Tuesday, August 11, 2026 Digital Forensics & Evidence Sign in
Lars Daniel

Digital forensics expert & expert witness · The Forbes digital forensics columnist

Data Breaches & Privacy

Tangoe Data Breach Settlement: Claim Up To $5,750 By June 3

Former employees and dependents whose Social Security and medical data were exposed in the 2022 Tangoe breach can file for up to $5,750 before June 3, 2026.

Data Breach
Data Breach getty · Data Breach

A class action settlement over the 2022 Tangoe US data breach is now paying up to $5,750 per person to people whose Social Security numbers, medical information and financial account data were exposed. Claims must be filed by June 3, 2026. The final approval hearing is set for June 11, 2026 at 11 a.m. Eastern in Marion County Superior Court in Indianapolis, according to the court-approved settlement notice.

The case is Kevin McLinden v. Tangoe US, Inc., Case No. 49D06-2312-PL-048384. Most consumers have never heard of Tangoe. That is part of why this one matters.

What Happened In The November 2022 Tangoe Breach

Tangoe is a business-to-business company that manages telecom, mobile and cloud expenses for large enterprises. Its clients sit across finance, healthcare, retail, manufacturing and hospitality. When a vendor like that is breached, the people exposed are not the vendor’s customers. They are the customers' employees and dependents.

According to Tangoe’s data breach notice filed with the Massachusetts Attorney General, an unknown third party accessed certain Tangoe computer systems between November 15 and November 17, 2022. Tangoe discovered the activity on November 17, 2022. A later review, conducted between July 27 and September 19, 2023, determined that the impacted systems contained documents with protected health information tied to former employees and dependents of Tangoe's corporate clients. Tangoe began notifying affected people on November 1, 2023, about a year after the intrusion.

What Data The Tangoe Breach Exposed

The categories of information that may have been compromised: names, dates of birth, Social Security numbers, medical information, health insurance information, medication information, medical billing and claims information and financial account information.

That combination is about as bad as a consumer breach gets. A Social Security number alone is enough to open fraudulent credit. Medical information plus health insurance details enable medical identity theft, which is harder to unwind than financial fraud because it can corrupt a victim’s medical record. Financial account data rounds out the set.

The B2B-vendor angle is the reason most people in the class will miss this. You did not sign up for Tangoe. Your former employer did. If you worked at a company that used Tangoe between roughly 2020 and 2022 and you got a notice letter in late 2023 you barely remember, you are in the class.

This pattern is not new. I covered a similar case in December when a credit-check vendor exposed 5.6 million Social Security numbers of recent car buyers. Same structure, different industry. The consumer never heard of the vendor, but their SSN was still on its servers.

How Much You Can Claim From The Tangoe Settlement

The Tangoe settlement is structured so real money goes to people who actually file. Class counsel is asking the court to approve $195,000 in attorneys’ fees and costs plus a $2,500 service award for the class representative. Both are paid by Tangoe, not out of a fund for victims.

Class members can file for any of the following:

  • Up to $750 for documented ordinary losses, which can include out-of-pocket costs tied to the breach plus lost time at $25 per hour, capped at four hours or $100.
  • Up to $5,000 for documented extraordinary losses, meaning actual identity theft or fraud that the claimant can tie back to the breach.
  • A $50 flat alternative cash payment for class members who cannot or prefer not to document losses.
  • Two years of three-bureau credit monitoring with $1 million in identity theft insurance.

The maximum per-person cash recovery is $5,750 for claimants who can document both ordinary and extraordinary losses. There is no fixed total fund being divided among the class, so claim amounts will not be pro-rated down if many people file.

Who Qualifies For The Tangoe Settlement

The class is defined as all U.S. residents, or their successors or assigns, whose private information was impacted by the November 2022 Tangoe security incident. In practical terms that means former employees of any company that used Tangoe for telecom expense management or managed mobility services, along with their dependents, whose data sat on the systems that were breached.

If you received a notice letter in late 2023 from Tangoe US, you are in the class. The settlement notice you received in 2026 includes a unique ID and PIN for the online claim portal.

How To File A Tangoe Claim Before June 3

The official settlement website hosts the online claim form and a PDF version that can be printed and mailed. Mailed claims go to Tangoe Security Incident Settlement, c/o Settlement Administrator, PO Box 25226, Santa Ana, CA 92799-9958. The administrator’s email is info@TangoeUSDataSettlement.com.

Key dates to track, all confirmed on the official site and in the court notice:

  • Opt-out deadline: May 4, 2026
  • Objection deadline: May 4, 2026
  • Claim deadline: June 3, 2026
  • Final approval hearing: June 11, 2026 at 11 a.m. Eastern

Documented-loss claims require receipts, account statements, police reports or similar evidence. The $50 alternative payment requires no documentation but still requires a submitted claim.

What To Watch For After The Tangoe Settlement

Settlement announcements draw scammers. Expect phishing emails, texts and robocalls that claim to help file your Tangoe claim in exchange for a fee, your Social Security number or your bank information. The real settlement administrator does not charge claimants. The real website is tangoeusdatasettlement.com. No one legitimate will call asking for your full Social Security number to process your claim.

Assume the exposed data is in the hands of criminals who will eventually use it. Place a credit freeze with Equifax, Experian and TransUnion. Freezes are free and can be lifted temporarily when you apply for credit. For medical identity theft specifically, request an accounting of disclosures from any insurer listed on the Tangoe notice and watch explanation-of-benefits statements for charges tied to care you did not receive.

File before June 3. The pay-per-claim structure means the money is there. It just has to be asked for.


This column originally appeared in Forbes.

The newsletter

Digital forensics, explained before you need it

AI evidence, deepfakes and cell phone forensics from an expert witness who works these cases. No hype, no fear-mongering. Free.

Check your inbox to confirm your subscription.