Nice-Pak Data Breach Settlement Offers Compensation to Affected Individuals A class action settlement has been reached for approximately 8,500 individuals impacted by a cybersecurity incident at Nice-Pak Products Inc. and Professional Disposables International Inc. The breach, which occurred between May 28 and June 15, 2023, exposed sensitive personal data, including names, Social Security numbers, financial account details, and medical information. Eligible class members those who received a breach notification can file claims for compensation under the settlement. Payout options include: - Up to $450 for ordinary out-of-pocket expenses (e.g., credit freeze fees, credit monitoring, professional services), with documentation required for claims over $50. - Up to $4,500 for documented extraordinary losses (e.g., identity theft or fraud directly tied to the breach). - Up to $90 for lost time (four hours at $22.50/hour). - Three years of Privacy Shield Pro, a credit monitoring and identity theft protection service. Claims must be submitted online or by mail by May 12, 2026, using the unique ID and PIN from the settlement notice. Approved payments will be distributed via Venmo, Zelle, or paper check approximately 60 days after final court approval, expected following the June 12, 2026, hearing. The settlement fund will cover administrative costs, up to $200,000 in attorneys’ fees, service awards of up to $5,000 per class representative, and cash payments for approved claims. While the companies deny wrongdoing, they agreed to settle to avoid prolonged litigation. The opt-out deadline for class members is April 13, 2026.

Nice Pak Products, Inc. experienced a data breach between May 28, 2023, and June 15, 2023, where an unauthorized actor gained access to files containing sensitive personal information. The compromised data included the name and Social Security number (SSN) of at least one Maine resident, exposing them to potential identity theft or fraud. In response, the company is offering the affected individual a complimentary one-year credit monitoring service to mitigate risks. The breach was formally reported by the Maine Attorney General’s Office on September 28, 2023. The incident highlights vulnerabilities in Nice Pak’s data security measures, as the attacker successfully exfiltrated personally identifiable information (PII) without immediate detection. While the scope appears limited to a single individual in this report, the exposure of an SSN—critical for financial and governmental authentication—poses significant long-term risks for the victim, including unauthorized credit applications, tax fraud, or other malicious activities. The company’s proactive offer of credit monitoring suggests an acknowledgment of the severity, though the delay between the breach period and public disclosure (over three months) may raise concerns about transparency and incident response protocols.