A preliminary settlement has been reached involving AGC America Inc. following a 2023 cyberattack that exposed sensitive personal data of thousands of employees. The agreement, valued at nearly $600,000, comes after a lawsuit filed in 2024 over the company’s handling of the breach.

The incident, which occurred in December 2023, reportedly affected 20,951 individuals. According to the complaint filed by Richard Teague, an unauthorized attacker accessed AGC’s internal systems and obtained unencrypted files containing highly sensitive employee information. The compromised data allegedly included Social Security numbers, driver’s license details, financial account information tied to direct deposits, passport data, and payment card numbers. The stolen information was later said to have been sold on the dark web.

The lawsuit claims that AGC failed to implement adequate cybersecurity measures despite increasing awareness of such threats. Teague argued that the breach exposed affected individuals to serious risks, including identity theft, fraudulent financial activity, and misuse of government benefits.

In a preliminary approval order filed on March 17, Victoria Marie Calvert indicated that the court is likely to approve the settlement, describing it as “fair, reasonable and adequate.” A final decision is expected on July 21, 2026.

Under the proposed settlement terms, eligible class members, primarily U.S.-based employees notified of the breach, may receive reimbursement of up to $2,500 for documented losses. In addition, AGC has agreed to provide two years of credit monitoring and identity protection services.