MOVEit (Ernst & Young / Bank of America) Data Breach Settlement
Morris v. Progress Software Corporation, et al., No. 1:24-cv-11807-ADB (U.S. District Court, District of Massachusetts)
Closed. The claim deadline of October 8, 2026 has passed. You can no longer file a claim for this settlement. This page is kept for reference.
A $2.5 million settlement over the 2023 MOVEit security incident. Between May 27 and May 31, 2023, cybercriminals exploited a vulnerability in the MOVEit Transfer file-transfer software that Ernst & Young used to handle certain Bank of America customer data, potentially exposing personally identifying information. EY and BOA deny wrongdoing; claims against MOVEit's maker, Progress Software, continue separately. The deadline of October 8, 2026 has passed, so this settlement is closed.
Estimated payout
A $100 alternative cash payment, or reimbursement of up to $2,500 in documented ordinary losses and up to $10,000 in documented extraordinary losses (subject to pro-rata adjustment), plus two years of identity-theft protection.
Proof required?
No proof for the $100 alternative cash payment; documentation is required for the ordinary/extraordinary loss reimbursements. Two years of identity-theft protection is available to all class members.
Cost
Always free through the official administrator.
Who qualifies
Living U.S. residents who received notice from Ernst & Young that their personal information (data Bank of America provided to EY) was potentially compromised in the 2023 MOVEit security incident.
Background
The MOVEit breach was one of the largest supply-chain hacks of 2023: the Clop ransomware group exploited a zero-day flaw in Progress Software's MOVEit Transfer tool to steal data from hundreds of organizations that used it. This settlement covers people whose Bank of America information was exposed because BOA's outside accounting firm, Ernst & Young, used MOVEit to move that data.
What you need to file
- The Claimant ID and PIN from your settlement notice, if you received one.
- For documented-loss claims: receipts, statements, or dated records of expenses tied to the breach.
- Your contact information and a payment choice.
What you can get
A $100 alternative cash payment, or reimbursement of up to $2,500 in documented ordinary losses and up to $10,000 in documented extraordinary losses (subject to pro-rata adjustment), plus two years of identity-theft protection.
Proof of purchase or loss: No proof for the $100 alternative cash payment; documentation is required for the ordinary/extraordinary loss reimbursements. Two years of identity-theft protection is available to all class members.
Free to file. We’re not a law firm.
Unclaimed Guide is an independent guide. We are not a law firm, not a claims-filing service, and not affiliated with Ernst & Young LLP and Bank of America Corporation, the settlement administrator, or the court. You can always file this claim yourself, for free, at the official site above. Never pay a company that offers to file it for you.
Common questions
No proof is needed for the $100 alternative cash payment. Documentation is only required if you claim documented losses (up to $2,500 ordinary or $10,000 extraordinary). File free at moveitsettlementeyboa.com by October 8, 2026.
Yes. Filing is always free through the official settlement administrator at moveitsettlementeyboa.com. You never need to pay a law firm or a claims service — we are an independent guide and are not affiliated with the settlement, the administrator, or the court.
No. The deadline (October 8, 2026) has passed, so the window is closed. Deadlines are set by the court; check moveitsettlementeyboa.com for any updates.
Related guides
How to claim a class-action settlement for free · Is your settlement notice real? How to spot a scam