NWRPC Data Breach Class Action Settlement

Individuals notified by NWRPC about the August 2024 data breach may be eligible to claim up to $3,000 plus three years of free credit monitoring. The deadline is April 24, 2026.

NWRPC, a retirement plan consulting company, experienced a cyberattack in August 2024 that may have exposed the private information of its clients. A class action lawsuit followed, and the parties have reached a $1,200,000 settlement to resolve the claims without a trial.

If you received a notice from NWRPC about this incident, you may be entitled to compensation. Below is everything you need to know to file a claim before the April 24, 2026 deadline.

Who can file a claim?

You are eligible to participate in the NWRPC data breach settlement if all of the following apply:

• U.S. person: You are a person located in the United States.
• Affected by the breach: Your private information was potentially compromised in the August 2024 cyberattack on NWRPC’s computer systems.
• Received notice: You received a notice of the data incident from NWRPC.

How much can class members receive?

The NWRPC data breach settlement offers several compensation options depending on your situation and the documentation you can provide.

• Alternative cash payment: $50 with no documentation required. This amount may be reduced proportionally if claims exceed the available fund.
• Documented losses (Cash Payment A): Up to $3,000 for out-of-pocket expenses you can document, including receipts, records of identity theft or fraud losses, credit monitoring fees, credit freeze fees, costs to replace identification documents, and postage.
• Credit monitoring: Three years of one-bureau credit monitoring at no cost, with no documentation required.

You can claim both cash compensation and credit monitoring. The maximum possible recovery is up to $3,000 in documented losses plus three years of free credit monitoring.

How to claim a settlement payment

You can submit your claim online or by mail. To file online, visit the settlement website and complete the claim form. To file by mail, download and print the PDF claim form, then send the completed form to the settlement administrator at the address below.

All claims must be submitted or postmarked no later than April 24, 2026.

What proof or documentation is necessary?

Documentation requirements depend on which payment option you choose.

• No documentation needed: If you select the $50 alternative cash payment or the free credit monitoring benefit, no supporting documents are required.
• Documentation required for up to $3,000: To claim Cash Payment A, you must submit receipts or other records showing your out-of-pocket losses. Qualifying documents include records of identity theft or fraud losses, credit monitoring fees, credit freeze fees, costs to replace IDs or documents, and postage expenses related to the breach.

Payout options

• Alternative cash ($50): Available to all eligible class members with no documentation. Subject to pro rata reduction if total claims exceed the fund.
• Documented cash (up to $3,000): Available to class members who can provide qualifying receipts and records of losses tied to the breach.
• Credit monitoring (3 years): One-bureau credit monitoring at no charge. Available regardless of whether you also claim cash compensation.

Settlement fund breakdown

The settlement fund covers:

Attorneys’ fees and service awards are paid separately by NWRPC and do not reduce the $1,200,000 available for class member claims.

When is the NWRPC settlement payout date?

The court has scheduled a fairness hearing for June 12, 2026. At this hearing, the judge will decide whether to grant final approval to the settlement. If approved, the settlement administrator will process and distribute payments after that date.

The deadline to file a claim or request exclusion is April 24, 2026. No specific payment date has been announced yet. Class members should expect several months between final approval and the receipt of payment checks.

Why did this class action settlement happen?

In August 2024, NWRPC’s computer systems were hit by a cyberattack. The incident potentially exposed the private information of individuals whose data NWRPC held as part of its retirement plan consulting services.

Following the breach, NWRPC sent notices to affected individuals. Plaintiffs then filed a class action lawsuit in the Superior Court of Pierce County, Washington (Case No. 25-2-08462-6), alleging that NWRPC failed to adequately protect the sensitive personal information in its care.

Rather than proceed to trial, the parties reached a $1,200,000 settlement to resolve the dispute. NWRPC denies any wrongdoing but agreed to the settlement to avoid the cost and uncertainty of continued litigation.

Is the NWRPC settlement legitimate?

Yes. The NWRPC data breach settlement is a court-supervised class action proceeding with multiple indicators of legitimacy.

• Filed in a real court: The case (No. 25-2-08462-6) is pending in the Superior Court of Pierce County, Washington, Department 16 – a functioning state court with public records.
• Professional settlement administrator: Simpluris is a nationally recognized class action administration firm that handles settlements of this type regularly.
• Court oversight: A fairness hearing is scheduled for June 12, 2026. A federal or state judge must approve the settlement before any payments are made.
• No upfront payment required: Legitimate class action settlements never ask claimants for money to participate. This settlement is free to enter.
• Official website: The settlement is administered at datasettlementnwrpc.com, consistent with the notice sent by NWRPC to affected individuals.

If you received a notice from NWRPC about the August 2024 data breach, your claim is real and worth filing.

How much will I actually receive from the NWRPC settlement?

The amount you receive depends on which payment option you select and how many valid claims are submitted.

• If you have no documentation: You can claim the $50 alternative cash payment. This amount is subject to pro rata reduction if total claims exceed the fund, meaning your actual check could be less than $50 if participation is very high.
• If you have receipts for losses: You can claim up to $3,000 in documented out-of-pocket expenses. Qualifying losses include fraud-related expenses, credit monitoring fees, and costs to replace identification documents.
• Credit monitoring: All eligible claimants can receive three years of one-bureau credit monitoring regardless of whether they claim cash. This benefit has real monetary value – comparable commercial services cost $10 or more per month.

The $1,200,000 fund is available entirely for class member payments, as attorneys’ fees and service awards are paid separately by NWRPC. This is a favorable structure that maximizes what class members receive.

What actually happened in the NWRPC data breach?

In August 2024, cybercriminals gained unauthorized access to NWRPC’s computer systems. NWRPC is a retirement plan consulting company that holds sensitive personal and financial data for its clients.

The types of information potentially exposed in this incident may include names, Social Security numbers, financial account details, and other personal identifiers that NWRPC maintained in connection with its retirement plan administration services.

• Attack timing: The cyberattack occurred in August 2024. Data breaches of this type are often carried out by ransomware groups or data exfiltration actors targeting companies that hold high-value personal financial data.
• Notification: NWRPC notified affected individuals after discovering the incident, which triggered the class action filing.
• Lawsuit filed: Plaintiffs filed suit in Pierce County, Washington, alleging that NWRPC’s security practices were insufficient to protect the sensitive data entrusted to it.

The settlement does not require NWRPC to admit any wrongdoing. However, the company has agreed to implement enhanced data security measures as part of the resolution.

Why do companies settle data breach lawsuits even when they deny wrongdoing?

Companies like NWRPC often choose to settle data breach class actions even without admitting fault for several practical reasons.

• Litigation costs: Defending a class action lawsuit through trial is expensive. Legal fees, expert witnesses, and years of proceedings can exceed the cost of settling early.
• Unpredictable jury outcomes: Data breach cases can result in significant jury awards if a defendant is found liable. Settling provides a known, controlled outcome.
• Reputational considerations: A prolonged public lawsuit draws more attention to the breach and the company’s security failures than a settlement does.
• Business continuity: Resolving litigation allows the company to move forward without the ongoing distraction of active court proceedings.
• Class action dynamics: Once a class is certified, the defendant faces exposure on behalf of potentially thousands of individuals, making the risk calculus favor settlement.

Settlement does not mean admission of guilt. Courts independently evaluate whether the settlement is fair, reasonable, and adequate before granting approval – protecting class members’ interests in the process.

Sources

1. Long Form Notice – Shaeffer v. NWRPC, LLC
2. Claim Form – NWRPC Data Breach Settlement
3. Settlement Agreement – Shaeffer v. NWRPC, LLC
4. Official Settlement Website – datasettlementnwrpc.com

Settlement Summary

Frequently Asked Questions