The settlement, first agreed in June 2020, has now met with the approval of Judge Ron Altman, as reported by Bloomberg Law.
This week, the judge issued preliminary approval for the settlement figure in the US District Court for the Southern District of Florida.
The class-action lawsuit, involving roughly 24,300 members, will be settled in return for Citrix providing the $2.275 million fund, usable for credit monitoring services, ID theft recovery, and up to $15,000 in reimbursement for expenses and loss per claimant.
Citrix disclosed the data breach in March 2019 after being alerted by the FBI of a possible network intrusion. Cyberattackers had infiltrated the software giant s internal servers for a period of roughly five months between 2018 and 2019.
The $2.275 million settlement is to provide approximately 24,316 victims of the data breach, which included Citrix employees, contractors, interns, job candidates, beneficiaries, and dependents. The funds are to be used for up to five years of credit monitoring services, identity theft recovery, as well as up to $15,000 (£11,000) in reimbursement for expenses and losses per claimant.
The class action lawsuit is to be finalised over a Zoom hearing scheduled for 10 June 2021.
The major cyber attack, which was first reported in March 2019, resulted in the loss of 6TB worth of data including emails, blueprints and other business documents. Citrix, which has clients including businesses, the American military and government departments, announced that the incident had been brought to their attention by the FBI days earlier.