Riley, Pope & Laney Data Breach Settlement Up to $2,500 for Exposed Personal Info

In August 2024, Riley, Pope & Laney LLC experienced a targeted cyberattack that allegedly gave unauthorized access to files containing sensitive personal information, including people’s names and Social Security numbers. For individuals, that kind of exposure can trigger worries about identity theft, and it often leads to time-consuming steps like contacting banks, setting up fraud alerts, or monitoring credit. In response, a class action lawsuit was filed on behalf of affected U.S. residents, seeking compensation and protections connected to the incident. The settlement now announced offers eligible people a claim amount of up to $2,500 for documented out-of-pocket costs related to the breach and/or a limited lost-time payment, plus a default option of a $60 one-time cash payment for those who don’t have documentation. It also includes two years of credit monitoring and identity-theft-related services, which are designed to detect suspicious activity and help reduce harm after a data breach. The lawsuit was significant because it challenged whether the firm’s data security practices were sufficient when handling highly regulated, extremely sensitive information—especially personally identifying information like Social Security numbers. Rather than admit wrongdoing, Riley, Pope & Laney agreed to settle to avoid the costs and uncertainty of ongoing litigation, while class members can submit claims through an online or mailed process, with a claim deadline set for Aug. 17, 2026. This case fits a broader pattern in U.S. consumer privacy and data-breach litigation, where many similar lawsuits rely on theories such as negligent security, failure to safeguard personal data, and inadequate incident response. It also reflects the regulatory environment shaped by laws such as the FTC Act (prohibiting unfair or deceptive practices), and state privacy and breach-notification laws (like those requiring notice after certain security incidents), as well as industry expectations in frameworks commonly used by businesses to manage risk and protect personal information. For affected people, the practical “why now” is that the settlement creates a structured way to seek recovery and ongoing monitoring even while the underlying dispute remains resolved without a court finding of liability