Ernst & Young LLP and Bank of America Corporation
MOVEit Breach: $100 Cash or Up to $12,500 in EY/BofA Settlement
A $2.5 million settlement covers people whose personal data was exposed when hackers allegedly breached the MOVEit software Ernst & Young used to process Bank o
Key facts
- Claim deadline
- Oct 8, 2026
- Potential payment
- Eligible claimants may choose a $100 alternative cash payment without documenting a loss. This payment cannot be combined with ordinary-loss, lost-time, or extraordinary-loss reimbursement. It may be reduced or increased based on the number and value of approved claims, with increases capped at $1,000.
- Proof requirement
- No proof
- Status
- Open
- Final hearing
- Oct 15, 2026
- Settlement fund
- $2,500,000
Eligible claimants may choose a $100 alternative cash payment without documenting a loss. This payment cannot be combined with ordinary-loss, lost-time, or extraordinary-loss reimbursement. It may be reduced or increased based on the number and value of approved claims, with increases capped at $1,000.
Eligibility
Who may qualify?
Check the covered dates, products, locations, and other official terms before you file.
- You must be living.
- Your personally identifying information must have been included in the affected files.
- Your information must relate to services Ernst & Young provided to Bank of America.
- You cannot be an excluded defendant-related person or entity, an assigned judicial officer or covered family or staff member, or someone who validly opts out.
Case overview
What is the Ernst & Young LLP and Bank of America Corporation settlement about?
This proposed class action grew out of a May 2023 breach of MOVEit Transfer, file-transfer software Ernst & Young used to handle certain Bank of America data. Between May 27 and May 31, 2023, cybercriminals allegedly gained unauthorized access to the software, potentially exposing personally identifying information belonging to some Bank of America customers.
The lawsuit claims Ernst & Young and Bank of America failed to use reasonable data security practices. Both companies deny any wrongdoing or liability and dispute that the claims would have succeeded had the case gone forward.
This settlement resolves only the claims against Ernst & Young and Bank of America, it does not cover claims against MOVEit's software maker, Progress Software Corporation, which remains in ongoing litigation. The court has not yet granted final approval, and no payments will go out until that approval is final and any appeals are resolved.
Coverage extends to living individuals whose personally identifying information was in the files affected by this incident involving Bank of America data handled by Ernst & Young. Those eligible can seek reimbursement for documented ordinary and extraordinary losses, or instead choose a flat alternative cash payment. Eligible people may also request identity theft protection and credit monitoring services.
Filing a claim online requires a Claimant ID and PIN; anyone who believes they qualify but never received these credentials should reach out to the Settlement Administrator. Most loss-reimbursement claims require supporting documentation, though the alternative cash payment does not.
Questions people ask
Frequently asked questions
How much is the Ernst & Young LLP and Bank of America Corporation settlement payout?
Eligible claimants may choose a $100 alternative cash payment without documenting a loss. This payment cannot be combined with ordinary-loss, lost-time, or extraordinary-loss reimbursement. It may be reduced or increased based on the number and value of approved claims, with increases capped at $1,000. The reported settlement fund is $2,500,000. Final amounts depend on the number of valid claims and the administrator's terms.
Who qualifies for the Ernst & Young LLP and Bank of America Corporation settlement?
Key eligibility criteria include: You must be living; Your personally identifying information must have been included in the affected files; Your information must relate to services Ernst & Young provided to Bank of America; You cannot be an excluded defendant-related person or entity, an assigned judicial officer or covered family or staff member, or someone who validly opts out. Always confirm the full class definition with the official source before filing.
Is the Ernst & Young LLP and Bank of America Corporation settlement legit?
Yes, this is a real, documented settlement. TapClaim verified the official source (RG/2 Claims official website) on Aug 28, 2026. Watch out for lookalike scam sites: file only through the official administrator links on this page, and never pay a fee to submit a claim.
What is the claim deadline for the Ernst & Young LLP and Bank of America Corporation settlement?
The published claim deadline is Oct 8, 2026. Confirm the final date on the official settlement website before filing.
Do I need proof of purchase to file?
The standard claim does not list proof of purchase as required. You still need to truthfully meet the class definition and every other filing term.
How do I file a claim for the Ernst & Young LLP and Bank of America Corporation settlement?
You can file for free directly with the settlement administrator through the official claim page linked on this page. The TapClaim app is optional and can help you find matching claims and track their status.
Is the Ernst & Young LLP and Bank of America Corporation settlement open for claims?
Yes, it is currently listed as open, with a published claim deadline of Oct 8, 2026.
Settlement administrator and official sources
- AdministratorRG/2 Claims
- Administrator websiteRG/2 Claims official websiteVisit administrator websitePrimary official source · Verified Aug 28, 2026
- Official claim pageOfficial claim formView official claim pageSupporting official source · Verified Aug 28, 2026
- Listing verificationLast checked Aug 28, 2026
