Up to $10,000 EY and Bank of America MOVEit Settlement

What happened

Class period: The MOVEit Security Incident took place between May 27, 2023 and May 31, 2023. Extraordinary loss claims cover losses from May 31, 2023 through the end of the claims period.

• Bank of America gave customer files to Ernst & Young, its outside accounting firm
• EY moved those files using MOVEit Transfer, a third-party file transfer program
• Between May 27 and May 31, 2023, hackers got into MOVEit Transfer and may have reached personal information inside those files
• The lawsuit says EY and Bank of America did not protect the data well enough. Both companies deny doing anything wrong, and the court has not ruled either way
• The two companies agreed to pay $2,500,000 into a settlement fund to close the case
• The case against Progress Software, the company that makes MOVEit, is still going and is not part of this settlement

What you can get

Key dates

Who may qualify

• You are a living person in the United States
• Your personal information was in the files hit by the May 2023 MOVEit breach, tied to data Bank of America gave to Ernst & Young
• You received a notice from Ernst & Young about the incident
• You are not an officer, director, or legal representative of EY or Bank of America
• You did not opt out of the settlement

How to file

1. Find the Claimant ID and PIN printed on the notice you received
2. Go to the official settlement site and open the File a Claim page
3. Submit the claim form online by October 8, 2026
4. To file by mail instead, download the paper claim form, fill it out, sign it, and mail it to the address on the form
5. Pick either the flat $100 cash payment or the documented loss option. You cannot take both
6. Check the box for two years of credit monitoring, which you can claim either way
7. If you lost your Claimant ID and PIN, email the administrator at MoveitSettlementEYBOA@rg2claims.com

Proof required

• No documents are needed for the flat $100 alternative cash payment
• For ordinary or extraordinary loss claims, you must describe each expense, the amount, and when and why you paid it
• Attach records such as bank statements, credit card statements, invoices, receipts, emails, or phone records. Photos of these are fine
• A written personal statement is not enough on its own. It can only add context to real records
• Two years of credit monitoring needs no proof

Payment timing

Payments go out only after the court approves the settlement and any appeals finish. The final approval hearing is set for October 15, 2026, and the court has no deadline to rule. Check the official site for updates.

Important links

• Official website
• Claim form
• Documents

Contact

Extra details

• The fund is $2,500,000 and it also pays notice costs, administration costs, attorney fees, and a service award of up to $2,500
• If too many people file, loss payments shrink pro rata. If not enough people file, the flat $100 grows pro rata, as high as $1,000
• Any money left in the fund 180 days after the settlement takes effect goes toward longer credit monitoring, not back to EY or Bank of America
• Filing online is safer than mailing. The USPS changed how it dates postmarks in December 2025, so mailed claims can be stamped days after you drop them off and land after the deadline
• Case: Morris v. Progress Software Corporation et al., Case No. 1:24-cv-11807-ADB, U.S. District Court for the District of Massachusetts
• Watch for scams. Use the official settlement site only

FAQ

Related guides