Convergent Outsourcing Inc., a debt-collection agency, settled a data breach class action in the U.S. District Court for the Western District of Washington for $2.45 million. The class action suit against Convergent alleged that the business failed to protect the personal information of over 640,000 individuals. The breach occurred in June 2022.

Plaintiffs alleged that Convergent failed to implement appropriate security measures to protect and secure personal information in its possession, failed to monitor its network for security vulnerabilities, or implemented appropriate security practices.

Pursuant to the settlement, class members may receive up to $1,500 each for lost time and direct expenses related to the breach (e.g., credit monitoring services), or upwards of up to $10,000 for extraordinary expenses. A third option would allow class members to receive a pro-rata share of the remaining settlement fund.