- Defendant
- Ernst & Young LLP and Bank of America Corporation
- Status
- Open to claims
- Potential payout
- Up to $10,000 for documented extraordinary losses
- Claim deadline
- File by October 8, 2026
- Settlement fund
- $2.5 million
- Proof required
- Yes (for some claims)
Overview
Ernst & Young LLP and Bank of America Corporation agreed to a $2.5 million settlement resolving claims tied to the May 2023 MOVEit security incident. The lawsuit alleges cybercriminals exploited a vulnerability in the third-party MOVEit Transfer software EY used to handle certain Bank of America data, potentially exposing personally identifying information between May 27 and May 31, 2023. The defendants deny wrongdoing. Claims against MOVEit licensor Progress Software Corporation are not resolved by this settlement and continue in Morris v. Progress Software Corporation et al., Case No. 1:24-cv-11807-ADB in the U.S. District Court for the District of Massachusetts.
Who qualifies
- You are a living person in the United States.
- Your personally identifying information was included in files affected by the May 2023 MOVEit security incident.
- You received notice from Ernst & Young that your information was potentially compromised.
What you could receive
Settlement class members may claim reimbursement of qualifying documented ordinary losses up to $2,500 and qualifying documented extraordinary losses up to $10,000, or choose an alternative $100 cash payment. All class members may also claim two years of identity theft protection. Cash benefits are subject to pro rata adjustment based on valid claims and available settlement funds.
How to file your claim
- 1Confirm that you received an Ernst & Young MOVEit settlement notice with a Claimant ID and PIN.
- 2Submit the official claim form online, or download and mail the paper form to the settlement administrator.
- 3Include documentation for any ordinary- or extraordinary-loss reimbursement you claim.
- 4Submit online or ensure the mailed claim is postmarked by October 8, 2026.
Official settlement site: MOVEitSettlementEYBOA.com. Class Action Pulse is not the settlement administrator or a law firm — always verify eligibility, deadlines, and payout details through the official source above.
Do you qualify?
Check your eligibility and get help understanding your claim. It's free and takes under a minute.
Sources
Frequently asked questions
What benefits are available in the EY and Bank of America MOVEit settlement?
Class members may claim documented ordinary losses up to $2,500 and extraordinary losses up to $10,000, or select a $100 alternative cash payment. Two years of identity theft protection are also available.
Who qualifies?
Living U.S. residents whose personally identifying information was in Bank of America files handled by EY and affected by the May 27–31, 2023 MOVEit incident.
What is the claim deadline?
Claim forms must be submitted online or postmarked by October 8, 2026.