$2.625M NCB Management Services Settlement Wraps Up Data Breach Lawsuit Over 2023 Ransomware Attack

New to ClassAction.org? Read our Newswire Disclaimer

Debt collection firm NCB Management Services will pay a $2,625,000 class action settlement to resolve several lawsuits filed over a February 2023 ransomware attack that impacted more than 1.6 million people nationwide.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The NCB Management Services settlement, which received preliminary approval from the court on May 13, 2025, covers all individuals in the United States whose personal information was compromised in the NCB Management Services data breach disclosed by the company around March 24, 2023, including those who received a notice about the incident. 

ClassAction.org will update this page when the court-approved NCB Management Services settlement website is launched. 

Related Reading: NCB Management Services Failed to Protect Consumers’ Info from Hackers, Class Action Says 

The NCB settlement will provide class members who file a timely, valid claim form with up to $2,500 in reimbursement for documented out-of-pocket losses that are more likely than not a result of the data breach, including up to four hours of lost time spent addressing the effects of the breach, which will be reimbursed at $30 per hour. 

In the alternative, NCB settlement class members may submit a claim form to receive a pro-rated cash payment, without the need to include supporting documentation. Court documents state that the amount of money each class member may receive will be calculated after the payment of taxes, claims administration costs, attorneys’ fees and expenses, service awards for the named plaintiffs, and approved claims for out-of-pocket losses. 

“To calculate the Alternative Cash Payment amount, the Alternative Cash Payment Fund will be divided by the total number of Approved Claims submitted for Alternative Cash Payments,” court documents specify. 

In addition, NCB Management Services has agreed to adopt and continue to implement for at least two years certain data security and privacy improvements designed to guard against future data security incidents. 

The court will decide whether to grant final approval to the class action settlement at a hearing on September 29, 2025. It is typically after a class action settlement receives ultimate court approval, and any appeals are resolved, that benefits begin to be distributed to eligible class members. 

A class action lawsuit against NCB Management Services over the 2023 data breach called the incident “foreseeable” and contended that the ransomware attack was “much larger” than NCB initially disclosed. The data compromised during the cyberattack included consumers’ names, addresses, dates of birth, Social Security numbers, driver’s license numbers, salaries, credit card numbers, routing numbers and more. 

Check out ClassAction.org’s lawsuit list for the latest open class action lawsuits and investigations.