1. Why was notice issued?
2. What is this lawsuit about?
3. What is a class action?
4. Why is there a settlement?
5. Who is included in the Settlement?
6. Are there exceptions to being included in the Settlement?
7. What does the Settlement provide?
8. What claims am I releasing if I stay in the Class?
9. How do I submit a claim?
10. What is the deadline to submit a claim?
11. When will Settlement benefits be issued?
12. Do I have a lawyer in this case?
13. Do I need to hire my own lawyer?
14. How will Class Counsel be paid?
15. How do I opt out of the Settlement?
16. How do I tell the Court if I object to the Settlement?
17. What is the difference between objecting and opting out?
18. When is the Final Approval Hearing?
19. Do I have to attend the Final Approval Hearing?
20. What happens if I do nothing?
21. How do I get more information?
The Superior Court of Orange County, California authorized notice so potential Class Members can learn about the proposed Settlement of this class action lawsuit, and about all of their options, before the Court decides whether to grant final approval of the Settlement. The lawsuit is Millie Foss v. Prenovost, Normandin, Dawe & Rocha, A.P.C., Case No. 30-2025-01488839-CU-NP-CXC. The person who filed the lawsuit is called the “Plaintiff” (or “Class Representative”), and the company that was sued, Prenovost, Normandin, Dawe & Rocha, A.P.C., is called the “Defendant.” You can review the Long-Form Notice here.
Back To Top
This lawsuit concerns the Cybersecurity Incident affecting PNDR’s computer systems in November 2024. Certain files may have been accessed without authorization during that incident. Those files may have contained personal information such as names, Social Security numbers, and driver’s license or state identification card numbers. PNDR denies all allegations of negligence, fault, and liability.
Back To Top
In a class action, one or more individuals sue on behalf of other people with similar claims. These individuals are called the “Plaintiffs” or “Class Representatives.” Together, the people included in the class action are called the “Class” or “Class Members.” One court resolves the lawsuit for all Class Members, except for those who opt out of the Settlement. Millie Foss is the Class Representative in this case.
Back To Top
The Court has not decided whether the Plaintiff or PNDR is right. Both sides agreed to the Settlement to avoid the costs and risks of a trial and to allow Class Members to receive benefits from the Settlement. The Plaintiff and Class Counsel think the Settlement is best for all Class Members.
Back To Top
The Court has defined the Class this way: “All U.S. residents whose Private Information may have been compromised as the result of the Cybersecurity Incident sustained by PNDR in November 2024 (as further described in Plaintiff’s Complaint) and who received a Notice of Data Breach by PNDR on or about June 4, 2025.”
If you are unsure whether you are a Class Member, you can ask for free help any time by contacting the Settlement Administrator at:
PNDR Cybersecurity Incident Settlement
c/o Settlement Administrator
P.O. Box 26170
Santa Ana, CA 92799-9958
(866) 719-5313 (toll-free, 24/7)
info@PNDRDataSecurityincident.com
You may also review the Settlement Agreement.
Back To Top
Yes. The Class does not include: (1) PNDR and its officers, directors, and related companies; (2) anyone who validly excludes themselves from the Settlement; (3) the Judge in this case, and the Judge’s family and staff; and (4) anyone who perpetrated the Cybersecurity Incident.
Back To Top
PNDR will establish a Settlement Fund of $100,000.00. The Settlement Fund will first be used to pay court-approved attorneys’ fees and costs, the Service Award payment for the Plaintiff, and the costs of administering the Settlement. The net remaining money will be used to pay for the benefits described below.
A full description of how this works is available in the Settlement Agreement.
Credit Monitoring Services. All Class Members are eligible to enroll in two (2) years of CyEx Financial Shield Total. This comprehensive service comes with $1 million of financial fraud insurance, and includes monitoring for:
fraud or identity theft
unauthorized financial transactions
personal information associated with high-risk transactions
If anything suspicious happens, you will be able to talk to a fraud resolution agent to help fix any problems.
Cash Payment Options
Documented Losses. If you incurred actual, documented out-of-pocket losses due to the Cybersecurity Incident, you can get back up to $2,000.00. The losses must have occurred between November 21, 2024, and January 11, 2027.
This benefit covers out-of-pocket expenses like:
losses because of identity theft or fraud
fees for credit reports, credit monitoring, or freezing and unfreezing your credit
cost to replace your IDs
postage to contact banks by mail
You need to send proof, like bank statements or receipts, to show how much you spent or lost. You can also send notes or papers you made yourself to explain or support other proof, but those notes or papers alone are not enough to make a valid claim. Your proof or notes should show that your expenses were because of the Cybersecurity Incident.
You cannot claim a payment for expenses that have already been reimbursed by a third party.
Pro Rata Cash Payment. Instead of the benefits from Documented Losses, you may claim a one-time pro rata cash payment.
The pro rata payment amount will depend on the number of valid claims submitted and the funds remaining in the Settlement Fund after payment of all other approved claims and expenses. All remaining funds will be divided equally among all claimants who elect a Pro Rata Cash Payment. Once an estimate of this payment is available, it will be provided on this website.
You do not have to provide any proof or explanation to claim this payment.
If you have questions about these benefits, you can ask for free help any time by contacting the Settlement Administrator at:
PNDR Cybersecurity Incident Settlement
c/o Settlement Administrator
P.O. Box 26170
Santa Ana, CA 92799-9958
(866) 719-5313 (toll-free, 24/7)
info@PNDRDataSecurityincident.com
Back To Top
If you stay in the Class, you release all claims against PNDR and related parties arising from the Cybersecurity Incident, whether for damages, injunctive relief, or any other remedy. This includes, but is not limited to, claims for negligence, breach of contract, invasion of privacy, and violations of California privacy statutes. The claims you give up are limited to claims that were made in the Litigation, or that could have been made based on the facts alleged in the Litigation. The “Releases” section of the Settlement Agreement (Section V) describes the legal claims that you give up if you remain in the Class.
Back To Top
The fastest way to submit a Claim Form is online here using the LoginID and PIN found on your notice. You may also download a printable Claim Form here and mail the completed form to:
PNDR Cybersecurity Incident Settlement
c/o Settlement Administrator
P.O. Box 26170
Santa Ana, CA 92799-9958
An electronic image of the completed Claim Form can also be emailed to info@PNDRDataSecurityincident.com.
If you would like to request a paper Claim Form or have trouble locating your LoginID and PIN, please contact the Settlement Administrator by calling (866) 719-5313 (toll free, 24/7) or emailing info@PNDRDataSecurityincident.com.
Back To Top
Online Claim Forms must be submitted by January 11, 2027. If you submit a Claim Form by mail, the completed and signed Claim Form, including supporting documentation, must be postmarked no later than January 11, 2027. Claim Forms submitted by email must also be submitted no later than January 11, 2027.
Back To Top
The Court will hold a Final Approval Hearing on February 5, 2027 (see Question 18). If the Court approves the Settlement, there may be appeals. We do not know if appeals will be filed, or how long it will take to resolve them if they are filed.
Settlement payments will be distributed if the Court grants final approval, and after any appeals are resolved.
Back To Top
Yes. The Court appointed Daniel Srourian of Srourian Law Firm, P.C. to represent the Class as Class Counsel.
Back To Top
You will not be charged for Class Counsel’s services. You may hire your own lawyer at your own expense if you choose.
Back To Top
Class Counsel will ask the Court to approve one-third of the Settlement Fund as reasonable attorneys’ fees, plus $2,500.00 for costs of litigation, to be paid from the Settlement Fund. Class Counsel will also ask the Court to approve a $2,000.00 Service Award payment for the Class Representative, also to be paid from the Settlement Fund.
Back To Top
If you do not want to be part of the Settlement, you must formally exclude yourself from the Settlement. This is called a Request for Exclusion and is sometimes also called “opting out.” If you opt out, you will not receive Settlement benefits or payment. However, you will keep any rights you may have to sue PNDR on your own about the legal issues in this case. If you exclude yourself, you are telling the Court that you do not want to be part of the Settlement. You will not be eligible to receive any Settlement benefits if you exclude yourself. The deadline to exclude yourself from the Settlement is December 12, 2026.
To be valid, your Request for Exclusion must have the following information:
the name of the Litigation: Millie Foss v. Prenovost, Normandin, Dawe & Rocha, A.P.C., Case No. 30-2025-01488839-CU-NP-CXC, pending in the Superior Court of Orange County, California;
your full name, mailing address, telephone number, and email address;
personal signature; and
the words “Request for Exclusion” or a clear and similar statement that you do not want to participate in the Settlement.
You may only exclude yourself—not any other person.
Mail your Request for Exclusion to the Settlement Administrator at:
PNDR Cybersecurity Incident Settlement
ATTN: Exclusion Request
c/o Settlement Administrator
P.O. Box 26170
Santa Ana, CA 92799-9958
Your Request for Exclusion must be postmarked or emailed by December 12, 2026.
Back To Top
If you are a Class Member and do not like part or all of the Settlement, you can object to it. Objecting means telling the Court your reasons for why you think the Court should not approve the Settlement. The Court will consider your views. You cannot object if you have excluded yourself from the Settlement (see Question 15). If you object in writing, please provide the following information:
the name of the Litigation: Millie Foss v. Prenovost, Normandin, Dawe & Rocha, A.P.C., Case No. 30-2025-01488839-CU-NP-CXC, pending in the Superior Court of Orange County, California;
your full name, mailing address, telephone number, and email address;
information that proves that you are a Class Member (such as a notice you have received);
whether the objection applies only to you, or to other Class Members, as well;
a clear description of all the reasons you object; include any legal support, such as documents, you may have for your objection;
if you have hired your own lawyer to represent you for this objection, provide their name, bar number, and contact information;
whether or not you or your lawyer would like to speak at the Final Approval Hearing;
if you plan on calling witnesses or submitting documents at the Final Approval Hearing, provide a full list of both;
if you or your lawyer have objected in any other cases in the past five years, list the names, courts, the orders ruling on your objections, and civil action numbers for each of those cases; and
your signature (if you have hired your own lawyer, their signature is not sufficient).
Please include each of these items in your written objection.
If you wish to object in writing, you need only mail your objection to the Settlement Administrator at:
PNDR Cybersecurity Incident Settlement
ATTN: Objections
c/o Settlement Administrator
P.O. Box 26170
Santa Ana, CA 92799-9958
Your written objection must be postmarked or received by the Settlement Administrator by December 12, 2026.
If you wish to object orally, you may do so at the Final Approval Hearing (see Question 18) even if you did not submit a written objection.
Back To Top
Objecting is telling the Court that you do not like something about the Settlement. You can object to the Settlement only if you do not exclude yourself from the Settlement. Excluding yourself from the Settlement is opting out and stating to the Court that you do not want to be part of the Settlement. If you opt out of the Settlement, you cannot object to it because the Settlement no longer affects you.
Back To Top
The Court will hold the Final Approval Hearing on February 5, 2027, at 9:00 a.m. Pacific Time, in Department CX101 of the Superior Court of Orange County, California, at 751 W Santa Ana Blvd, Santa Ana, CA 92701. At the Final Approval Hearing, the Court will decide whether to approve the Settlement. The Court will also decide how Class Counsel should be paid, and whether to award a Service Award payment to the Class Representative. The Court will also consider any objections to the Settlement.
If you are a Class Member, you or your lawyer may appear and speak at the hearing at your own cost, whether or not you submitted a written objection (see Question 16).
The date and time of this hearing may change without further notice. Please check this website for updates before attending.
Back To Top
No. Class Counsel will answer any questions the Court may have. You may attend at your own expense if you wish, but you are not required to do so.
If you submit a written objection, you do not have to come to the Final Approval Hearing to talk about it. The Court will consider it as long as it was submitted on time. You may also appear at the hearing and object orally even if you did not submit a written objection. You may also pay your own lawyer to attend, but you do not have to.
Back To Top
If you do nothing, you will not receive a benefit from this Settlement. Unless you validly opt out, you will also give up the rights described in Question 8.
Back To Top
This website and the Long-Form Notice provide a summary of the proposed Settlement. The full Settlement Agreement and other related documents are available on the Important Documents page.
If you have additional questions, you can ask for free help any time by contacting the Settlement Administrator at:
PNDR Cybersecurity Incident Settlement
c/o Settlement Administrator
P.O. Box 26170
Santa Ana, CA 92799-9958
(866) 719-5313 (toll-free, 24/7)
info@PNDRDataSecurityincident.com
You can obtain copies of publicly filed documents by visiting the office of the Clerk of the Court, 751 W Santa Ana Blvd, Santa Ana, CA 92701.
Do not contact the Court or Clerk of Court regarding this Settlement.
Back To Top