Community Realty Management Data Breach Settlement Reached After 2024 Cyberattack
A class action settlement has been finalized for individuals affected by a 2024 data breach at Community Realty Management (now CRM Residential), following a cyberattack that exposed sensitive personal information. The breach, detected in October 2024, involved unauthorized access to email accounts between September 10 and October 22, 2024, potentially compromising data such as names, Social Security numbers, driver’s license details, financial account information, payment card data, medical records, and health insurance details.
Eligibility & Settlement Benefits
Individuals who received a breach notification may qualify for compensation under the settlement. Claimants can choose from two payment options:
- Up to $2,000 for documented out-of-pocket losses (e.g., identity theft expenses, credit monitoring fees, or ID replacement costs).
- A one-time cash payment of approximately $20 (final amount dependent on the number of claims filed).
All class members are also eligible for two years of free credit monitoring through CyEx Financial Shield Complete, which includes $1 million in identity theft insurance and fraud resolution support.
Claim Process & Deadlines
To file a claim, affected individuals must submit either an online form (using the login ID and PIN from their notice) or a mailed PDF to the settlement administrator by September 25, 2026. Payments will be distributed via PayPal, Venmo, Zelle, virtual prepaid card, or paper check approximately 75 days after the court’s final approval, scheduled for October 26, 2026.
Settlement Fund Allocation
The total settlement fund covers:
- Up to $200,000 for cash payments to approved claimants.
- Up to $180,000 in attorneys’ fees and costs.
- $3,500 service award for the class representative.
- Credit monitoring costs (based on claim volume).
Background & Legal Outcome
The lawsuit alleged that Community Realty Management failed to adequately secure consumer data, leading to the breach. While the company denies wrongdoing, it agreed to settle to avoid prolonged litigation. The final approval hearing will determine the settlement’s validity.
Source: https://www.claimdepot.com/settlements/crm-data-settlement
CRM Residential cybersecurity rating report: https://www.rankiteo.com/company/crmresidential1
"id": "CRM1786116769",
"linkid": "crmresidential1",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Individuals who received a '
'breach notification',
'industry': 'Real Estate/Property Management',
'name': 'Community Realty Management (CRM Residential)',
'type': 'Business'}],
'attack_vector': 'Unauthorized access to email accounts',
'customer_advisories': 'Breach notification and settlement details provided '
'to affected individuals',
'data_breach': {'personally_identifiable_information': 'Names, Social '
'Security numbers, '
'driver’s license '
'details',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data',
'Medical Records',
'Health Insurance Details']},
'date_detected': '2024-10',
'description': 'A class action settlement has been finalized for individuals '
'affected by a 2024 data breach at Community Realty Management '
'(now CRM Residential), following a cyberattack that exposed '
'sensitive personal information. The breach involved '
'unauthorized access to email accounts, potentially '
'compromising data such as names, Social Security numbers, '
'driver’s license details, financial account information, '
'payment card data, medical records, and health insurance '
'details.',
'impact': {'data_compromised': 'Names, Social Security numbers, driver’s '
'license details, financial account '
'information, payment card data, medical '
'records, health insurance details',
'financial_loss': '$200,000 (settlement fund for cash payments)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action settlement',
'payment_information_risk': 'High',
'systems_affected': 'Email accounts'},
'investigation_status': 'Settlement finalized',
'post_incident_analysis': {'corrective_actions': 'Settlement agreement, '
'credit monitoring for '
'affected individuals',
'root_causes': 'Alleged inadequate security '
'measures to protect consumer data'},
'references': [{'source': 'Class action settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Breach notification to affected '
'individuals',
'enhanced_monitoring': 'Two years of free credit monitoring '
'(CyEx Financial Shield Complete)'},
'title': 'Community Realty Management Data Breach Settlement',
'type': 'Data Breach'}