Steel Warehouse Data Breach Settlement Offers Compensation to Affected Individuals
In January 2025, Steel Warehouse Co. LLC suffered a targeted cyberattack that compromised the personal information of individuals stored in its systems. The company has since agreed to a class action settlement to resolve allegations that it failed to adequately protect sensitive data, including Social Security numbers, birthdates, and financial details.
Who Qualifies for Compensation?
Individuals notified of potential exposure in the breach may file a claim if their information appears on the class list. Eligible claimants can seek reimbursement for:
- Out-of-pocket losses (up to $5,000): Documented expenses related to identity theft, fraud, credit monitoring fees, ID replacement, or communication with financial institutions between October 1, 2024, and the notice date.
- Lost time (up to $60): Compensation for up to three hours at $20/hour for tasks like password changes, account monitoring, or breach research.
- Alternative cash payment ($40): A one-time payment for those who do not claim documented losses or lost time.
- Credit monitoring: One year of CyEx Financial Shield Complete, including $1 million in fraud insurance and identity theft monitoring.
How to File a Claim
Claimants must submit proof via an online form or mail/email a PDF to the settlement administrator by December 1, 2026. Required documentation includes receipts, bank statements, or descriptions of time spent addressing the breach. Payments will be issued via PayPal, Venmo, Zelle, virtual prepaid card, or paper check after final court approval.
Settlement Fund Allocation
The total fund covers:
- $182,500 in attorneys’ fees and costs.
- $2,250 service awards for class representatives.
- Credit monitoring costs (based on claims filed).
- Payments to approved claimants (amounts vary by claims).
Key Dates
- Opt-out deadline: October 2, 2026.
- Final approval hearing: October 21, 2026.
- Payouts: Issued post-approval.
Steel Warehouse denies wrongdoing but settled to avoid prolonged litigation. The breach underscores the financial and operational risks of inadequate cybersecurity measures.
Source: https://www.claimdepot.com/settlements/steel-warehouse-data-settlement-706d8
Steel, LLC cybersecurity rating report: https://www.rankiteo.com/company/steel-llc
"id": "STE1787934828",
"linkid": "steel-llc",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Individuals notified of '
'potential exposure',
'industry': 'Manufacturing/Warehousing',
'name': 'Steel Warehouse Co. LLC',
'type': 'Company'}],
'customer_advisories': 'Settlement notice with claim instructions and '
'deadlines',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (PII and financial data)',
'type_of_data_compromised': ['Social Security numbers',
'birthdates',
'financial details']},
'date_detected': '2025-01-01',
'description': 'In January 2025, Steel Warehouse Co. LLC suffered a targeted '
'cyberattack that compromised the personal information of '
'individuals stored in its systems. The company has since '
'agreed to a class action settlement to resolve allegations '
'that it failed to adequately protect sensitive data, '
'including Social Security numbers, birthdates, and financial '
'details.',
'impact': {'data_compromised': 'Social Security numbers, birthdates, '
'financial details',
'financial_loss': '$182,500 (attorneys’ fees and costs) + $2,250 '
'(service awards) + variable claims',
'identity_theft_risk': 'High (PII exposed)',
'legal_liabilities': 'Class action settlement',
'payment_information_risk': 'High (financial details exposed)'},
'investigation_status': 'Settled (class action)',
'lessons_learned': 'Inadequate cybersecurity measures can lead to financial '
'and operational risks, including legal liabilities and '
'reputational damage.',
'post_incident_analysis': {'corrective_actions': 'Settlement agreement to '
'compensate affected '
'individuals and improve '
'data protection measures',
'root_causes': 'Failure to adequately protect '
'sensitive data'},
'recommendations': 'Implement stronger data protection measures, regular '
'security audits, and incident response planning to '
'prevent future breaches.',
'references': [{'source': 'Settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Settlement notice and claim process'},
'title': 'Steel Warehouse Data Breach Settlement',
'type': 'Data Breach'}