ECSI Data Breach Settlement: Claim by Dec 21
Got an ECSI data breach notice? The $6.5M settlement pays up to $5,000 in documented losses or about $100. Claims are due Dec 21, 2026.
A settlement covers people whose personal information was potentially accessed in the 2023 to 2024 ECSI cyberattack, and claim forms are due December 21, 2026.
You likely qualify if you received an ECSI data breach notice. It covers personal information potentially accessed in the cyberattack on Educational Computer Systems, Inc. (ECSI) between October 29, 2023 and February 12, 2024. Each class member picks one benefit: reimbursement of up to $5,000 in documented losses, or an estimated $100 cash payment that may change pro rata. Claims are due December 21, 2026, and the official settlement website is DataSettlementECSI.com.
The class action is Hood, et al. v. Educational Computer Systems, Inc., and the court granted preliminary approval on August 5, 2026. Final approval is still pending, with a hearing set for January 11, 2027. The lawsuit alleges ECSI failed to put adequate cybersecurity measures in place to protect private information.
Can You Claim in the ECSI Data Breach Settlement?
You can claim if your personal information was potentially accessed in the cyberattack on ECSI's website between October 29, 2023 and February 12, 2024. Court documents put the class at roughly 2,577,994 people. If you received a settlement notice, it carries the ID and confirmation code you need to file online.
The deadline to submit a claim form online, or to mail a paper form postmarked in time, is December 21, 2026. The deadline to opt out or object comes first, on November 20, 2026.
Class members choose one of two benefits. The first is reimbursement of up to $5,000 for documented, unreimbursed losses. The second is an estimated $100 cash payment with no proof required. The official site gives no formal class definition. Check your notice and the Long Form Notice at DataSettlementECSI.com to confirm you are included.
Why You May Have Received a Notice
ECSI is a student loan and tax servicing vendor and a higher-education financial services provider. That role is why student loan borrowers and people billed through colleges can receive a notice from a company they never picked themselves. The settlement calls the cyberattack on ECSI's website, which ran from October 29, 2023 to February 12, 2024, the "Security Incident."
The data potentially exposed in the Security Incident includes these items:
- Names, addresses, and email addresses
- School names and ECSI internal identifiers
- Dollar amounts such as tuition paid, scholarships or grants, and student loan interest paid
- The last four digits of the Social Security number, and in certain cases full Social Security numbers
Not every person had every item exposed. Check your notice for your own situation, and our data breach rights explainer covers steps to take once your information has been exposed.
Who Is Covered by the ECSI Settlement
The ECSI settlement covers United States residents whose personal information was potentially accessed in the Security Incident.
| Situation | Covered? | Note |
|---|---|---|
| You received a notice saying your information was potentially accessed in the Security Incident | Likely covered; confirm on your notice | Use the ID and confirmation code on the notice to file online |
| Your information was potentially accessed between October 29, 2023 and February 12, 2024 | Within the class as described | The official site gives no formal class definition, so read the notice |
| You opt out by November 20, 2026 | No settlement money | You keep the right to file your own lawsuit against ECSI |
| You object by November 20, 2026 | Still in the class | You stay in the class while telling the court you disagree with the terms |
| You do nothing | Bound by the settlement | No payment is made without a valid claim form |
If you did not receive a notice but believe your data was involved, the Claim Form and Long Form Notice are posted on the official ECSI settlement website. You can print the paper claim form there.
What the Lawsuit Alleges
The plaintiffs in Hood v. Educational Computer Systems allege that ECSI failed to implement adequate cybersecurity measures to protect private information. The case is Hood, et al. v. Educational Computer Systems, Inc., Case No. 2:24-cv-00666-CCW, in the U.S. District Court for the Western District of Pennsylvania. It was filed on May 3, 2024.
The settlement fund is reported at $6.5 million, a total the official settlement website does not list. The court granted preliminary approval on August 5, 2026 and must still decide whether to grant final approval. The court has not found for either side on the claims.
The Claim Form, Long Form Notice, Consolidated Amended Complaint, and Settlement Agreement and Release are all posted on DataSettlementECSI.com.
How Much the ECSI Data Breach Settlement Pays
The ECSI data breach settlement pays either reimbursement of up to $5,000 for documented losses or an estimated $100 cash payment, and each class member chooses only one. Reimbursement covers out-of-pocket losses that were not paid back to you and were more likely than not caused by the Security Incident.
| Option | Proof Needed | Amount |
|---|---|---|
| Reimbursement of documented losses | Proof such as credit card statements or receipts | Up to $5,000.00 for documented, unreimbursed losses |
| Alternative cash payment | No proof required | Estimated $100.00, which may be adjusted pro rata |
The $100 figure is an estimate. It may be adjusted pro rata depending on the total number of approved claims and other factors. No payment amount is guaranteed.
Reimbursement is capped at $5,000 and requires documented, unreimbursed losses. If you have no receipts, the cash payment requires no proof. Neither published source mentions credit monitoring.
What to Gather and How to File
To file an ECSI settlement claim, submit the claim form online or mail a paper form postmarked by December 21, 2026. A valid claim form is required to receive any money.
- Find your settlement notice and write down the ID and confirmation code. You need both to file online.
- Decide between reimbursement of documented losses and the estimated $100 cash payment.
- If you choose reimbursement, gather credit card statements, receipts, or other records showing unreimbursed losses tied to the Security Incident.
- Go to the Submit Claim page at DataSettlementECSI.com, or print the paper claim form from the same site.
- Complete the form and submit it online, or mail it postmarked no later than December 21, 2026.
Scammers copy headlines about breaches and settlements. A real settlement administrator never asks for a fee to file a claim or release money. Type the official website address into your browser instead of tapping a link in an unsolicited text or email.
After a breach, watch your statements and consider a credit freeze. Our guide to your rights after a data breach walks through those steps.
Key Dates and Your Options
The opt-out and objection deadline of November 20, 2026 comes about a month before the December 21, 2026 claim deadline.
| Date | Event |
|---|---|
| November 20, 2026 | Opt-out (exclusion) and objection deadline |
| December 21, 2026 | Claim form deadline, online or postmarked |
| January 11, 2027 | Final approval hearing |
Opting out keeps your right to sue ECSI on your own, but you get no settlement money. Objecting tells the court you disagree with the terms while you stay in the class. The sources do not describe the opt-out or objection procedure, so read the Long Form Notice on the official settlement website before November 20, 2026.
Filing a claim does not produce an immediate payment. Payments are made only after the court grants final approval and any appeals are resolved, and no payment date has been published. Our guides on how class action settlements work and how to claim settlement money explain those stages.
Settlement money may be taxable depending on what it replaces. This page cannot give tax advice, but see our overview of whether settlements are taxable. Our list of October 2026 claim deadlines and the class actions hub cover other open settlements.
This page cannot tell you whether you qualify, how much you will receive, or when. The settlement administrator and the court decide those questions. If your information was exposed in the Security Incident, file your ECSI data breach settlement claim at DataSettlementECSI.com before December 21, 2026.
Frequently Asked Questions
How much money do you get from the ECSI data breach settlement?
Class members choose one of two benefits. Reimbursement covers up to $5,000 in documented, unreimbursed losses more likely than not caused by the Security Incident. The alternative cash payment is an estimated $100 with no proof required. The $100 figure may be adjusted pro rata depending on the total number of approved claims and other factors.
How do I file an ECSI settlement claim?
File online on the Submit Claim page at DataSettlementECSI.com using the ID and confirmation code from your settlement notice. You can also mail a completed paper claim form postmarked by December 21, 2026. A valid claim form is required to receive any money.
What is the deadline to claim the ECSI settlement?
Claim forms must be submitted online or postmarked by December 21, 2026. The deadline to opt out or object is November 20, 2026. The final approval hearing is scheduled for January 11, 2027.
Do I need proof to claim?
You need no proof for the alternative cash payment of an estimated $100. Reimbursement of documented losses up to $5,000 requires proof such as credit card statements or receipts. Each class member chooses only one of the two options.
Why did I get an ECSI notice if I never heard of the company?
ECSI is a student loan and tax servicing vendor and a higher-education financial services provider. That role is why student loan borrowers and people billed through colleges can receive a notice from a company they never picked themselves.
Should I opt out or object?
Opting out keeps your right to sue ECSI on your own, but you get no settlement money. Objecting tells the court you disagree with the terms while you stay in the class. Both are due November 20, 2026; read the Long Form Notice posted at DataSettlementECSI.com before deciding.
When will ECSI settlement payments be sent?
No payment date has been published. Payments are made only after the court grants final approval and any appeals are resolved. The final approval hearing is set for January 11, 2027.
Not sure where you stand?
Check your eligibility in under 2 minutes — free, private, and no commitment required.