In February 2023, Purpose Financial, Inc., the parent business that operates under the well-known Advance America brand, allowed an unauthorized third party to penetrate its internal network and obtain files that contained the names and Social Security numbers of numerous customers. Nine subsidiaries in several states, including California, Florida, Indiana, Kentucky, Michigan, Mississippi, Nevada, Ohio, and Tennessee, are used by the company to conduct business. Because a Social Security number doesn’t expire like a compromised credit card does, the hack was the type that usually causes long-term worry for those impacted.
It was followed by a class action lawsuit. The final settlement, Hernandez et al. v. Purpose Financial, Inc., includes a $7.75 million non-reversionary fund, which means that in the event that claims are less than anticipated, the funds do not return to the business. Like other defendants in settlements of this kind, Purpose Financial has denied any misconduct and culpability. But it agreed to settle on a class-wide basis, which is the process that makes compensation possible for the people harmed.
The settlement has strict requirements for eligibility. In order to be eligible, an individual’s name and Social Security number must be present in Purpose Financial’s compromised files and they must have received a warning letter alerting them to the February 2023 data incident. If someone received that letter and rejected it, or is uncertain whether they did, the settlement website gives advice on proving eligibility. The claim deadline — February 2, 2026 — has since passed as of the present date, but the settlement procedure, including the Final Approval Hearing slated for March 17, 2026, was still working its way through the courts at the time of this writing.
The settlement offered three potential rewards to qualifying applicants. The first is payment for confirmed out-of-pocket losses for costs directly related to the data incident, such as fees incurred dealing with identity theft or fraudulent account activity, up to $5,000 with supporting documentation. The second is a pro rata cash payout of roughly $50, subject to change depending on how the settlement fund is shared between claimants. California citizens were eligible for an additional approximate $50 payout under the state’s stricter consumer protection framework.
In the context of a data breach settlement, it’s important to comprehend what a $50 payment truly represents. It isn’t compensated for the complete risk that comes with having your Social Security information in an unauthorized third party’s hands. It is a percentage of a settlement fund that is capped and distributed to a group of impacted people. For anyone who can prove genuine financial harm related to the breach, such as fraudulent charges, identity restoration services, or time spent dealing with consequences, the $5,000 out-of-pocket reimbursement is the relevant category. These claims have a far higher potential recovery, although they do require documentation.
Observing settlements like this go through the judicial system gives the impression that individuals who were most directly harmed—those who discovered fraud early, maintained records, and submitted their paperwork ahead of schedule—tend to benefit the most from them. The settlement offers a small amount and the resolution of a legal claim for a larger group of persons whose information was merely made public without any obvious repercussions.
In the United States, class action data breach settlements are now a common feature of consumer litigation. They follow a standard format: breach, lawsuit, settlement fund, claim period, and final approval. That pattern is consistent with the Hernandez case. What makes it worth attention for impacted consumers is less the legal architecture and more the plain question of whether their information was in those files, and whether they documented any damages that would support a legitimate claim.
