Hexpol Data Breach Settlement Offers Compensation to Affected U.S. Employees
Hexpol Compounding Americas LLC and Hexpol Holding Inc. have agreed to a class action settlement following a December 2024 data breach that exposed the personal information of approximately 1,723 current and former U.S. employees. The incident compromised sensitive data, including names and Social Security numbers, after a targeted cyberattack on the company’s systems.
Eligible class members those who received notice of the breach may file claims for compensation by June 15, 2026. The settlement provides multiple payout options:
- Documented losses: Up to $5,000 for unreimbursed expenses related to identity theft, credit monitoring, ID replacement, or tax-related fees incurred after July 3, 2025.
- Lost time: Up to $250 (10 hours at $25/hour) for time spent addressing tax-related issues caused by the breach.
- Alternative cash payment: A $70 one-time payment for those not claiming other benefits.
- Credit monitoring: Three years of CyEx Financial Shield Pro, including fraud monitoring and $1 million in identity theft insurance.
Claims require a unique ID and PIN from the settlement notice, with additional documentation needed for loss or time-based reimbursements. Payments will be distributed via PayPal, Venmo, Zelle, virtual prepaid cards, or paper checks after final court approval, expected following an August 11, 2026 hearing.
The settlement resolves allegations that Hexpol failed to adequately protect employee data, though the company denies wrongdoing. The fund will cover administration costs, up to $125,000 in attorneys’ fees, and $5,000 in service awards to class representatives, with remaining funds allocated to approved claims. Those wishing to opt out must do so by May 15, 2026.
Source: https://www.claimdepot.com/settlements/hexpol-data-settlement
HEXPOL Compounding cybersecurity rating report: https://www.rankiteo.com/company/hexpol-compounding
"id": "HEX1775148772",
"linkid": "hexpol-compounding",
"type": "Breach",
"date": "4/2026",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '1723 current and former '
'employees',
'industry': 'Manufacturing',
'location': 'U.S.',
'name': 'Hexpol Compounding Americas LLC',
'type': 'Company'},
{'customers_affected': '1723 current and former '
'employees',
'industry': 'Manufacturing',
'location': 'U.S.',
'name': 'Hexpol Holding Inc.',
'type': 'Company'}],
'attack_vector': 'Targeted Cyberattack',
'customer_advisories': 'Compensation claims notice to affected employees',
'data_breach': {'number_of_records_exposed': '1723',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers']},
'date_detected': '2024-12-01',
'description': 'Hexpol Compounding Americas LLC and Hexpol Holding Inc. have '
'agreed to a class action settlement following a December 2024 '
'data breach that exposed the personal information of '
'approximately 1,723 current and former U.S. employees. The '
'incident compromised sensitive data, including names and '
'Social Security numbers, after a targeted cyberattack on the '
'company’s systems.',
'impact': {'data_compromised': 'Names, Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Class action settlement'},
'investigation_status': 'Settled',
'post_incident_analysis': {'corrective_actions': 'Settlement fund for '
'compensation and credit '
'monitoring',
'root_causes': 'Alleged failure to adequately '
'protect employee data'},
'references': [{'source': 'Class action settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action settlement'},
'response': {'communication_strategy': 'Settlement notice to affected '
'employees'},
'title': 'Hexpol Data Breach Settlement Offers Compensation to Affected U.S. '
'Employees',
'type': 'Data Breach'}