SouthState Bank 1.5 million data breach settlement file claims up to 3500

In February 2024 a third party accessed SouthState Bank’s computer network and the bank began notifying affected customers on March 29; the breach potentially exposed names, dates of birth, addresses, phone numbers, financial account numbers and Social Security numbers. Plaintiffs sued alleging negligence, breach of contract, breach of fiduciary duty and unjust enrichment, claiming SouthState failed to implement adequate cybersecurity safeguards. SouthState denied wrongdoing but agreed to a settlement that provides up to $3,500 for documented out-of-pocket losses, a pro rata share of a $1.5 million payment fund, and one year of credit monitoring with $1 million identity-theft insurance for class members who do not opt out. The suit matters because it seeks direct compensation and forces accountability for how banks protect sensitive consumer data, joining a steady stream of data-breach class actions against financial institutions, retailers and service providers that have pushed companies toward stronger security measures. Financial firms operate under industry-specific expectations and regulations — notably the Gramm‑Leach‑Bliley Act’s safeguards rule, FTC guidance and state breach-notification laws — and settlements like this can trigger closer regulatory scrutiny, more stringent internal controls, and influence how future breach claims are litigated or settled.