View Open Settlements
Settlement Update

Wabtec Data Breach Class Action Settlement

Published November 18, 2024
Updated August 3, 2026

The proposed $625,000 Wabtec cyberattack settlement would distribute equal net payments automatically to U.S. class members, but the administrator has not posted the court's final ruling or a payment update.

Wabtec Data Breach Class Action Settlement

Current Status

The objection and exclusion deadline passed on November 25, 2024, and the final-approval hearing was scheduled for January 21, 2025. The official settlement website still describes the agreement as proposed and its document library contains the preliminary-approval materials but no final judgment or distribution notice.

A hearing date alone does not establish that the court granted final approval. The safest current description is that the no-claim settlement has a stale public status after the hearing. Class members cannot file a claim because none was required; if the settlement became effective, payments were to be sent automatically using Wabtec's records.



StatusPublic status stale after hearing
Claim formNone required
Proposed fund$625,000
Hearing dateJanuary 21, 2025

What the Lawsuit Alleged

The litigation followed a cyberattack involving Westinghouse Air Brake Technologies Corporation, commonly known as Wabtec. Plaintiffs alleged that personal information associated with employees or other individuals was potentially compromised and that Wabtec did not use reasonable measures to protect the data.

The asserted claims included negligence, breach of contract, and unjust enrichment. Wabtec denied wrongdoing and liability and agreed to the proposed settlement to avoid the burden, expense, and uncertainty of continued litigation. The agreement did not amount to a court finding that Wabtec caused the attack or that every class member's information was misused.



Who Was Included

The proposed class covers people residing in the United States whose personal information was potentially compromised in the Wabtec cyberattack. Wabtec's records and the settlement notice identified class members. A general connection to the company was not enough if the person's information was not within the affected population.

The precise information involved could vary. Inclusion establishes eligibility under the settlement definition, not that an identity thief accessed or used a particular person's data.



How Automatic Payments Were Designed

Wabtec agreed to create a $625,000 common fund. After notice and administration expenses, court-approved fees and costs, awards, and other authorized deductions, the remaining net fund was to be divided equally among participating class members.

No claim form was required. Unless a class member excluded themselves, an automatic check was to be mailed to the last address in Wabtec's records after final approval and settlement effectiveness. Before the November 2024 deadline, recipients could elect PayPal or Venmo instead by using the ID and PIN in the notice.

Because the final payment depends on the net fund and participating class size, an early estimate such as at least $15 was not a guaranteed award. Returned payments, address data, and the final order could also affect distribution.



Why There Was No Claim Deadline

The November 25 date applied to exclusions, objections, and optional electronic-payment elections; it was not a deadline to establish basic eligibility. Class membership and payment came from the defendant's records. Doing nothing kept an eligible person in the class and preserved the automatic-check path under the proposed terms.

That structure differs from a data-breach settlement that requires receipts for losses or an enrollment form for credit monitoring. This agreement offered a pro rata cash distribution rather than individualized reimbursement tiers.



Why the Current Stage Is Not Inferred

The public website has not been updated with a final-approval order, an effective date, or a mailing date. Even though the scheduled hearing has passed, a court can take a motion under advisement, request changes, enter a later order, or encounter an appeal. Treating the hearing as final approval would erase those distinct steps.

Open Class Actions therefore preserves the proposed benefit terms while labeling the public status stale. A class member who received an authentic payment or administrator notice may have more current individual information, but that does not justify inventing a sitewide distribution date.



What Class Members Should Keep

Recipients should retain the original notice, ID and PIN, any payment-method election, later administrator correspondence, and payment record. Those documents can help resolve a returned or misdirected payment if an official process is available.

No legitimate automatic settlement benefit requires an advance fee. Security monitoring also remains sensible regardless of payment status: review credit reports and account statements, use unique passwords, and investigate unfamiliar activity promptly.



Official Information

Review the latest information on the Wabtec Data Breach Settlement website.

Case Tjahjono et al. v. Westinghouse Air Brake Technologies Corp.
Case No. 2:23-cv-00531-WSS
Court U.S. District Court, Western District of Pennsylvania
Proposed fund $625,000
Claim form Not required
Proof required No
For more class actions, recalls, and refunds, keep scrolling below.

More Open Consumer Settlements