OneTouchPoint Data Breach Settlement Offers Up to $5,600 in Compensation
A class action settlement has been reached in the 2022 ransomware attack on OneTouchPoint, a printing and mailing services vendor, with affected individuals eligible for compensation of up to $5,600. The settlement, announced on September 7, 2026, resolves allegations that the company failed to adequately protect sensitive data exposed in the breach.
The incident was discovered on April 28, 2022, after encrypted files were found on OneTouchPoint’s systems. A forensic investigation revealed unauthorized access had occurred as early as April 27, 2022, compromising the personal information of over 2.6 million individuals far exceeding the initial estimate of 1.1 million. The breach impacted data stored for healthcare providers, insurers, and other clients.
Under the settlement, two classes of claimants are defined:
- Monetary class members (those with confirmed compromised data) can seek reimbursement for documented expenses, including up to $500 for out-of-pocket costs (e.g., bank fees, credit monitoring), up to $5,000 for extraordinary losses (e.g., credit repair fees), or $100 for time spent responding to the breach. A flat $75 payment is available for those who do not submit a claim. All members are also eligible for two years of credit monitoring with $1 million in fraud protection.
- Injunctive relief class members (those notified of the breach but without confirmed exposure) will benefit from five years of enhanced cybersecurity measures implemented by OneTouchPoint.
The settlement fund will cover administrative costs, up to $1.5 million in attorneys’ fees, $1,000 service awards for class representatives, and $2 million in security improvements by the company. OneTouchPoint denies wrongdoing but agreed to the settlement to avoid prolonged litigation.
Claims must be submitted by November 16, 2026, with a final court approval hearing scheduled for November 18, 2026. Payments will be distributed via Zelle, PayPal, Venmo, virtual prepaid cards, or paper checks after processing or within 60 days of final approval.
Source: https://eciks.org/25530-onetouchpoint-data-breach-settlement-5600
OneTouchPoint TPRM report: https://www.rankiteo.com/company/onetouchpoint
"id": "one1788827018",
"linkid": "onetouchpoint",
"type": "Ransomware",
"date": "9/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '2.6 million individuals',
'industry': 'Printing and mailing services',
'name': 'OneTouchPoint',
'type': 'Company'}],
'customer_advisories': 'Claims submission details and compensation '
'eligibility',
'data_breach': {'data_encryption': 'Yes (files encrypted by ransomware)',
'number_of_records_exposed': '2.6 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (PII)',
'type_of_data_compromised': 'Personal information'},
'date_detected': '2022-04-28',
'date_resolved': '2026-09-07',
'description': 'A class action settlement has been reached in the 2022 '
'ransomware attack on OneTouchPoint, a printing and mailing '
'services vendor, with affected individuals eligible for '
'compensation of up to $5,600. The settlement resolves '
'allegations that the company failed to adequately protect '
'sensitive data exposed in the breach.',
'impact': {'data_compromised': 'Personal information of over 2.6 million '
'individuals',
'financial_loss': '$2,000,000 (security improvements) + $1,500,000 '
"(attorneys' fees) + $1,000 (service awards) + "
'up to $5,600 per claimant',
'identity_theft_risk': 'High (PII exposed)',
'legal_liabilities': 'Class action settlement'},
'investigation_status': 'Closed (settlement reached)',
'post_incident_analysis': {'corrective_actions': 'Enhanced cybersecurity '
'measures and $2 million in '
'security improvements',
'root_causes': 'Inadequate protection of sensitive '
'data'},
'ransomware': {'data_encryption': 'Yes'},
'references': [{'date_accessed': '2026-09-07',
'source': 'Class action settlement announcement'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Settlement announcement and claim '
'submission details',
'remediation_measures': 'Enhanced cybersecurity measures (5 '
'years for injunctive relief class)',
'third_party_assistance': 'Forensic investigation'},
'title': 'OneTouchPoint Data Breach Settlement',
'type': 'ransomware'}