Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsArden Claims Service LLC reported a cyber incident involving an email account and related files in October 2023. A later regulatory filing listed 138,890 potentially affected people, the figure commonly rounded to “139,000.” Regulatory notices identified names and Social Security numbers among the information involved for at least some notified individuals. A related class-action settlement set a February 3, 2026 claim deadline, which has passed.
What is Arden Claims Service?
Arden Claims Service LLC is a class-action settlement administrator based in Port Washington, New York. Administrators handle information supplied during litigation and settlement work, so a person may have had data in Arden’s files without being a direct Arden customer. A Maryland regulatory letter describes Arden in that settlement-administration role (Maryland Attorney General letter).
What happened in the breach?
- October 3–5, 2023: Regulatory and media records indicate that an unauthorized actor may have acquired data during this period. The precise initial-access method has not been publicly disclosed.
- October 17, 2023: Arden detected unusual activity involving an email account, secured the account, engaged cybersecurity specialists and said it reported the incident to the FBI (Maryland letter; consumer notification).
- December 19, 2023: An earlier review found that some individuals’ information was present in affected data.
- January 17, 2024: An initial notification went to some affected people. The related Maine filing listed 50,032 individuals.
- August 6, 2024: Arden completed a later review of potentially impacted data.
- August 14, 2024: A later notification wave was mailed, and a Maine filing listed 138,890 potentially affected people (Maine filing).
The October 17 date is the reported discovery of suspicious activity, not necessarily the date information was taken. The public records do not establish the exact intrusion path.
Why do reports show different affected counts?
| Figure | Meaning |
|---|---|
| 50,032 | Earlier Maine notification filing. |
| 138,890 | Later Maine filing identifying the expanded potential impact. |
| About 139,000 | Rounded description of 138,890 used in headlines. |
| About 143,341 | Approximate population later described as the settlement class—living U.S. residents who received an Arden notice—not a revised regulatory breach count (settlement coverage). |
The 50,032 and 138,890 filings should not be added together. The later figure appears to reflect an expanded or supplemental determination.
#1 Best Overall
What information was involved?
Regulatory notices specifically identify names and Social Security numbers in affected data, including the population covered by the January 2024 notification (earlier Maine filing). Litigation materials additionally describe categories that may have appeared in some records, including dates of birth, medical history, identification numbers and financial-account information (settlement coverage).
Those broader descriptions do not establish that every affected person had every data element exposed, or that all 138,890 people had their Social Security number accessed.
Was this ransomware?
There is no verified public evidence identifying a ransomware group or confirming an extortion demand. SecurityWeek reported that no ransomware group had publicly claimed responsibility and that the intrusion method remained unclear (SecurityWeek). “Unauthorized access,” “hacking” or “email-account compromise” is more accurate than calling the incident ransomware.
What protection did Arden offer?
Benefits differed by notification stage:
- Earlier notices: No-cost CyberScout/IdentityForce services, including single-bureau credit monitoring, a credit report and score, fraud assistance and remediation, identity-protection services and identity-fraud-loss coverage (notification letter).
- Later notices: Twelve months of IDX identity protection and credit monitoring, plus $1 million of identity-theft insurance (Maine filing).
These were time-limited incident benefits, not proof that every recipient received the same product or coverage.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →What was the class-action settlement?
The related case was Sauray v. Arden Claims Service LLC, Case No. 609033/2024, in the Supreme Court of the State of New York, Nassau County. The settlement website says the lawsuit alleged that a targeted cyberattack accessed files containing private information. Arden denied wrongdoing, and the settlement was not a court finding that Arden was liable (official settlement site).
The proposed agreement described a $1,625,000 settlement fund and these benefits:
- Three years of three-bureau credit monitoring.
- Dark-web, public-record and medical-identity monitoring.
- Identity-theft insurance with no deductible and access to fraud-resolution agents.
- Cash Payment A: reimbursement for documented losses, up to $5,000.
- Cash Payment B: an estimated one-time payment of $125.
The $125 amount was an estimate, not a guarantee. The fund was also subject to attorneys’ fees, administration costs, litigation expenses and service awards; valid claims could therefore receive a pro-rata adjustment. Class counsel planned to seek fees of up to one-third of the fund and $5,000 service awards for each of five class representatives (settlement FAQ).
Deadlines and current status
| Action | Date |
|---|---|
| Opt out of the settlement | January 19, 2026 |
| Object to the settlement | January 19, 2026 |
| Submit a claim | February 3, 2026 |
| Final-approval hearing | February 18, 2026, at 9:30 a.m. Eastern |
All listed opt-out, objection and claim deadlines have passed. The official settlement website still contains language describing the February 18 hearing as upcoming and says distribution would occur only after approval and any appeals (dates page; FAQ). Do not assume that payments were approved, distributed or reopened without a current court order or administrator notice. A late claim is not automatically accepted.
What should affected consumers do now?
- Save your notice. Keep the mailed letter and any class-member ID or PIN. Those details can help the administrator locate your record.
- Check your credit reports. Use the federally authorized source at AnnualCreditReport.com.
- Consider a fraud alert or credit freeze. A freeze can restrict new-credit inquiries; neither measure guarantees that identity theft will not occur.
- Monitor financial accounts. Review bank and card statements and report unauthorized transactions promptly.
- Expect phishing. Do not provide credentials or payment information through an unsolicited settlement email or text. Use contact details from the mailed notice or official settlement website.
- Ask the administrator about your record. If you received an Arden notice and need to know whether a later settlement file includes you, contact the administrator through verified details rather than a search-advertisement link.
These are general protective measures, not legal advice. A monitoring service can provide alerts, but it does not prevent identity theft or guarantee reimbursement.
Frequently Asked Questions
Can I still file an Arden settlement claim?
The published claim deadline was February 3, 2026. Any reopening or late-claim procedure would require confirmation from the settlement administrator or a court order.
Does the 139,000 figure mean every person’s Social Security number was stolen?
No. The 138,890 figure describes people potentially affected in a later regulatory filing. Notices identify names and Social Security numbers in affected data for at least some notified individuals, but they do not establish that every person’s record contained or exposed both.
Is the settlement final and are payments being sent?
The official website language cited here still describes the final-approval hearing as upcoming and conditions distribution on approval and appeals. A current court docket or administrator announcement is needed to verify final approval or payments.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The Bottom Line
Arden’s later regulatory filing listed 138,890 potentially affected people after an October 2023 email-account incident. Names and Social Security numbers were among the identified information, but exposure varied by person. The related settlement’s January 19 and February 3, 2026 deadlines have passed, so rely on a current court or administrator notice for any status change.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
