University of St. Thomas Settlement Ends Class Action Lawsuit Over 2025 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

The University of St. Thomas (UST) has agreed to a settlement to resolve a class action lawsuit that alleged the private Catholic institution failed to protect sensitive information in its care from a 2025 data breach.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The University of St. Thomas class action settlement received preliminary approval from the court on May 28, 2026. The deal covers all United States residents who were mailed a letter by the University of St. Thomas stating that their personal information was potentially compromised as a result of the data breach that occurred between July 25, 2025 and August 12, 2025.

The court-approved website for the University of St. Thomas class action settlement can be found at USTDataSettlement.com.

University of St. Thomas settlement class members who submit a timely, valid claim form can receive up to $500 for documented “ordinary” losses incurred between July 25, 2025 and September 28, 2026 due to the data breach. This benefit covers out-of-pocket costs for professional fees, credit repair services, freezing or unfreezing credit, credit monitoring, notary fees, fax, postage, mileage, long-distance telephone charges, and more.

Class members can also file a claim form to receive up to $4,500 for documented “extraordinary” losses incurred between July 25, 2025 and September 28, 2026 due to the University of St. Thomas data breach. This benefit covers losses from identity theft or fraud that are not already covered by another settlement benefit.

All settlement class members who experienced the disclosure of their sensitive personal information—such as employment files and records, reports of professional or criminal misconduct, settlement agreements or other information pertaining to legal proceedings, and disciplinary records—because of the UST data incident can also claim a $100 cash payment with supporting documentation.

Class members must submit proof, such as receipts, bank statements or other third-party documentation, to receive documented-loss payments from the class action settlement.

Further, class members can elect on their claim form to enroll in three years of one-bureau credit monitoring and identity theft protection services, which includes identity theft insurance.

In lieu of documented-loss payments and/or credit monitoring, class members can file a claim form for a $50 alternative cash payment, with no proof required.

To submit a University of St. Thomas settlement claim form online, class members can head to this page and enter the login ID and PIN found on their copy of the settlement notice. Alternatively, class members can download a PDF claim form to print, complete and return by mail to the settlement administrator.

All UST settlement claim forms must be submitted online or postmarked by September 28, 2026.

The court will determine whether to grant the University of St. Thomas settlement final approval following a yet-to-be-scheduled hearing. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The University of St. Thomas class action lawsuit alleged that the private Catholic university failed to implement reasonable cybersecurity measures to protect private information from a data breach that occurred between July 25 and August 12, 2025.

Per court documents, private information that may have been compromised in the breach included credit card, bank account, and Social Security numbers; passports and licenses; logins and passwords to work-related accounts; home addresses; email addresses; phone numbers; donor contact information; club membership information; and other documents of a confidential and sensitive nature.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.