🔒 First Financial Security Data Breach Settlement

A ransomware attack on or about October 17, 2023 gave an unauthorized third party access to files containing customers' personal and health information.

U.S. residents who received a data breach notification letter from First Financial Security, Inc. about the October 2023 incident.

Up to $500 for documented out-of-pocket losses, plus 2 years of CyEx Medical Shield Complete (credit monitoring and identity theft insurance) for all class members.

2026-07-20

The case, filed in the U.S. District Court for the Central District of California (No. 2:24-cv-10985-MCS-RAO), alleges that cybercriminals slipped past First Financial's cybersecurity defenses undetected and encrypted company data in a ransomware attack, exposing consumers' names, dates of birth, Social Security numbers, and health information. First Financial disputes the allegations and denies doing anything wrong, but agreed to resolve the case through settlement rather than continue litigating. Beyond the cash payments, the deal also gives class members two years of CyEx Medical Shield Complete credit monitoring. A federal judge still has to sign off on the deal at a final approval hearing set for November 9, 2026, and any payments would follow only after that approval becomes final and unappealed.