The Computer Merchant Settles $610K Data Breach Class Action
The Computer Merchant Ltd. (TCM) has agreed to a $610,000 settlement to resolve a class action lawsuit stemming from a July 2024 cyberattack that potentially exposed the personal data of approximately 34,127 current and former employees and job applicants in the U.S. The breach, allegedly resulting from insufficient security measures, led to unauthorized access to sensitive information.
Eligible class members those notified of the breach can submit claims for compensation by June 24, 2026. Payment options include:
- Up to $3,000 for documented identity theft or fraud-related losses (incurred between July 1, 2024, and June 24, 2026).
- Up to $500 for out-of-pocket expenses, such as credit monitoring fees or ID replacement costs.
- $40 (estimated) for a one-time cash payment if no losses are claimed.
- Up to $100 for lost time spent addressing the breach ($20/hour for up to five hours).
- An additional $75 (estimated) for California residents under the CCPA.
All class members will receive a one-year enrollment code for CyEx Financial Shield Complete, which includes $1 million in fraud insurance and identity theft monitoring, regardless of claim submission.
The $610,000 settlement fund covers administrative costs, $152,500 in attorneys’ fees, $5,000 in service awards for class representatives, and payments to approved claimants. TCM will separately fund the CyEx services. The final approval hearing is scheduled for July 9, 2026, with payouts issued afterward.
TCM denies wrongdoing but settled to avoid prolonged litigation. The lawsuit alleged the company failed to implement adequate security protections, leading to the breach. Claims can be filed online or via mail, with supporting documentation required for certain categories.
Source: https://www.claimdepot.com/settlements/computer-merchant-class-settlement
The Computer Merchant, LTD (TCM) cybersecurity rating report: https://www.rankiteo.com/company/the-computer-merchant
"id": "THE1774607805",
"linkid": "the-computer-merchant",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '34,127 current and former '
'employees and job applicants',
'industry': 'Staffing/Recruitment',
'location': 'U.S.',
'name': 'The Computer Merchant Ltd. (TCM)',
'type': 'Company'}],
'customer_advisories': 'Eligible class members notified of compensation '
'options',
'data_breach': {'number_of_records_exposed': '34,127',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personally identifiable '
'information)',
'type_of_data_compromised': 'Personal data, sensitive '
'information'},
'date_detected': '2024-07-01',
'description': 'The Computer Merchant Ltd. (TCM) has agreed to a $610,000 '
'settlement to resolve a class action lawsuit stemming from a '
'July 2024 cyberattack that potentially exposed the personal '
'data of approximately 34,127 current and former employees and '
'job applicants in the U.S. The breach allegedly resulted from '
'insufficient security measures, leading to unauthorized '
'access to sensitive information.',
'impact': {'data_compromised': 'Personal data of current and former employees '
'and job applicants',
'financial_loss': '$610,000 settlement',
'identity_theft_risk': 'High (compensation for identity '
'theft/fraud-related losses)',
'legal_liabilities': 'Class action lawsuit'},
'investigation_status': 'Settled (denies wrongdoing)',
'post_incident_analysis': {'root_causes': 'Insufficient security measures'},
'references': [{'source': 'Class action settlement notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit',
'regulations_violated': 'CCPA (for California '
'residents)'},
'response': {'communication_strategy': 'Class action settlement notice',
'third_party_assistance': 'CyEx Financial Shield Complete '
'(identity theft monitoring and fraud '
'insurance)'},
'title': 'The Computer Merchant Data Breach Class Action Settlement',
'type': 'Data Breach',
'vulnerability_exploited': 'Insufficient security measures'}