Morgan Stanley logoClosed to new claimsData breach

Morgan Stanley $60 Million Data Breach Settlement: Payout Status

Last updated: July 26, 2026

The Morgan Stanley data breach settlement is a $60 million agreement that resolved claims over two data-security incidents, in 2016 and 2019, in which Morgan Stanley failed to properly wipe or track computer equipment it was retiring from its data centers — leaving unencrypted personal data, including Social Security numbers and dates of birth, on devices that went missing or were resold. It is closed. About 15 million current and former wealth-management (brokerage) clients were covered. The claim window closed in 2022, and U.S. District Judge Analisa Torres of the Southern District of New York granted final approval on August 5, 2022. There is nothing to file today.

Rather than a flat cash check for everyone, the settlement provided class members up to 24 months of Aura fraud-insurance and identity-protection coverage, reimbursement of documented out-of-pocket losses up to $10,000 each, and reimbursement for lost time at $25 per hour for up to 4 hours. Morgan Stanley also agreed to keep working to recover the missing equipment. The court reduced class counsel's fee request from about $20.25 million to $13.64 million, sending the difference back to class members. Because the claim deadline has passed, no new Morgan Stanley settlement claims can be filed in 2026.

Key facts

Settlement amount
$60 million
Clients covered
~15 million
Fraud insurance
24 months (Aura)
Out-of-pocket cap
Up to $10,000 with proof
Lost-time pay
$25/hour, up to 4 hours
Incidents
2016 & 2019 equipment disposal
Claim deadline
Closed in 2022
Final approval
August 5, 2022
Case
In re Morgan Stanley, 1:20-cv-05914-AT (S.D.N.Y.)

Official settlement administrator: Court docket — In re Morgan Stanley Data Security Litigation

Who qualifies

  • You are a current or former Morgan Stanley wealth-management (brokerage) client whose personal information was stored on the data-center equipment involved in the 2016 or 2019 incidents.
  • You received a notice from Morgan Stanley about the incidents, typically mailed in July 2020 and/or June 2021.
  • You filed a valid claim before the 2022 deadline. That window is closed and no new claims are accepted.
  • Benefits depended on what you claimed: up to 24 months of Aura fraud-insurance coverage, documented out-of-pocket losses up to $10,000, and lost time at $25/hour for up to 4 hours.

Morgan Stanley settlement payout status — what happens now

  1. 1

    The claim window closed in 2022

    The deadline to file a claim passed in 2022. If you were eligible and did not file, you are not entitled to a benefit. There is no way to submit a new Morgan Stanley data breach claim in 2026 — the settlement is closed.

  2. 2

    The court approved the $60 million settlement on August 5, 2022

    U.S. District Judge Analisa Torres of the Southern District of New York granted final approval on August 5, 2022 in In re Morgan Stanley Data Security Litigation. She reduced class counsel's fees from about $20.25 million to $13.64 million, adding the roughly $6.4 million difference back to the money available for class members.

  3. 3

    Benefits were coverage and reimbursement, not a flat check

    There was no guaranteed 'everyone gets $X' payment. Class members could enroll in up to 24 months of Aura fraud-insurance and identity-protection coverage, claim documented out-of-pocket losses up to $10,000, and claim lost time at $25/hour for up to 4 hours. Distribution followed the resolution of post-approval appeals filed in late 2022.

  4. 4

    This is separate from the government fines

    Morgan Stanley also paid a $60 million penalty to the Office of the Comptroller of the Currency (2020), $35 million to the SEC (2022), and $6.5 million to a coalition of state attorneys general (2023) over the same equipment-disposal failures. Those penalties went to regulators and states — not to clients. Only the $60 million class settlement provided client benefits.

  5. 5

    Watch out for fake 'Morgan Stanley claim 2026' offers

    The claim window is closed. Any email, text, or website in 2026 inviting you to 'file a new Morgan Stanley data breach claim,' or asking for your account login, full Social Security number, or a processing fee to release a payout, is a red flag. Legitimate administrators never ask for a fee.

  6. 6

    Never miss the next data breach settlement — ClaimBee alerts you

    Financial firms settle breach and data-handling cases regularly, and the claim windows are short. ClaimBee scans 2,000+ cases, matches them to your profile, and tracks every deadline so you file the next one before it closes.

Missed this one? Don't miss the next.

ClaimBee matches your profile against 2,000+ active settlements, shows payout and proof requirements up front, and tracks every deadline for you.

Check your matches

Frequently asked questions

When will I get my Morgan Stanley data breach settlement check?

If you filed a valid claim, your benefits were processed after the settlement was approved on August 5, 2022 and post-approval appeals were resolved. The settlement provided fraud-insurance coverage and reimbursement of documented losses and time rather than a flat check. The claim window is closed, so no new claims are being paid in 2026.

How much was the Morgan Stanley data breach settlement payout?

The settlement fund was $60 million. There was no flat per-person cash amount. Benefits were up to 24 months of Aura fraud-insurance coverage, reimbursement of documented out-of-pocket losses up to $10,000, and lost time paid at $25 per hour for up to 4 hours. Your payout depended on what you claimed and could document.

Can I still file a Morgan Stanley data breach claim in 2026?

No. The claim deadline passed in 2022 and the settlement is closed. There is no open Morgan Stanley data breach claim window in 2026. Any site inviting you to file now, or charging a fee to 'release' a Morgan Stanley payout, is not the official settlement.

Who qualified for the Morgan Stanley settlement?

Current and former Morgan Stanley wealth-management (brokerage) clients — about 15 million people — whose personal information was stored on the data-center equipment involved in the 2016 and 2019 incidents, and who received a notice (typically mailed in July 2020 and/or June 2021).

What was the Morgan Stanley data breach?

In incidents in 2016 and 2019, Morgan Stanley failed to properly decommission old data-center equipment and unencrypted devices. Personal data — including Social Security numbers and dates of birth for roughly 15 million clients — remained on hardware that went missing or was resold to third parties instead of being securely wiped.

Is the Morgan Stanley data breach settlement legit?

Yes. It was a real $60 million settlement in In re Morgan Stanley Data Security Litigation, No. 1:20-cv-05914-AT, granted final approval on August 5, 2022 by U.S. District Judge Analisa Torres in the Southern District of New York. It provided fraud-insurance coverage and documented-loss reimbursement, and never charged a fee to participate.

How is this different from the $60 million OCC fine?

They are two different things that happen to share a dollar figure. In 2020 the Office of the Comptroller of the Currency fined Morgan Stanley $60 million — that penalty went to the government. The separate $60 million class-action settlement, approved in 2022, is the one that provided benefits to clients. Morgan Stanley also paid $35 million to the SEC and $6.5 million to state attorneys general.

Related settlements

More settlements people are checking

Payout status for other settlements we track, updated as administrators publish new information.