MOVEit (Ernst & Young / Bank of America) Data Breach Settlement
Morris v. Progress Software Corporation, et al., No. 1:24-cv-11807-ADB (U.S. District Court, District of Massachusetts)
Verified July 2026. Deadlines change by court order — always confirm the current date on the official site before you file.
A $2.5 million settlement over the 2023 MOVEit security incident. Between May 27 and May 31, 2023, cybercriminals exploited a vulnerability in the MOVEit Transfer file-transfer software that Ernst & Young used to handle certain Bank of America customer data, potentially exposing personally identifying information. EY and BOA deny wrongdoing; claims against MOVEit's maker, Progress Software, continue separately. Eligible people can file a claim for free through the official settlement administrator until October 8, 2026.
Estimated payout
A $100 alternative cash payment, or reimbursement of up to $2,500 in documented ordinary losses and up to $10,000 in documented extraordinary losses (subject to pro-rata adjustment), plus two years of identity-theft protection.
Proof required?
No proof for the $100 alternative cash payment; documentation is required for the ordinary/extraordinary loss reimbursements. Two years of identity-theft protection is available to all class members.
Cost
Always free through the official administrator.
Who qualifies
Living U.S. residents who received notice from Ernst & Young that their personal information (data Bank of America provided to EY) was potentially compromised in the 2023 MOVEit security incident.
Background
The MOVEit breach was one of the largest supply-chain hacks of 2023: the Clop ransomware group exploited a zero-day flaw in Progress Software's MOVEit Transfer tool to steal data from hundreds of organizations that used it. This settlement covers people whose Bank of America information was exposed because BOA's outside accounting firm, Ernst & Young, used MOVEit to move that data.
What you need to file
- The Claimant ID and PIN from your settlement notice, if you received one.
- For documented-loss claims: receipts, statements, or dated records of expenses tied to the breach.
- Your contact information and a payment choice.
What you can get
A $100 alternative cash payment, or reimbursement of up to $2,500 in documented ordinary losses and up to $10,000 in documented extraordinary losses (subject to pro-rata adjustment), plus two years of identity-theft protection.
Proof of purchase or loss: No proof for the $100 alternative cash payment; documentation is required for the ordinary/extraordinary loss reimbursements. Two years of identity-theft protection is available to all class members.
How to file for free
Go directly to the official settlement administrator at moveitsettlementeyboa.com and file your claim. It takes a few minutes and costs nothing. The deadline is October 8, 2026 — confirm it on the official site, since courts can move deadlines.
Free to file. We’re not a law firm.
Unclaimed Guide is an independent guide. We are not a law firm, not a claims-filing service, and not affiliated with Ernst & Young LLP and Bank of America Corporation, the settlement administrator, or the court. You can always file this claim yourself, for free, at the official site above. Never pay a company that offers to file it for you.
Common questions
No proof is needed for the $100 alternative cash payment. Documentation is only required if you claim documented losses (up to $2,500 ordinary or $10,000 extraordinary). File free at moveitsettlementeyboa.com by October 8, 2026.
Yes. Filing is always free through the official settlement administrator at moveitsettlementeyboa.com. You never need to pay a law firm or a claims service — we are an independent guide and are not affiliated with the settlement, the administrator, or the court.
The deadline is October 8, 2026. Deadlines can change by court order, so confirm the current date on the official site, moveitsettlementeyboa.com, before you act.
Related guides
How to claim a class-action settlement for free · Is your settlement notice real? How to spot a scam