A Kansas federal judge has awarded $433,333 in attorneys’ fees, representing one-third of a $1.3 million settlement, to counsel in a class action against UnitedLex Corp. The company faced allegations of exposing 200 gigabytes of sensitive data during a March 2023 ransomware attack.
In an order issued Friday, U.S. District Judge Daniel D. Crabtree granted final approval of the settlement, noting that the outcome provided a higher per-person recovery than many comparable data breach cases. The settlement, which had received preliminary approval in July, entitles class members to reimbursement of up to $15,000 for out-of-pocket costs and $500 for time spent addressing breach-related issues. Additionally, class members will receive a pro-rata share of the remaining settlement funds and three years of credit monitoring.
Judge Crabtree also mandated that UnitedLex implement significant enhancements to its data security practices to prevent future breaches.
The settlement stems from lawsuits filed after a cyberattack on UnitedLex’s servers exposed names, Social Security numbers, and confidential client information. Victims reported incidents of identity theft linked to the breach.
