A federal judge has granted final approval to AGC America’s US$597,000 settlement resolving a class-action lawsuit over a December 2023 cyberattack that exposed the personal data of 20,951 U.S. residents.

The lawsuit, filed in 2024 by lead plaintiff Richard Teague, alleged that AGC failed to adequately protect sensitive employee information. According to the complaint, cybercriminals gained access to unencrypted files containing personal data, including Social Security numbers, driver’s licence details, financial account information, passport details and payment card information. The lawsuit also claimed that the stolen data was later offered for sale on the dark web, increasing the risk of identity theft and financial fraud.

U.S. District Judge Victoria Marie Calvert ruled that the all-cash settlement is fair, reasonable and in the best interests of the affected class members.

Under the settlement, eligible individuals may receive reimbursement of up to US$2,500 for documented out-of-pocket losses related to identity theft or fraud, including costs for replacing identification documents, credit monitoring services and credit freezes. The agreement also provides two years of credit monitoring and identity protection services.

The settlement applies to U.S. residents who received notification that their personal information may have been compromised during the incident. Although the deadline to submit claims expired on 15 July 2026, payments will be distributed after any appeals are resolved and the settlement receives final legal clearance.