York Wallcoverings Inc. has reached a $225k class action settlement following a data breach that exposed sensitive employee information. 

The data incident, which occurred in April 2024, affected certain current and former employees whose personal information was potentially compromised when an unknown actor gained unauthorized access to the company's network systems.

Those whose personal information was potentially compromised may now receive both monetary compensation and credit monitoring services to protect against future identity theft risks.

What Happened in the York Wallcoverings Data Incident?

On April 11, 2024, York Wallcoverings discovered unusual activity that disrupted access to company systems.

This breach triggered an immediate investigation that took considerable time to complete. York Wallcoverings didn't determine which personal information was impacted until June 18, 2024 - over two months after the initial hack. 

Even more concerning, affected employees weren't notified about the data incident until July 19, 2024, representing a three-month delay since discovery.

This reactive approach to data security came too late for those whose personal information was already exposed during the breach window.

Adrienne Hedge v. York Wallcoverings Lawsuit Allegations 

Lead plaintiff Adrienne Hedge took action on behalf of all affected employees after discovering the data incident compromised her personal information. Hedge worked for York Wallcoverings from 2019 to 2022.

Her complaint alleges the following acts occurred when York Wallcoverings failed to implement adequate cybersecurity measures despite knowing the risks.

• Negligence in data protection
• Breach of implied contract
• Invasion of privacy
• Breach of fiduciary duty
• Unjust enrichment

York Wallcoverings denies all allegations and maintains it acted appropriately.

However, both parties agreed to settle to avoid the costs and uncertainties of continued litigation. The settlement represents a compromise, not an admission of wrongdoing by York Wallcoverings.

Types of Personal Information Compromised in the Data Breach

The data breach exposed highly sensitive personal information that cybercriminals prize on the dark web. 

York Wallcoverings employees had their most private financial and identification details potentially accessed by unauthorized third parties.

• Social Security numbers
• Driver's license numbers
• Bank account numbers
• Routing numbers

This combination of personal information creates what cybersecurity experts call a "fullz" package - complete identity profiles that criminals can use for various fraudulent activities.

According to the lawsuit, the hack affected current and former York Wallcoverings workers who had their information stored in company systems.

Who Can File a York Wallcoverings Settlement Claim?

People who currently or formally worked for York Wallcoverings Inc. in the United States and received a notice about the data incident make up the primary group of eligible claimants.

The claims administrator has identified these individuals and has sent them an official notice regarding the breach and future claim rights.

However, some York Wallcoverings employees may not have received such communication and must file their claims through the settlement website.

Several exclusions apply to the settlement class:

• York Wallcoverings Inc. executives.
• Judges assigned to the case and their staff and family.
• Any person found guilty of initiating or causing the data breach.
• Individuals who validly request exclusion from the settlement class.

Settlement Compensation Structure and Payment Options

This settlement offers multiple compensation tiers designed to address different types of harm. Understanding these options helps maximize your potential recovery from this data breach settlement.

Credit Monitoring and Identity Theft Protection

Every eligible class member can receive 24 months of free credit monitoring and identity theft protection through IDX. 

This comprehensive service includes:

• Single-bureau credit monitoring
• Dark web monitoring for your personal information
• $1 million in reimbursement insurance
• Fully managed identity recovery services
• Lost wallet assistance

Documented Ordinary Losses (up to $350)

Class members may also claim reimbursement for out-of-pocket expenses directly related to the data breach.

These ordinary losses include:

• Fees for credit reports and credit monitoring services.
• Identity theft insurance products purchased between April 11, 2024, and September 10, 2025.
• Attorney or accountant fees related to breach response.
• Costs to freeze or unfreeze credit with reporting agencies.
• Long-distance phone and data charges (if charged by usage).
• Postage and local travel gasoline expenses.

All ordinary loss claims require third-party documentation, such as receipts, bills, or bank statements that verify the expenses.

Lost Time Reimbursement

Recognizing that responding to a data breach takes valuable time, the settlement compensates up to four hours of lost time at $20 per hour. 

This $80 maximum reimbursement requires:

• At least one full hour spent dealing with breach-related issues.
• A specific written description of how you spent the time claimed.
• Attestation under penalty of perjury.

Lost time reimbursement counts toward the $350 cap for ordinary losses.

Extraordinary Losses for Documented Identity Theft

Victims of actual identity theft can claim up to $5,000 for extraordinary losses. 

These claims require substantial documentation showing:

• Actual documented identity theft or fraud.
• The identity theft was more likely than not caused by the York Wallcoverings data incident.
• Proof of unreimbursed monetary losses.
• Evidence of exhausting other reimbursement sources, like insurance.
• The identity theft occurred between April 11, 2024, and September 10, 2025.

Alternative Cash Payment

The settlement offers a flat $50 alternative cash payment for those who prefer a simpler option.

You cannot combine this choice with ordinary or extraordinary loss claims, but you can select it along with credit monitoring services. 

No documentation is required for this payment option.

How to Submit Your Settlement Claim

Filing your York Wallcoverings settlement claim requires attention to detail and proper documentation.

The process offers both online and mail submission options to accommodate different preferences.

Online submission

Visit WallcoveringsDataSettlement and have your Notice ID and confirmation code ready. These codes appear on the settlement notice you received. The online portal walks you through each claim type and allows you to upload supporting documentation directly.

Mail-in option 

Those preferring traditional mail can download a claim form from the settlement website and send it to:

York Wallcoverings Data Settlement

c/o Claims Administrator

1650 Arch Street, Suite 2210

Philadelphia, PA 19103

Documentation requirements vary by claim type:

• Ordinary losses need receipts or statements.
• Extraordinary losses require extensive proof of identity theft.
• Alternative cash payments need no documentation.
• Lost time claims require detailed descriptions.

Payment delivery offers modern convenience and includes cash transfers to PayPal, Venmo, Zelle, virtual prepaid cards, or traditional checks mailed to your address.

Important Dates for Class Members

Mark these critical deadlines on your calendar to protect your rights in the York Wallcoverings settlement:

• August 11, 2025 - Exclusion deadline for opting out of the settlement.
• September 10, 2025 - Final deadline to submit all claims.
• October 16, 2025, at 9:30 am - Final approval hearing.

The final approval hearing takes place at: 

York County Judicial Center 

45 North George Street 

York, PA 17401

Administrator staff will issue settlement payments only after the court grants final approval and all claim processing is complete. This timeline means payments won't arrive until late 2025 or early 2026.

Lessons from the York Wallcoverings Settlement

The York Wallcoverings class action offers valuable insights into modern data breach litigation and employee rights. The three-month notification delay particularly stands out as a critical failure that amplified potential harm to affected individuals.

Workers provide extensive personal data throughout their employment relationship, from initial applications through benefits enrollment and payroll processing. That information remains vulnerable long after employment ends, as former employees in this case discovered.

The settlement reaffirms that companies can no longer treat cybersecurity as an IT issue alone - it requires enterprise-wide commitment and resources proportional to the sensitivity of stored data.