If you are an individual whose personal information was potentially compromised in the Data Incident suffered by San Diego Unified School District on or about October 25, 2022, a class action settlement may affect your rights.

A California State Superior Court authorized this website. You are not being sued.

A Settlement has been reached in a class action lawsuit concerning San Diego Unified School District (“SDUSD” or “Defendant”) and a ransomware incident that occurred on or about October 25, 2022 (the “Data Incident”). In the Data Incident, a third-party threat actor group allegedly gained unauthorized access to SDUSD’s systems and infected certain files with ransomware, which may have, but did not necessarily, include the personal identifiable information and/or personal health information of certain SDUSD students and/or employees.

The lawsuit is titled G.W., et al. v. San Diego Unified School District, Case No. 37-2023-00035972-CU-BT-CTL and was consolidated with another related action. The lawsuit is pending in the San Diego County Superior Court of the State of California and asserts claims related to the Data Incident. The Defendant in the lawsuit is SDUSD. SDUSD denies it is or can be held liable for the claims made in the lawsuit. The Settlement does not establish who is correct but rather is a compromise between the parties to end the lawsuit.

Members of the Settlement Class are all California residents to whom SDUSD mailed notification that their Personal Information may have been compromised by an unauthorized third party as a result of the Data Incident discovered by SDUSD on or about October 25, 2022. The Settlement Class specifically excludes: (i) the Court and all members of the Court’s staff; (ii) Persons who timely and validly submit a Request for Exclusion from the Settlement Class; (iii) and any other Person found by any court of competent jurisdiction to be guilty under criminal law of initiating, causing, aiding, or abetting the criminal activity occurrence of the Data Incident or who pleads nolo contendere to any such charge.

Settlement Class Members are eligible to receive up to $500.00 per person in reimbursement for Out-of-Pocket Losses stemming from the Data Incident, for persons who file a Valid Claim, as further described below. The Settlement also provides up to $2,000.00 for proven monetary Extraordinary Expenses for Settlement Class Members who have incurred Extraordinary Expenses and who submit a Valid Settlement Claim. Settlement Class Members are eligible to receive one (1) year of identity-theft protection and credit monitoring services, which includes one (1) bureau credit monitoring and alerts. This is in addition to the credit monitoring services previously offered to individuals who were notified of the Data Incident. Alternatively, Settlement Class Members who were under 18 years old at the time the Settlement Agreement was executed on May 5, 2025, may elect to receive a cash payment of $40.00. To redeem this benefit, a parent or guardian of a minor Settlement Class Members must submit a Claim Form and attest that their dependents were minors and that their parent or guardian did not file a claim for reimbursement of Ordinary Losses, Time Spent, and/or Extraordinary Losses, and/or Credit Monitoring/Identity Theft Protection.

Your legal rights are affected regardless of whether you act or do not act. Please read the Notice and this website carefully.

These rights and options—and the deadlines to exercise them—are explained in the Notice and FAQs page. For complete details, please see the Settlement Agreement available on the Important Documents page of this website.

The Court in charge of this case still has to decide whether to approve the Settlement. No Settlement benefits or payments will be provided unless the Court approves the Settlement and the Order of the Court becomes final.