Published: August 5, 2025
Consumers who received a notice from the Office of the Washington State Auditor (SAO) about a December 2020 data breach may be eligible for a cash payment of up to $5,000 as part of a class action settlement.
The SAO agreed to a $3,085,152.73 settlement to resolve claims that its alleged failure to implement proper data security practices allowed cybercriminals to access personal information through the Accellion file transfer system.
The settlement includes U.S. residents who received a notification from the SAO or an authorized representative regarding the December 2020 data breach. Approximately 1.6 million individuals are included in the settlement class.
Out-of-pocket losses
Eligible class members can claim up to $5,000 for actual, documented expenses tied to the breach, including:
Claims must be related to expenses incurred between December 24, 2020, and the date the claim is submitted.
Reimbursement for lost time
Up to $90 is available for three hours of time spent responding to the breach ($30/hour), provided the claimant also submits a valid claim for out-of-pocket losses.
Alternative compensation
Class members who do not submit a claim for expenses or lost time may request a flat cash payment. The amount will be distributed evenly among approved claimants after all other expenses are deducted from the settlement fund.
Claims may be submitted online or by mail. The deadline is October 24, 2025.
Mailing address:
SAO Claims Administrator
P.O. Box 911
Baton Rouge, LA 70821
To file a claim, class members must provide the claim ID found on their notice letter or email. Anyone missing this ID should contact the settlement administrator at 1-844-978-4141 or by email at info@SAOFTASettlement.com.
For out-of-pocket expenses, documentation is required, including:
Personal statements and handwritten records are not accepted alone, but they may supplement other documentation.
To request lost time or the alternative payment, no documentation is needed—just indicate the selection on the claim form.
The $3,085,152.73 settlement fund will be distributed as follows:
Payments are expected to be issued within 30 to 60 days after the court grants final approval and all appeals, if any, are resolved.
The lawsuit claimed that the Office of the Washington State Auditor failed to protect sensitive information, allowing an unauthorized party to exploit a vulnerability in the Accellion file transfer system. As a result, personal data of Washington residents was potentially exposed.
The SAO denied all wrongdoing but agreed to the settlement to avoid the costs and uncertainties of further litigation.