Heritage South Credit Union Data Breach Settlement Up to $2,080 for Customer Info

Heritage South Credit Union notified certain current and former customers in February 2025 that a cyberattack may have exposed their personal information. According to the settlement notice, potentially accessed files included sensitive data such as names, addresses, Social Security numbers, and financial account numbers—information that can be used for identity theft or fraud. In response, a class action lawsuit was filed alleging the credit union did not adequately protect customer data from unauthorized access, even though the credit union denies the allegations. The lawsuit matters because it gives eligible customers a practical way to recover costs and reduce harm after a breach. Class members in the U.S. who received a notice may claim up to $2,080, which can include one year of credit monitoring (with identity theft support and fraud resolution), up to $2,000 for documented losses like unreimbursed fees or replacement costs, and up to $80 for time spent addressing the breach. This is also a reminder of the broader legal landscape facing financial institutions: U.S. regulators and laws such as the Gramm-Leach-Bliley Act (GLBA) require safeguards to protect customer information, and state breach-notification rules generally push organizations to warn affected consumers promptly—creating fertile ground for class actions when customers argue security failures led to real-world consequences or increased expenses.