Wyatt Detention Facility (CFDFC) data breach settlement
In re Central Falls Detention Facility Corporation (Hellested v. Central Falls Detention Facility Corporation d/b/a Donald W. Wyatt Detention Facility)
Also known as Wyatt data breach; 26-10628
The lawsuit said an outsider got into Wyatt Detention Facility's systems in Nov. 2023 and took personal data.
Copied from the official notice. Last compared Nov 7, 2026.
- You could get
- $20 an hour, up to $80 Up to $5,000 for losses you can show with paperwork.
Source
“calculated at the rate of $20 per hour (for a maximum of $80.00)”
From the administrator site: Official FAQ page. Last compared Nov 7, 2026.
- You need
- No receipt needed Needs the code from your notice Unique ID and PIN from your mailed notice (the online claim login asks for both) Some paperwork: describes the claim form only
Source
“Examples of reasonable documentation include (but are not limited to): telephone records, correspondence including emails, or receipts. Personal certifications, declarations, or affidavits from the Settlement Class Member do not constitute reasonable documentation”
From the administrator site: Official FAQ page. Last compared Nov 7, 2026.
- Who can file
- People whose data Wyatt Detention Facility lost in Nov. 2023
Source
“You are included in the Settlement Class if you are an individual in the United States whose Private Information was maintained on CFDFC’s computer systems and who was identified by the CFDFC as having certain of that Private Information taken from the CFDFC during the CFDFC’s November 2023 Data Incident. ... Yes, excluded from the Settlement Class are the court and all members of the court’s staff, and any person who timely and validly requests exclusion from the Settlement Class.”
From the administrator site: Official FAQ page. Last compared Nov 7, 2026.
- Where
- Anywhere in the U.S.
Source
“The Settlement Class, as defined at § 3.1 of the Settlement Agreement, includes: all individuals in the United States whose Private Information was maintained on the CFDFC’s computer systems and who were identified by the CFDFC as having certain of that Private Information taken from the CFDFC during the CFDFC’s November 2023 Data Incident.”
From the administrator site: Official settlement website home page. Last compared Nov 7, 2026.
- Time to file
- About 4 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: detentionfacilitysettlement.com. Last compared Nov 7, 2026.
Free. The official site never charges.
Quick answers
How much is the Wyatt Detention Facility (CFDFC) data breach settlement payout?
$20 an hour, up to $80. Up to $5,000 for losses you can show with paperwork.
Where is the Wyatt Detention Facility (CFDFC) data breach settlement claim form?
On the official site, www.detentionfacilitysettlement.com. Filing is free. The last day to file is Feb 5, 2027.
When will the Wyatt Detention Facility (CFDFC) data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Feb 17, 2027.
Is the Wyatt Detention Facility (CFDFC) data breach settlement legit?
The settlement administrator (the company that handles claims) is Epiq, and the official site is www.detentionfacilitysettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if you are in the U.S. and CFDFC (Wyatt Detention Facility) identified you as having data taken in its Nov. 2023 breach.
You are not included if you are the court or a member of the court's staff, or if you opted out.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
all individuals in the United States whose Private Information was maintained on the CFDFC’s computer systems and who were identified by the CFDFC as having certain of that Private Information taken from the CFDFC during the CFDFC’s November 2023 Data Incident.
From the administrator site: Official settlement website home page
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
Official payout table
The amounts the settlement itself sets. We do not work out a personal amount.
| Option and condition | Amount |
|---|---|
| Lost time ($20 an hour, up to four hours; attested, no documents)The most one claim can get | Up to $80 |
| Out-of-pocket losses you can show with paperworkThe most one claim can get | Up to $5,000 |
Both can be claimed, plus credit monitoring. Cash may be reduced depending on approved claims and what is left in the fund.
You may submit a Claim Form and provide reasonable documentation for losses related to the Data Incident for up to $5,000 per Settlement Class Member. ... You may submit a Claim Form for up to four (4) hours of lost time spent dealing with the Data Incident, calculated at the rate of $20 per hour (for a maximum of $80.00). ... You may submit a Claim Form to receive sixty (60) months of single bureau credit monitoring services.
From the administrator site: Official FAQ page
Estimates can change with the number of valid claims and court deductions. Guidance only.
How to file
-
Find the code from your notice
- Unique ID and PIN from your mailed notice (the online claim login asks for both)
-
Gather what you need
No proof of purchase is required.
- For lost time: the number of hours (up to four) and your attestation that the time was spent on the data incident
- For documented losses: copies of documents such as receipts or bank statements; your own statement alone is not enough
-
File online, or by mail
At www.detentionfacilitysettlement.com, by Feb 5, 2027. Filing is free.
Or mail a paper claim form to:CFDFC Data Incident, Settlement Administrator, PO Box 5429, Portland, OR 97228-5429
The deadline note says: “Online by February 5, 2027, or by mail postmarked by February 5, 2027.”“The site warns that mail may not be postmarked the day you send it, so mail well before the deadline.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Feb 17, 2027.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- In re Central Falls Detention Facility Corporation (Hellested v. Central Falls Detention Facility Corporation d/b/a Donald W. Wyatt Detention Facility)
- Court
- United States Bankruptcy Court for the District of Rhode Island
- Case number
- Bankr. Case No. 26-10628 (lawsuit: D.R.I. No. 1:24-CV-00284-MRD-AEM)
- Administrator
- Epiq
- Official site
- www.detentionfacilitysettlement.com
- Settlement fund
- $100,000 Settlement Fund for documented losses, attested time and the service award; credit monitoring and attorneys' fees and expenses ($90,000 requested) are paid separately.
- Full payout terms
- Up to $80 for lost time, up to $5,000 for documented lossesUp to $5,000 for documented out-of-pocket losses related to the data incident, plus up to four hours of attested lost time at $20 an hour (up to $80), plus 60 months of single-bureau credit monitoring. Cash payments may be reduced pro rata depending on the total of approved claims and what remains in the $100,000 fund.
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (ahead) source document
- Objection deadline
- (ahead) source document
- Final approval hearing
- (ahead) source document
The court’s exact words
all individuals in the United States whose Private Information was maintained on the CFDFC’s computer systems and who were identified by the CFDFC as having certain of that Private Information taken from the CFDFC during the CFDFC’s November 2023 Data Incident.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The settlement concerns a data incident on or about November 2, 2023, in which an unauthorized third party got into systems of the Central Falls Detention Facility Corporation, which runs the Donald W. Wyatt Detention Facility in Rhode Island, and, per the notice, accessed names, addresses, medical information, Social Security numbers, dates of birth and other identifying information. The class is all individuals in the United States whose information was on CFDFC's systems and whom CFDFC identified as having some of it taken in the November 2023 incident. Excluded: the court and all members of the court's staff, and anyone who opts out. CFDFC filed for chapter 11 bankruptcy on July 10, 2026, and the U.S. Bankruptcy Court for the District of Rhode Island is the court deciding whether to approve the settlement. Class members who stay in should not file a proof of claim in the bankruptcy about the data incident.
Sources and checks (6)
Every fact people act on was copied from the official source and compared with it. How we check
- Official settlement website home page administrator site
- Official FAQ page administrator site
- Official online claim login page administrator site
- Official claim form (PDF) administrator site
- Official long-form notice (PDF) administrator site
- Settlement agreement (PDF linked from the official site) court record
What changedLast change Nov 3, 2026
- Page created. Claims open until February 5, 2027. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.
Opting out
To leave the settlement and keep your right to sue on your own, follow the official notice by Jan 15, 2027. If you opt out, you get no payment. Opting out and objecting have separate rules; we cannot tell you which is right for you.