EY and Bank of America

Class action settlement

EY and Bank of America

Max claim$10000
DeadlineOctober 8, 2026
Settlement fund$2.5 MM
Proof of purchaseRequired

About this settlement

MOVEit breach exposed Bank of America customer data via Ernst & Young

Summary

A class action alleges personal data Bank of America gave to Ernst & Young was exposed when EY's MOVEit Transfer software was hacked in May 2023. Both deny wrongdoing but agreed to a $2,500,000 settlement. Claimants may receive up to $2,500 for ordinary losses and $10,000 for extraordinary losses, or a flat $100, plus two years of identity protection.

Who qualifies

Living U.S. persons whose personal information, provided by Bank of America to EY, was in files affected by the MOVEit incident of May 27-31, 2023. The defendants, the presiding judges, and anyone who opts out are excluded.

Suits does not handle payments or process claims. Payments are issued by the claim administrator and typically take 3-6 months.