San Diego County Superior Court approves preliminary settlement providing compensation and credit monitoring to affected students and employees
San Diego Unified School District has reached a class action settlement related to a ransomware attack that compromised personal information of students and employees in October 2022. The settlement, pending final court approval, provides significant relief to thousands of San Diego County residents whose data may have been exposed in the incident. The court appointed Doyle APC as one of the Class Counsel representing affected students and employees in this litigation.
The lawsuit, G.W., et al. v. San Diego Unified School District (Case No. 37-2023-00035972-CU-BT-CTL), was filed after a third-party threat actor gained unauthorized access to SDUSD’s computer systems on October 25, 2022. The attackers infected certain files with ransomware that may have included personally identifiable information and personal health information of district students and employees. While SDUSD denies liability, the district agreed to settle the matter to resolve the litigation.
Who Qualifies for the Settlement?
The settlement class includes all California residents who received notification from SDUSD that their personal information may have been compromised in the data breach. This primarily affects San Diego County families with children enrolled in the district and current or former SDUSD employees.
Available Benefits
Settlement class members may claim several forms of relief. Eligible individuals can receive reimbursement of up to $500 for documented out-of-pocket losses directly resulting from the data breach, such as costs for credit monitoring services, bank fees, or other expenses. Those who suffered more significant financial harm may claim up to $2,000 for proven extraordinary expenses. Class members may also receive compensation for time spent addressing issues related to the breach, with reimbursement available for up to four hours at a rate of $20 per hour, for a maximum of $80 per claimant.
The settlement also provides one year of identity theft protection and credit monitoring services to all class members who submit a valid claim. This coverage is in addition to any monitoring services previously offered by the district following the breach. For minor children who were under 18 years old when the settlement was executed in May 2025, parents or guardians may instead elect to receive a $40 cash payment per child.
Important Deadlines
Settlement class members who wish to participate must file a claim form by January 13, 2026. Those who prefer to exclude themselves from the settlement or who wish to object must do so by December 15, 2025. The San Diego County Superior Court has scheduled a final approval hearing for February 6, 2026.
Individuals who take no action will forfeit their right to receive compensation and will be bound by the settlement’s release of claims against SDUSD.
Additional Information
Complete details about the settlement, including the full settlement agreement and claim forms, are available at www.sdusddatasettlement.com. Questions may be directed to the settlement administrator at info@SDUSDDataSettlement.com or by calling (833) 417-4899.