Recall Summary
| Recall number | None |
| Issued by | Issuing agency |
| Date | 2026-07-25 |
| Company | Slim CD |
| Units affected | Not disclosed |
| Severity | Not classified |
Remedy: Follow the instructions in the official notice linked below. The agency record for this recall did not contain remedy text we could verify against this product, so we have not reproduced it here.
A slim cd lawsuit is now on file in two separate federal courts, and the docket record shows the pressure on the Florida-based payment gateway is not going away quietly. Slim CD, Inc. processes card transactions for merchants across the United States and Canada, and in September 2024 it began notifying roughly 1.7 million people that their payment card information may have been exposed during a months-long intrusion into its systems.
- What the verified court record shows
- Why the slim cd lawsuit filings arrived when they did
- What the two suits allege
- Who is actually affected
- What to do now if you think you’re affected
- Deadlines exist, and they vary
- What usually happens next as litigation builds
- Current status of the slim cd lawsuit docket
- The honest summary
Since that notification, individual plaintiffs have taken the company to court. This article explains what has actually been filed, what the filings allege in plain language, who is affected, and what typically happens next in litigation of this kind.
Case Timeline
Last checked: July 26, 2026
- July 22, 2025 (Latest Activity): Newest lawsuit filed — FIRST CHOICE FEDERAL CREDIT UNION v. SLIM CD, INC., W. District of Pennsylvania (Docket 2:25-cv-01088) (Court Record)
- October 08, 2024 (Nationwide Scope): Cases on file in 2 federal districts, including S. District of Florida, W. District of Pennsylvania (Court Record)
- October 08, 2024 (Litigation Underway): 2 federal lawsuits pending against Slim CD (Court Record)
What the verified court record shows
As of today, the public federal docket record contains exactly two verified filings naming the company. The first is Murray v. Slim CD, Inc., filed October 8, 2024 in the U.S. District Court for the Southern District of Florida and docketed under the nature-of-suit code 190, Contract: Other. The second is First Choice Federal Credit Union v. Slim CD, Inc., filed July 22, 2025 in the U.S. District Court for the Western District of Pennsylvania; the docket does not record a nature-of-suit code for that matter.
Two filings. Not two hundred, not a consolidated proceeding, not a certified group case. Anyone telling you the count is higher is going beyond the record. You can read the primary source yourself here: Murray v. Slim CD, Inc. official docket on CourtListener.
Why the slim cd lawsuit filings arrived when they did
The sequence is worth noting. Slim CD has said it detected suspicious activity in its environment on June 15, 2024, and that its investigation indicated unauthorized access dating back to August 17, 2023. Notification letters went out beginning September 6, 2024. The Florida case followed roughly a month later. The Pennsylvania case came almost a year after that.
That gap is normal. Data-exposure claims often surface in waves: individuals who received notice letters tend to file first, and institutional plaintiffs — banks and credit unions that absorb reissuance and fraud-monitoring costs — typically file later, after they can quantify what happened on their end.
What the two suits allege
Both matters arise out of the same underlying event: the security incident at Slim CD’s payment gateway and the exposure of cardholder information. The Florida matter is docketed as a contract case, which in this context generally signals claims sounding in agreement, duty, and obligation rather than statutory injury alone.
The Pennsylvania plaintiff is a federal credit union — a financial institution, not a consumer. Credit unions in this position ordinarily come to court over costs they did not cause and cannot recover from the cardholder: replacing compromised cards, monitoring accounts, and eating fraudulent charges.
Beyond the docket facts above, this article does not characterize specific counts, theories, or damages. Complaints are allegations. Nothing in either case has been established as fact by a court, and Slim CD has not been found liable of anything.
Who is actually affected
Two groups sit in the exposure zone. First, consumers whose card payments ran through a merchant using Slim CD’s gateway between August 2023 and June 2024. Reporting on the incident indicates the exposed fields included names, physical addresses, and card numbers with expiration dates, but not card verification values — which reduces some fraud avenues without eliminating card-not-present risk.
📨 Get Free Mass Tort Guides Alerts
Free · No spam · Unsubscribe anytime
Second, the card issuers themselves — the banks and credit unions that had to respond. The Pennsylvania filing shows at least one institution has decided the courthouse is the right venue for that conversation. For verified background on the underlying incident, see SecurityWeek’s reporting on the Slim CD breach.
What to do now if you think you’re affected
Keep records. That is the single most useful thing anyone in this position can do, and it costs nothing. Save the notification letter or email if you received one, including the date. Save bank and card statements covering late 2023 through 2024. Save anything documenting an unauthorized charge, a card reissuance, a fee, or time you spent cleaning it up.
Monitor your card activity rather than assuming a quiet month means you’re clear. Exposed card data can sit unused for a long stretch before it is tested. If you see a charge you don’t recognize, report it to your card issuer promptly — that process is separate from, and faster than, any court case.
Deadlines exist, and they vary
Every legal claim is governed by a filing deadline. Those deadlines differ by state, by the type of claim, and sometimes by when a person is deemed to have learned of the problem. Some are short. There is no single nationwide cutoff that applies to everyone touched by this incident, and no date in this article should be read as your deadline.
The practical takeaway: time is a real constraint, not a formality. Anyone weighing their options should get information about their own situation sooner rather than later. This article is legal information, not legal advice, and it is not a substitute for consulting a licensed attorney in your jurisdiction.
What usually happens next as litigation builds
With filings in two different districts arising from one event, several well-worn paths are possible. The defendant commonly moves to dismiss early, testing whether the alleged harm is concrete enough and whether the legal theories hold. Discovery, if the case survives, moves into forensic detail about what happened inside the network and when.
When separate suits over the same incident accumulate across districts, parties sometimes ask the Judicial Panel on Multidistrict Litigation to centralize pretrial proceedings before one judge. Two filings is a thin basis for that; more filings would change the calculus. Matters at this stage also frequently resolve privately without any public finding.
Current status of the slim cd lawsuit docket
Both matters appear as active filings on the public docket as of today, with no publicly recorded final resolution reflected in the docket list verified for this article. No amounts, no payouts, and no claims process are described here, because none are established in the verified record. Nobody should assume they are owed anything.
If you are following the slim cd lawsuit situation, the docket itself is the only reliable tracker. Court records update as motions are filed and ruled on, and additional filings elsewhere would appear there before they appear in news coverage.
The honest summary
Two verified federal filings — one consumer-side matter in Florida from October 2024, one credit union matter in Pennsylvania from July 2025 — now name the same payment gateway over the same security incident. Litigation is building rather than concluding. The slim cd lawsuit picture today is early-stage and unresolved: allegations on a docket, a company that has not been found liable, and a large notified population whose best immediate move is documentation and vigilance.
Were You Injured by a Recalled Product?
A recall by itself is a safety action, not a legal claim. However, if a recalled product caused a real injury, you may be eligible to pursue compensation. A licensed attorney can review your situation at no upfront cost — most work on contingency, meaning you pay nothing unless you recover.
Official Sources & Resources
Verify every recall against the issuing agency before acting:
- the issuing agency: official recall database — the record of truth for this notice
- CPSC: cpsc.gov — household goods, toys, furniture, appliances
- FDA: fda.gov — food, drugs, and medical devices
- NHTSA: nhtsa.gov — vehicles, tires, and child car seats
- USDA FSIS: fsis.usda.gov — meat, poultry, and egg products
Content last reviewed July 2026. This is general educational information, not legal advice. If you notice outdated information, please contact us.
Related Guides
- All Product Recalls
- All Active MDL Cases
- Mass Tort Explainers
- Mass Tort Tips
- Tort Reform by State — 50-State Comparison
You May Also Like
Attorney Advertising. The information on this page is provided for general informational purposes only and does not constitute legal advice. A product recall is a safety action by a manufacturer or regulator and does not by itself establish liability or create a legal claim. No attorney-client relationship is created by accessing or using this content. Every case is unique. If you believe you were harmed by a recalled product, consult a licensed attorney in your jurisdiction.