Generations Federal Credit Union Settlement Ends Data Breach Lawsuit Over December 2022 Email System Hack

New to ClassAction.org? Read our Newswire Disclaimer

A class action settlement has been reached to resolve a lawsuit over a December 2022 data breach that involved unauthorized access to Generations Federal Credit Union’s (GFCU) email system.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The court-approved website for the Generations Federal Credit Union data breach settlement can be found at GFCUDataSettlement.com.

The deal covers all United States residents who GFCU notified that their private information was potentially accessed, viewed and/or obtained as a result of the data breach, which occurred between December 13 and December 15, 2022.

To receive GFCU settlement benefits, eligible class members must submit a valid claim form online or by mail by September 15, 2025.

Head to this page to file a GFCU settlement claim form online. If you prefer to submit by mail, you may download a PDF claim form from the claim submission page or call 1-833-360-6879 to request a paper copy to fill out and return.

Claim form submission requires a unique class member ID, which can be found in the personalized settlement notice you should have received in the mail. Filing online additionally requires a PIN that is also included in the notice.

According to the official GFCU settlement website, class members who submit a timely, valid claim form are eligible to receive reimbursement of up to $500 per person for “ordinary” out-of-pocket expenses that were incurred as a result of the incident and are supported by documentation. Per the website, qualifying losses may include unreimbursed bank fees, phone or data charges, costs associated with credit monitoring or fraud resolution services, postage, gas and other miscellaneous expenses incurred between December 13, 2022 and September 15, 2025.

Consumers can also file a claim to receive compensation for up to four hours of lost time spent responding to issues related to the incident, at a rate of $20 per hour, the site shares.

A combined claim for reimbursement of ordinary losses and lost time is subject to the $500 cap, the website notes.

Moreover, class members who submit a claim form are eligible to receive reimbursement of up to $4,500 per person for documented “extraordinary” losses that were incurred between December 13, 2022 and September 15, 2025 and are reasonably linked to the data breach, the site relays. Qualifying losses include charges that have not been reimbursed and are not covered by the aforementioned monetary benefits, court documents add.

As part of the deal, GFCU is also offering consumers free enrollment in two years of credit monitoring and identity theft protection services, the website says.

According to the settlement agreement, GFCU has further agreed to implement and maintain certain data security enhancements for a two-year period in response to the incident.

The GFCU class action settlement received preliminary approval from the court on June 17, 2025. Next, the court will determine whether to grant final approval to the terms of the deal at a hearing set for late January 2026.

The agreement states that, should the deal be ultimately approved, settlement benefits will be issued to eligible class members within 60 days following the date it goes into effect, or within 30 days after a consumer’s claim is approved, whichever is later.

According to the data breach lawsuit, the cyberattack compromised individuals’ names, addresses, dates of birth, Social Security numbers, driver’s license or state ID numbers, taxpayer ID numbers, financial account information, credit or debit card numbers, digital signatures, usernames and passwords, email addresses, certain medical and/or health insurance information and other highly sensitive personal data.

Looking for current class action lawsuits to join? Check out ClassAction.org’s class action lawsuit list.