# Ernst & Young / Bank of America MOVEit Data Breach Settlement

Ernst & Young LLP and Bank of America Corporation settled allegations that a vulnerability in the third-party MOVEit Transfer file-transfer software led to a 2023 breach that may have exposed personal information Bank of America provided to Ernst & Young. Ernst & Young LLP and Bank of America Corporation denies any wrongdoing and the court made no finding of liability.

A settlement over the 2023 MOVEit data breach, which exploited a vulnerability in the third-party MOVEit Transfer software and may have exposed personal information that Bank of America provided to Ernst & Young. People notified by Ernst & Young can claim cash or reimbursement of documented losses, plus identity-theft protection.

| Field | Detail |
| --- | --- |
| Defendant | Ernst & Young LLP and Bank of America Corporation |
| Total settlement | $2,500,000 |
| Estimated payment | Reimbursement of documented losses up to $10,000, or an alternative cash payment of $100, from a $2,500,000 settlement fund. All class members may also claim two years of identity-theft protection services. |
| Claim deadline | 2026-10-08 |
| Who is eligible | Living U.S. residents who were notified by Ernst & Young that their personal information was in the files affected by the MOVEit breach. |
| Proof required | Documented-loss claims require reasonable documentation; the $100 alternative cash payment and identity protection require no proof. |
| Official claim site | https://www.moveitsettlementeyboa.com/ |

To claim, follow the link to the official site and file there. We never file for you.

## Sources

Verified 2026-09-08.
- Official Settlement Website — Morris v. Progress Software Corporation, et al. (No. 1:24-cv-11807-ADB, D. Mass.) (RG/2 Claims Administration LLC, 2026) — https://www.moveitsettlementeyboa.com/

---

This information is not a substitute for legal advice.