Doxim Settles $5.5 Million Data Breach Allegations
Severity: Medium (Score: 45.8)
Sources: News.Bloomberglaw
Published: · Updated:
Keywords: software, provider, doxim, million, data, breach, deal
Severity indicators: breach, data breach
Summary
Doxim Inc., a financial services software provider, has agreed to pay $5.5 million to settle claims of negligence in protecting customer data exposed in a December 2023 data breach. The breach compromised personal information of customers from its credit-union clients. Affected class members can claim up to $5,000 for documented losses or receive a cash payment of approximately $100. The proposed settlement was filed in federal court and is pending approval from a judge. The breach highlights ongoing vulnerabilities in data protection practices within the financial services sector. Key Points: • Doxim Inc. will pay $5.5 million to settle data breach claims. • The breach exposed personal information of credit union customers. • Affected individuals can claim up to $5,000 for losses or a smaller cash payment.
Detailed Analysis
**Impact** Doxim Inc., a financial services software provider, is settling for $5.5 million due to allegations of negligence in protecting personal information of customers from its credit-union clients. The breach occurred in December 2023 and exposed sensitive customer data. Affected individuals may receive up to $5,000 for documented losses or an alternative payment of approximately $100. The incident impacts the financial services sector, specifically credit unions in the United States. **Technical Details** The articles do not provide specific information on the attack vector, tactics, techniques, and procedures (TTPs), malware used, or exploited vulnerabilities related to the breach. No indicators of compromise (IOCs) or infrastructure details were disclosed. **Recommended Response** No specific technical mitigation or detection recommendations are available from the provided information. Organizations should monitor for updates regarding the breach and review their data protection controls, especially those handling sensitive customer information in financial services environments.
Source articles (2)
- Software Provider Doxim to Pay $5.5 Million in Data Breach Deal — News.Bloomberglaw · 2026-06-08
Financial services software provider Doxim Inc. will pay $5.5 million to settle allegations it negligently failed to protect the personal information of customers of its credit-union clients that was… - Software Provider Doxim to Pay $5.5 Million in Data Breach Deal — News.Bloomberglaw · 2026-06-08
Financial services software provider Doxim Inc. will pay $5.5 million to settle allegations it negligently failed to protect the personal information of customers of its credit-union clients that was…
Timeline
- 2023-12-01 — Data breach occurred: Doxim's systems were compromised, exposing customer personal information from credit unions.
- 2026-06-05 — Settlement proposal filed: Doxim filed a proposed settlement in federal court, offering $5.5 million for affected customers.
- 2026-06-08 — Settlement announcement: Doxim's settlement agreement was made public, pending judicial approval.
Related entities
- Data Breach (Attack Type)
- CWE-200 - Exposure of Sensitive Information (Cwe)
- Financial (Industry)