Lighthouse Electric Data Breach Settlement Up to $2,750 for Employee Privacy Claims

In October 2024, Lighthouse Electric reported a cybersecurity incident that may have exposed sensitive employee information for about 7,138 people—such as names, Social Security numbers, financial account details, and health insurance data. Individuals who received a notice about the breach can potentially participate in a class action settlement, with claim options designed to help cover certain harms tied to the incident. The maximum relief discussed in the notice is up to $2,750, which can include reimbursement for documented out-of-pocket losses (like costs from identity theft, fraud, or credit-related monitoring/expenses), a smaller one-time cash payment for those who don’t have specific documentation, and optional two years of credit monitoring and medical identity theft insurance tied to possible health-related data exposure. The lawsuit was filed because employees alleged the company did not take adequate steps to protect personal information, raising concerns about privacy, identity safety, and the downstream risks that follow a breach. The case is significant not only for affected employees seeking compensation, but also because it reflects how companies often respond when sensitive data is compromised: Lighthouse Electric denies wrongdoing but agreed to settle to avoid the time, expense, and uncertainty of continued litigation. More broadly, employee-data breach cases like this one fit a growing pattern of class actions in the U.S., where plaintiffs frequently pursue claims related to inadequate cybersecurity safeguards and failure to prevent or promptly address exposure, often under state privacy laws that require reasonable security measures and appropriate notice after an incident. Industry-wide, cybersecurity expectations are reinforced by a mix of regulations and guidance, including U.S. state data breach and consumer privacy requirements, and widely used security frameworks that emphasize risk management, encryption, access controls, and incident response planning. Settlement structures like this—documented loss reimbursement plus monitoring services—are common in breach litigation because they balance practical proof requirements with the reality that many harms (especially identity theft) can be hard to quantify without receipts or timelines. For class members, the process has clear deadlines (including an opt-out window and a claim deadline), and the settlement’s value ultimately depends on how many valid claims are filed and how the credit monitoring costs are calculated, meaning the final payout can vary even for eligible people—so participation and timely filing are key to receiving benefits tied to the October 2024 incident