Spear Wilderman)
- Case no.
- Case ID 230401942
- Court
- Court of Common Pleas of Philadelphia County, Pennsylvania
- Defendant
- Spear Wilderman, P.C.
- Administrator
- KCC Class Action Services
- Settlement fund
- $800,000
The case
What this settlement was about
Spear Wilderman, a Philadelphia union-side labor and employment law firm, suffered a ransomware attack discovered around May 7, 2021. Exposed data included names, driver's license and passport numbers, dates of birth, medical diagnosis and treatment information, financial account information, and Social Security numbers.
A central criticism in the litigation was the delay in disclosure: the firm did not send breach notification letters until November 16, 2022, about 18 months after discovering the attack. Two lawsuits, one federal and one state, were consolidated into a single settlement administered under the Philadelphia Court of Common Pleas.
The firm denied wrongdoing but agreed to an $800,000 settlement fund covering cash payments of about $125 per valid claim plus reimbursement of documented losses, capped at $1,500 total per class member.
The class
Who was covered
All U.S. residents whose private information was actually or potentially accessed or acquired during the data incident, the people covered by Spear Wilderman's notice of data breach mailed on or around November 16, 2022.
- What class members could receiveA cash payment of approximately $125 per valid claim, adjustable pro rata, plus reimbursement of documented out-of-pocket losses traceable to the incident, capped at $1,500 total per class member.
- Proof requirementClaims required supporting documentation.
- Claim deadlinePassed on Nov 27, 2023. New claims are no longer accepted.
Docket timeline
How the settlement unfolded
- May 7, 2021Ransomware attack discovered
Intruders accessed the law firm's systems holding client and employee data.
- November 16, 2022Breach notices mailed
Notification letters went out about 18 months after the attack was discovered.
- April 2023Lawsuits filed
A federal case (Raniell) and a state case (Hassell) were filed within days of each other and later consolidated.
- November 27, 2023Claim deadline
Claims, exclusions, and objections were all due the same day.
- December 2023Final approval
The court approved the settlement after the December 20, 2023 hearing.
- 2024Payments distributed
Checks went out after final approval.
Questions people still ask
Frequently asked questions
Can I still file a Spear Wilderman settlement claim?
No. The deadline to file was November 27, 2023, and the settlement received final approval in December 2023. The claims process is closed.
How much did the Spear Wilderman settlement pay?
Valid claimants received a cash payment of about $125, adjusted pro rata based on claim volume, plus reimbursement of documented losses, up to $1,500 total per person from the $800,000 fund.
What data was exposed in the Spear Wilderman breach?
The ransomware attack exposed names, driver's license and passport numbers, dates of birth, medical diagnosis and treatment information, financial account information, and Social Security numbers.
Why did notification take 18 months?
The firm discovered the attack around May 7, 2021 but did not mail breach notices until November 16, 2022. That delay became a central criticism in the litigation, though the firm denied any wrongdoing.
I called the number on my postcard and it didn't work. Why?
The postcard notice mailed to class members listed an incorrect phone number. The settlement website posted a correction directing people to call 877-754-1139, a number that is no longer in service now that the settlement has closed.
Sources for this record
Official site spearlawdatasettlement.com has been retired. Record preserved by TapClaim.
