Up to $1M Cross Valley Federal Credit Union Settlement Ends Class Action Lawsuit Over December 2024 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Cross Valley Federal Credit Union has agreed to an up to $1,000,000 settlement to resolve a class action lawsuit that alleged the financial institution failed to protect the sensitive information in its care from a December 2024 data breach.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The $1 million Cross Valley Federal Credit Union class action settlement received preliminary approval from the court on April 24, 2026. The settlement covers all individuals whose private information was potentially accessible in the December 2024 data breach, including all those who received notice about the incident.

Court documents state that approximately 17,826 people were impacted by the data breach.

The court-approved website for the Cross Valley Federal Credit Union (CVFCU) data breach settlement can be found at CVFCUDataSettlement.com.

CVFCU settlement class members who file a valid, timely claim form can receive up to $5,000 for documented losses incurred between December 4, 2024 and July 18, 2026 due to the data breach. Expenses covered by this benefit include the costs for credit reports, credit monitoring, identity theft insurance, freezing or unfreezing credit, replacement cards, late and over-limit fees, bank fees, credit card fees, and more.

Class members must submit proof, such as bank statements or receipts, to receive a documented-loss payment.

In lieu of a documented-loss payment, class members can instead file a claim to receive an approximately $50 cash payment, with no proof required. 

Should the total cost of all benefits exceed the $1,000,000 aggregate settlement cap, payments to class members may be subject to a pro rata reduction.

To file a CVFCU settlement claim form online, class members can head to this page and log in using the unique ID and PIN found on their copy of the settlement notice. Alternatively, class members can download a PDF of the claim form to print, fill out and return by mail to the settlement administrator.

All CVFCU settlement claim forms must be submitted online or by mail by July 18, 2026.

Additionally, all class members are eligible to receive two years of CyEx Financial Shield Complete, which includes one-bureau credit monitoring and financial fraud insurance, using the code in their settlement notice.

The court will determine whether to grant final approval to the Cross Valley Federal Credit Union data breach settlement following a hearing on August 13, 2026. Cash payments will begin to be distributed only after final approval is granted and any appeals are resolved.

The Cross Valley Federal Credit Union class action lawsuit claimed that the Pennsylvania-based credit union failed to implement proper cybersecurity measures to safeguard the sensitive information in its care, which allegedly led to a cyberattack in December 2024. Per court documents, private information potentially exposed during the breach included names, addresses and Social Security numbers.

Did you know that some class action settlements require no proof to submit a claim? Check out the latest class action settlements.