On April 1, 2026, Chime’s app went dark for hours and roughly 20,000 members couldn’t see balances, move money, or pay bills. Days later, a hacktivist group called Team 313 claimed credit — and the lawsuits started landing. The lead case is Castaneda et al. v. Chime Financial, Inc. If you’re a Chime member, here’s a plain-English breakdown of what’s alleged, who the proposed class covers, whether you can still “join,” and whether any money is actually on the table (spoiler: not yet).
What actually happened in April 2026
On April 1, 2026, Chime’s mobile app suffered a widespread outage. Chime’s status page told customers their money and personal information were secure. Soon after, a group calling itself Team 313 — also known as “313 Team” or “The Islamic Cyber Resistance in Iraq,” described in reporting as an Iran-linked hacktivist group — publicly claimed responsibility for an attack on Chime’s servers.
That’s where the two sides split hard:
- The plaintiffs say Team 313 breached Chime’s internal systems and stole personally identifiable information (PII) — Social Security numbers, dates of birth, government-issued IDs, postal and email addresses, phone numbers, and account credentials.
- Chime says the disruption hit only its marketing website (Chime.com), that no member data or funds were compromised, and that it has not confirmed any data breach.
As of now, reporting indicates none of the complaints has produced public evidence of a data theft beyond Team 313’s own claim. That dispute is the whole ballgame — and it’s why there’s no payout.
The lawsuits at a glance
At least three proposed class actions were filed in the U.S. District Court for the Northern District of California after the incident. Castaneda is the first and most-cited.
| Case | Filed | Key detail |
|---|---|---|
| Castaneda & Goodloe v. Chime (No. 3:26-cv-02924) | April 3, 2026 | Lead case; alleges Chime “lost control” of sensitive data |
| Porter v. Chime | April 7, 2026 | Separate proposed class action, same incident |
| Walsh v. Chime | April 17, 2026 | Separate proposed class action, same incident |
When multiple suits target the same event, courts typically consolidate them into one proceeding with lead counsel. Named plaintiffs Cindy Castaneda and Lauren Goodloe describe harms like anxiety, lost sleep, and a late rent payment caused by being locked out during the April 1 outage.
The legal claims
The Castaneda complaint leans on:
- California Unfair Competition Law (UCL)
- California Consumer Privacy Act (CCPA) — which can allow statutory damages for certain data breaches
- Federal Trade Commission Act standards, plus negligence-style theories
The core allegation: Chime acted with “wanton and reckless disregard,” using security below industry standards, exposing members to a “substantially increased risk of fraud, misuse, and identity theft.”
Who qualifies for the proposed class?
The proposed class in Castaneda is broadly defined as all U.S. residents whose personally identifiable information was compromised in the April 2026 incident. Two things matter here:
- “Proposed” is the key word. A judge has not yet certified any class. Until certification, the class definition can change — or the case can be dismissed.
- Being locked out isn’t automatically the same as having data stolen. Because Chime disputes any breach, who ultimately “qualifies” depends on what the court finds about whether PII actually left Chime’s systems.
Worked example
Maria, a Chime member in Texas, couldn’t log in for six hours on April 1 and paid a $35 late fee on a bill. If a class is certified and plaintiffs prove PII was exposed, Maria would likely fall inside the class as a U.S. member affected by the incident — and her out-of-pocket late fee is the kind of documented loss class members are often asked to prove later.
James closed his Chime account in 2024 and had no activity in 2026. He almost certainly isn’t a class member, because his data wasn’t in play during the April 2026 event.
Can you still “join” — and is there a payout?
This is where most headlines mislead people. Here’s the honest status as of October 2026:
- There is no settlement. No court has approved any deal, and no fund of money exists.
- There is no claim form and no official payout site. Any website asking you to “file your Chime breach claim” for a fee right now is a red flag — treat it as a potential scam.
- You don’t “sign up” to join a damages class action. In the U.S., if a class is certified and later settled, eligible members are automatically included and receive a notice (by email or mail) explaining how to file a claim or opt out. You join by doing nothing; you leave by opting out.
So “Can I still join?” has a reassuring answer: there’s currently nothing to miss. No deadline has passed because no claims period has opened.
What to do right now
- Keep records. Save screenshots of the outage, any late fees, fraud alerts, or time spent resolving issues tied to April 2026.
- Watch for official notice. If a class is certified or settled, you’ll be contacted through a court-approved process — not a random text.
- Protect yourself regardless. Because the breach is disputed, assume nothing is guaranteed: enable two-factor authentication, consider a free credit freeze at all three bureaus, and monitor statements.
- Don’t pay to “claim.” Legitimate class members never pay upfront to join a settlement.
Frequently Asked Questions
Did Chime admit to a data breach?
No. Chime says the April 1 disruption affected its marketing website and an internal app issue, and maintains that no funds or member data were compromised. The lawsuits allege otherwise based largely on Team 313’s public claim. A court has not resolved which account is correct.
How much money could I get?
Nothing is set. There’s no settlement, so any dollar figure circulating online is speculation. In data-breach cases that do settle, payouts often combine reimbursement for documented losses (like late fees or fraud) with smaller flat payments and free credit monitoring — but only if the case survives and settles.
I was locked out but don’t think my data was stolen. Am I covered?
Possibly, but it’s unsettled. The proposed class centers on people whose PII was compromised. Because Chime disputes any data theft, coverage for members who only experienced the outage will depend on how the court defines the class and what the evidence shows. Keep your outage records either way.
Is there a deadline to act?
Not for joining — there’s no claims window open yet. The practical deadlines right now are self-protective: freezing your credit and tightening account security sooner rather than later. If a settlement is approved, the notice you receive will list the real claim and opt-out deadlines.
The bottom line
Castaneda v. Chime is early-stage, hotly disputed litigation over whether the Team 313 attack actually exposed member data — not a finished settlement. There’s no payout, no claim form, and nothing you need to sign up for today. The smart moves are simple: save your records from the April 2026 outage, lock down your account and credit, ignore anyone charging a fee to “file your claim,” and wait for an official, court-approved notice if the case ever reaches a settlement.
WalletWisp is an independent, informational resource and is not affiliated with Chime. This article is for general information only and is not legal or financial advice; for guidance on your situation, consult a licensed attorney.
