ViaPath Technologies Settles $4.23M Class Action Over 2020 Data Breach ViaPath Technologies (formerly Telmate LLC), a provider of prison communication services, has agreed to a $4.23 million settlement to resolve a class-action lawsuit stemming from a 2020 data breach. The breach, which occurred between August 11 and 13, 2020, exposed sensitive personal and financial information, including names, dates of birth, contact details, Social Security numbers, and payment card or financial account data of incarcerated individuals and their families. ### Key Details of the Settlement - Settlement Fund: $4,225,000, covering cash payments to affected individuals, administrative costs, attorneys’ fees, and service awards. - Claims Process: Managed by Kroll Settlement Administration LLC, with a December 21, 2026 deadline for submissions. - Eligibility: Individuals who received a breach notification from Telmate/ViaPath are part of the settlement class. - Final Approval: A federal judge will review the settlement at a February 12, 2027 hearing, with payments expected approximately 90 days later if approved. ### The 2020 Breach and Allegations The lawsuit alleged that Telmate failed to implement adequate security measures and delayed notifying affected individuals after the breach. The exposed data particularly Social Security and financial account numbers heightened risks of identity theft and fraud. While the settlement does not include an admission of wrongdoing, it resolves claims that the company’s security practices were insufficient. ### Broader Regulatory and Legal Challenges This settlement is the latest in a series of legal and regulatory actions against ViaPath and its subsidiaries, including Global Tel*Link (GTL): - FTC Action (2024-2025): A separate $3 million penalty was imposed for a 2024 cloud-exposure incident affecting 650,000 individuals, where unencrypted data was left publicly accessible. - Price-Fixing Litigation: ViaPath has also faced $38.3 million in settlements over allegations of inflated call rates for incarcerated individuals. ### Industry and Market Impact The repeated breaches highlight systemic security weaknesses in the prison-communications sector, where exclusive vendor contracts limit competition and leave families with no alternative providers. Regulators, including the FTC, have increasingly scrutinized these companies, requiring mandatory security upgrades and stricter breach-disclosure practices. Cyber-insurance underwriters may also tighten coverage terms for ViaPath and similar vendors, while state corrections agencies could demand stronger contractual security requirements in future deals. ### Next Steps - Claims must be filed by December 21, 2026 via the settlement website (TelmateDataBreachSettlement.com) or through Kroll. - Final approval is scheduled for February 12, 2027, with payments expected by mid-2027 if no appeals delay the process. The case underscores the growing legal and financial risks for companies handling sensitive data, particularly in industries with limited consumer choice.