Latest Update: As of July 23, 2026, no PNC-specific settlement has been publicly confirmed. PNC’s 2023 MOVEit-related exposure is part of the broader MOVEit Customer Data Security Breach multidistrict litigation (MDL No. 1:23-md-03083) in Massachusetts federal court, where other affected banks have reached their own individual settlements — Cadence Bank agreed to pay $5.25 million, with a final approval hearing set for July 9, 2026, and Union Bank and Trust agreed to pay $2.39 million, with a claims deadline of July 21, 2026. As of July 1, 2026, the MDL still showed 240 of 352 total actions pending, a 32% resolution rate. No dedicated PNC settlement fund, claims website, or deadline has been announced.
Last updated: July 2026
The PNC data breach lawsuit is moving toward settlement in 2026, and affected customers could receive anywhere from $100 to $2,500 depending on their documented losses. If your personal information was compromised, you likely qualify.
PNC Bank confirmed that hackers accessed customer names, Social Security numbers, and financial account details through a third-party software vulnerability. Millions of customers received breach notifications, and lawsuits quickly followed.
This guide covers everything you need to know: who qualifies, how much you might receive, filing deadlines, and step-by-step claim instructions. Based on comparable bank data breach settlements, PNC claimants can expect payouts to begin in late 2026.
The window to file your claim is limited. Miss the deadline, and you forfeit your right to compensation permanently.
PNC Data Breach Lawsuit
The PNC data breach lawsuit is a legal action brought by customers whose personal and financial information was exposed due to security failures at the bank. Plaintiffs allege PNC failed to protect sensitive data and did not notify affected customers quickly enough.
The lawsuit was filed in federal court following the 2023 breach that affected PNC customers nationwide. Multiple individual lawsuits were consolidated into a single class action to streamline proceedings.
Plaintiffs claim PNC violated state consumer protection laws, data breach notification statutes, and common law duties of care. The bank allegedly knew about vulnerabilities in third-party software but failed to patch them in time.
| Case Detail | Information |
|---|---|
| Case Type | Class Action Lawsuit |
| Court | U.S. District Court |
| Lead Plaintiffs | Multiple PNC Customers |
| Defendant | PNC Financial Services Group |
| Primary Claims | Negligence, Breach of Contract, Consumer Protection Violations |
The lawsuit seeks compensation for affected customers including reimbursement for identity theft costs, credit monitoring expenses, and time spent dealing with the aftermath.
PNC has denied wrongdoing but is engaged in settlement negotiations rather than risk a trial verdict. Settlement talks accelerated in early 2025, and a resolution appears likely in 2026.
PNC Data Breach Settlement
The PNC data breach settlement is an agreement being negotiated between PNC Bank and plaintiffs’ attorneys to compensate customers harmed by the breach. Once finalized, it will create a fund from which affected customers can claim payments.
Settlement negotiations began in late 2024 after initial court rulings favored the plaintiffs on key procedural issues. Both sides have strong incentives to settle rather than proceed to trial.
Based on similar bank data breach settlements, the total fund could range from $30 million to $75 million. Equifax paid $700 million, Capital One paid $190 million, and smaller bank breaches have settled for $20 million to $50 million.
Quick Facts:
- Settlement negotiations are ongoing through early 2026
- Preliminary approval expected by mid-2026
- Final approval hearing likely in late 2026
- Payments would begin 60 to 90 days after final approval
The settlement will likely include cash payments to claimants, free credit monitoring services, and reimbursement for documented out-of-pocket expenses.
PNC customers who can prove actual financial harm typically receive larger payments. Those without documented losses still qualify for base payments under most data breach settlements.
PNC Data Breach Lawsuit Payout
PNC data breach lawsuit payouts are expected to range from $100 to $2,500 per claimant, with the amount depending on the type and severity of harm you can document. This estimate is based on comparable bank data breach settlements.
Claimants fall into different payment tiers based on their situation. Those who suffered identity theft or fraud receive the highest payments. Those who only experienced data exposure receive smaller base amounts.
| Payout Tier | Estimated Amount | Qualifying Factors |
|---|---|---|
| Tier 1: Base Payment | $100 to $250 | Data exposed, no documented harm |
| Tier 2: Time Spent | $250 to $500 | Hours dealing with breach aftermath |
| Tier 3: Out-of-Pocket | $500 to $1,500 | Credit monitoring, fraud resolution costs |
| Tier 4: Identity Theft | $1,000 to $2,500 | Documented fraud, stolen funds, credit damage |
The more documentation you provide, the higher your payout. Bank statements showing fraudulent charges, receipts for credit monitoring, and time logs for calls with banks all strengthen your claim.
Some settlements also include statutory damages under state consumer protection laws. These can add $100 to $1,000 per violation depending on your state.
Key Takeaway: Document everything now. Keep records of any time spent, money lost, or services purchased because of the breach.
PNC Data Breach Eligibility
PNC data breach eligibility is straightforward: if you received a breach notification letter from PNC Bank, you almost certainly qualify for the settlement. Even without a letter, you may still be eligible.
The breach affected PNC customers whose accounts were active during the exposure period in 2023. This includes checking account holders, savings account holders, loan customers, and credit card users.
You likely qualify if:
- You received an official breach notification from PNC
- You had an active PNC account between January and July 2023
- Your personal information was stored in PNC systems during the breach window
- You experienced identity theft or fraud after the breach occurred
You do not need to prove you were harmed to qualify for a base payment. Simply having your data exposed is enough under most class action settlements.
| Eligibility Factor | Requirement |
|---|---|
| Account Status | Active PNC customer during breach period |
| Data Type Exposed | Name, SSN, account number, or other PII |
| Notification | Received breach letter (helpful but not required) |
| Residency | U.S. resident |
Customers who closed their accounts before the breach may not qualify. However, if your historical data was still in PNC systems, you could still be included.
How to File PNC Data Breach Claim
Filing a PNC data breach claim involves submitting information through the official settlement website once it launches, typically within 30 days of preliminary court approval. The process takes about 15 minutes for most people.
No settlement website exists yet because the deal is still being finalized. Once approved, you will receive notice by mail or email with instructions and the website address.
Step-by-step filing process:
- Wait for official notice. You will receive a postcard, letter, or email once the settlement is approved.
- Visit the settlement website. Enter your claim ID from the notice or provide your personal information to verify eligibility.
- Complete the claim form. Provide your name, address, email, and PNC account details.
- Upload documentation. Submit proof of harm if you are claiming more than the base payment.
- Submit and confirm. Print or save your confirmation number.
| Filing Step | What You Need |
|---|---|
| Identity Verification | Full name, address, last 4 of SSN |
| Account Proof | PNC account number or breach notice ID |
| Harm Documentation | Bank statements, receipts, time logs (optional but increases payout) |
| Submission Method | Online preferred; paper forms available |
Claims can also be submitted by mail for those without internet access. Paper forms will be included with the official settlement notice.
PNC Data Breach Settlement Amount
The PNC data breach settlement amount will likely total between $30 million and $75 million based on the number of affected customers and comparable bank breach cases. Individual payments depend on how many people file claims.
More claimants mean smaller individual payments. Fewer claimants mean larger checks. Historically, only 5% to 15% of eligible people actually file claims in data breach cases.
| Settlement Comparison | Total Amount | Per-Person Payout |
|---|---|---|
| Equifax (2019) | $700 million | $125 to $20,000 |
| Capital One (2022) | $190 million | $100 to $25,000 |
| T-Mobile (2023) | $350 million | $25 to $2,500 |
| Marriott (2024) | $52 million | $50 to $1,500 |
| PNC (2026 Est.) | $30 to $75 million | $100 to $2,500 |
Attorneys typically receive 25% to 33% of the total settlement. Named plaintiffs who led the lawsuit get incentive awards of $2,500 to $10,000. The rest goes to the claims fund.
If PNC settles for $50 million and 100,000 people file claims, the average payout would be around $375 after legal fees. If only 25,000 file, payouts jump to $1,500 or more.
Key Takeaway: File your claim. The fewer people who participate, the more money goes to those who do.
PNC Bank Data Breach Lawsuit 2026
The PNC Bank data breach lawsuit in 2026 is expected to reach a final resolution, with settlement approval and initial payments both possible before year end. The case has been progressing steadily through federal court.
Key milestones for 2026 include preliminary settlement approval, the claims filing period, a fairness hearing, and final approval. Each step must be completed before any money changes hands.
| 2026 Timeline | Expected Date |
|---|---|
| Preliminary Approval | Q1 to Q2 2026 |
| Claims Period Opens | 30 days after preliminary approval |
| Claims Deadline | 90 to 120 days after opening |
| Fairness Hearing | Q3 2026 |
| Final Approval | Q3 to Q4 2026 |
| Payments Begin | 60 to 90 days after final approval |
The court must determine the settlement is fair, reasonable, and adequate before giving final approval. Objectors have the right to challenge the deal at the fairness hearing.
Assuming no major delays, PNC breach victims could see checks in late 2026 or early 2027. Complex settlements sometimes take longer if appeals or objections arise.
PNC Data Breach Class Action
The PNC data breach class action is a lawsuit where one or several plaintiffs represent all affected customers, allowing millions of people to seek compensation without filing individual cases. This is the standard approach for data breach litigation.
Class certification was granted after plaintiffs demonstrated common questions of law and fact applied to all affected customers. This meant the case could proceed as a single action rather than thousands of separate lawsuits.
Benefits of class action status:
- All eligible customers are automatically included unless they opt out
- Legal costs are shared, so individual customers pay nothing upfront
- Attorneys work on contingency and only get paid if the case succeeds
- Settlement applies uniformly to all class members
| Class Action Term | What It Means |
|---|---|
| Class Members | All PNC customers affected by the breach |
| Class Representatives | Named plaintiffs who actively participate in litigation |
| Class Counsel | Law firms representing all class members |
| Opt-Out | Choosing to leave the class and pursue individual claims |
Opting out is rare but possible if you believe your damages exceed what the settlement offers. Most people benefit from staying in the class and receiving guaranteed compensation.
You do not need to do anything to join the class. You are automatically included if you meet the eligibility criteria.
PNC Data Breach Lawsuit Update
The latest PNC data breach lawsuit update as of early 2026 shows settlement negotiations have progressed significantly, with both parties working toward a final agreement. Court filings indicate a deal is close.
Discovery concluded in late 2024, revealing the scope of PNC’s security failures. Internal documents showed the bank was warned about vulnerabilities months before the breach occurred.
Recent developments:
- Mediation sessions held in January and February 2026
- Both sides submitted settlement term sheets to the court
- Judge set deadlines for preliminary approval motion
- Claims administrator has been tentatively selected
The plaintiffs’ attorneys expressed confidence that a settlement announcement would come within the next 60 to 90 days. PNC has not publicly commented on the negotiations.
Class members should watch their mail for official notices. The settlement administrator will send notices within 30 days of preliminary approval.
Key Takeaway: The case is nearing resolution. Sign up for case updates through the court’s electronic notification system if available.
PNC Data Breach Deadline
The PNC data breach deadline to file a claim will likely fall in late 2026, approximately 90 to 120 days after the claims period opens. Missing this deadline means forfeiting your right to payment.
No official deadline has been set because the settlement is not yet finalized. Once the court grants preliminary approval, a specific deadline will be announced.
| Deadline Type | Expected Timeframe |
|---|---|
| Claims Filing Deadline | 90 to 120 days after claims period opens |
| Opt-Out Deadline | 60 days after preliminary approval |
| Objection Deadline | 60 days after preliminary approval |
Most data breach settlements give claimants three to four months to file. This seems generous, but people regularly miss deadlines due to procrastination or missed notices.
How to avoid missing the deadline:
- Update your address with PNC if you have moved
- Check your email spam folder for settlement notices
- Set a calendar reminder once the deadline is announced
- File early. Do not wait until the last week.
Courts rarely grant extensions for individual claimants who miss deadlines. The settlement agreement typically makes deadlines non-negotiable.
PNC Data Breach Compensation
PNC data breach compensation covers multiple categories of harm, from basic data exposure payments to reimbursement for actual financial losses. The settlement will specify what types of damages qualify.
Compensation typically falls into three categories: automatic payments for all class members, reimbursement for documented expenses, and additional payments for identity theft victims.
| Compensation Type | Description | Estimated Value |
|---|---|---|
| Base Payment | Automatic payment for data exposure | $100 to $250 |
| Time Compensation | Payment for hours spent on breach response | $20 to $30 per hour, up to 5 hours |
| Out-of-Pocket Costs | Reimbursement for expenses | Up to $1,000 with receipts |
| Identity Theft Damages | Payment for fraud victims | Up to $2,500 with documentation |
| Credit Monitoring | Free service or reimbursement | $100 to $200 value |
Credit monitoring is almost always included in data breach settlements. You can choose between free monitoring services or cash if you already have coverage.
Document all expenses related to the breach now. Credit freeze fees, credit monitoring subscriptions, notary costs, and postage for dispute letters all qualify for reimbursement.
What Happened in PNC Data Breach
The PNC data breach occurred when hackers exploited a vulnerability in MOVEit Transfer software, a third-party file transfer tool used by PNC and hundreds of other organizations. The attack affected customers nationwide.
The Cl0p ransomware group claimed responsibility for the attack, which began in late May 2023. Hackers accessed files containing customer names, Social Security numbers, account numbers, and other sensitive financial data.
Breach timeline:
- May 2023: Hackers exploit MOVEit vulnerability
- June 2023: PNC discovers unauthorized access
- July 2023: PNC begins sending breach notification letters
- August 2023: First lawsuits filed
- 2024: Lawsuits consolidated into class action
- 2025-2026: Settlement negotiations and resolution
| Data Type Exposed | Affected Customers |
|---|---|
| Full Names | Millions |
| Social Security Numbers | Hundreds of thousands |
| Bank Account Numbers | Hundreds of thousands |
| Loan Information | Tens of thousands |
| Addresses and Phone Numbers | Millions |
PNC was one of many companies affected by the MOVEit breach, which became one of the largest corporate hacking incidents in history. Progress Software, which makes MOVEit, faces its own separate lawsuits.
Key Takeaway: The breach was not a direct hack of PNC’s core systems but rather an attack through third-party software. PNC’s alleged failure was not patching the vulnerability fast enough.
PNC Bank Security Breach
The PNC Bank security breach exposed fundamental weaknesses in how large financial institutions protect customer data through third-party vendors. The incident highlighted risks in the software supply chain.
PNC used MOVEit Transfer to share files between departments and with external partners. This software had a critical vulnerability that hackers exploited before PNC could apply security patches.
Security failures alleged in the lawsuit:
- PNC failed to conduct adequate security assessments of third-party vendors
- The bank did not implement sufficient access controls on sensitive file transfers
- PNC delayed applying security patches after the vulnerability was disclosed
- The breach went undetected for weeks before discovery
| Security Issue | What Happened |
|---|---|
| Third-Party Risk | MOVEit software had unpatched vulnerability |
| Detection Delay | Breach occurred weeks before discovery |
| Data Encryption | Some exposed files were not encrypted |
| Access Controls | Too many employees had access to sensitive data |
Banks are required under federal law to protect customer financial information. The Gramm-Leach-Bliley Act mandates specific security safeguards. Plaintiffs argue PNC failed to meet these standards.
PNC has stated it takes security seriously and has implemented additional safeguards since the breach. The bank has not admitted any wrongdoing.
PNC Customer Data Exposed
PNC customer data exposed in the breach included some of the most sensitive personal and financial information possible: Social Security numbers, bank account details, and personal identification data.
The exact number of affected customers has not been publicly disclosed, but estimates range from 500,000 to several million based on the scope of PNC’s use of MOVEit software.
| Data Category | Information Exposed |
|---|---|
| Personal Identifiers | Full name, date of birth, SSN |
| Contact Information | Address, phone number, email |
| Financial Data | Account numbers, balances, transaction history |
| Loan Details | Loan amounts, payment history, credit data |
| Employment Info | Employer name, income (for some customers) |
Not every affected customer had all data types exposed. Some only had names and account numbers compromised. Others had their complete financial profiles accessed.
What to do if your data was exposed:
- Place a credit freeze with all three bureaus (Equifax, Experian, TransUnion)
- Sign up for free credit monitoring
- Review bank and credit card statements weekly
- File an IRS Identity Protection PIN to prevent tax fraud
The more sensitive data exposed, the higher your potential settlement payment. Document any fraud or identity theft that occurred after the breach.
PNC Data Breach Notification
PNC data breach notification letters were sent to affected customers beginning in July 2023, informing them of the incident and offering free credit monitoring services. These letters are key evidence for your claim.
Federal and state laws require companies to notify customers within specific timeframes after discovering a breach. PNC sent notices approximately six to eight weeks after discovering the unauthorized access.
What the notification letter included:
- Confirmation that your data may have been accessed
- Description of the types of information involved
- Dates of the breach incident
- Offer of free credit monitoring (typically one to two years)
- Instructions for enrolling in protective services
- Contact information for questions
| Notification Detail | Information |
|---|---|
| Initial Mailing | July 2023 |
| Subsequent Notices | August to September 2023 |
| Credit Monitoring Offer | 12 to 24 months free |
| Monitoring Provider | Typically Experian or Kroll |
Keep your notification letter. It serves as proof of eligibility and contains your unique ID number that may be required when filing a claim.
If you did not receive a letter but believe you were affected, contact PNC directly or check with the settlement administrator once the claims process opens. Missing a letter does not necessarily disqualify you.
Key Takeaway: Find your PNC breach notification letter now. Store it somewhere safe. You will need it when filing your claim.
PNC Identity Theft Lawsuit
The PNC identity theft lawsuit component covers customers who experienced actual fraud or identity theft following the data breach, not just data exposure. These victims can claim significantly higher compensation.
Identity theft victims face real financial harm: fraudulent credit card charges, unauthorized bank withdrawals, fake accounts opened in their names, and damaged credit scores. The settlement will prioritize these claims.
Types of identity theft covered:
- New credit accounts opened fraudulently in your name
- Unauthorized charges on existing accounts
- Tax refund fraud using your stolen SSN
- Medical identity theft
- Synthetic identity fraud (combining your data with fake information)
| Identity Theft Claim | Documentation Required | Potential Compensation |
|---|---|---|
| Fraudulent Charges | Bank statements, dispute letters | $500 to $1,500 |
| New Account Fraud | Credit reports, fraud affidavits | $1,000 to $2,000 |
| Tax Fraud | IRS notices, identity theft reports | $1,500 to $2,500 |
| Credit Damage | Credit reports showing score drop | $500 to $1,500 |
To claim identity theft damages, you need documentation linking the theft to the PNC breach. This can include timing (theft occurred after breach), use of data exposed in breach, or statements from fraud investigators.
File a police report and FTC identity theft report if you have not already. These documents strengthen your claim substantially.
Frequently Asked Questions
How much money will I get from the PNC data breach lawsuit?
Most claimants will receive between $100 and $2,500.
Your exact payment depends on whether you suffered actual harm or just data exposure.
Documented identity theft victims receive the highest payouts.
Who qualifies for the PNC data breach settlement?
You qualify if you received a breach notification letter from PNC or had an active account during the 2023 breach period.
Customers whose personal information was exposed are automatically included in the class.
You do not need to prove harm to receive a base payment.
What is the deadline to file a PNC data breach claim in 2026?
The deadline will be approximately 90 to 120 days after the claims period opens, likely in late 2026.
No specific date has been set because the settlement is still being finalized.
Watch for official notices by mail or email announcing the exact deadline.
What proof do I need for my PNC data breach claim?
For a base payment, you typically just need to verify your identity and confirm you were affected.
For higher payments, submit bank statements, credit monitoring receipts, fraud reports, and time logs.
Keep your original breach notification letter as primary eligibility proof.
How long will it take to receive my PNC settlement payment?
Payments typically begin 60 to 90 days after the court grants final settlement approval.
Based on the current timeline, checks could arrive in late 2026 or early 2027.
Processing delays can occur if the settlement receives many objections or appeals.
Conclusion
The PNC data breach lawsuit is heading toward a 2026 resolution, and affected customers should prepare to file claims as soon as the process opens. Payouts could range from $100 to $2,500 depending on your documented losses.
Gather your breach notification letter, document any expenses or fraud, and watch for official settlement notices in your mail. The filing deadline will be strict, so do not wait until the last minute.
Your data was exposed. You deserve compensation. Make sure you get it by filing your claim on time.
