Slim Cd Lawsuit – Best Proven Guide (2026)

Recall Summary

Recall number None
Issued by Issuing agency
Date 2026-07-25
Company Slim CD
Units affected Not disclosed
Severity Not classified

Remedy: Follow the instructions in the official notice linked below. The agency record for this recall did not contain remedy text we could verify against this product, so we have not reproduced it here.

Read the official Issuing agency recall notice

A slim cd lawsuit is now on file in two separate federal courts, and the docket record shows the pressure on the Florida-based payment gateway is not going away quietly. Slim CD, Inc. processes card transactions for merchants across the United States and Canada, and in September 2024 it began notifying roughly 1.7 million people that their payment card information may have been exposed during a months-long intrusion into its systems.

Advertisement

Since that notification, individual plaintiffs have taken the company to court. This article explains what has actually been filed, what the filings allege in plain language, who is affected, and what typically happens next in litigation of this kind.

Case Timeline

Last checked: July 26, 2026

  • July 22, 2025 (Latest Activity): Newest lawsuit filed — FIRST CHOICE FEDERAL CREDIT UNION v. SLIM CD, INC., W. District of Pennsylvania (Docket 2:25-cv-01088) (Court Record)
  • October 08, 2024 (Nationwide Scope): Cases on file in 2 federal districts, including S. District of Florida, W. District of Pennsylvania (Court Record)
  • October 08, 2024 (Litigation Underway): 2 federal lawsuits pending against Slim CD (Court Record)

What the verified court record shows

As of today, the public federal docket record contains exactly two verified filings naming the company. The first is Murray v. Slim CD, Inc., filed October 8, 2024 in the U.S. District Court for the Southern District of Florida and docketed under the nature-of-suit code 190, Contract: Other. The second is First Choice Federal Credit Union v. Slim CD, Inc., filed July 22, 2025 in the U.S. District Court for the Western District of Pennsylvania; the docket does not record a nature-of-suit code for that matter.

Two filings. Not two hundred, not a consolidated proceeding, not a certified group case. Anyone telling you the count is higher is going beyond the record. You can read the primary source yourself here: Murray v. Slim CD, Inc. official docket on CourtListener.

Why the slim cd lawsuit filings arrived when they did

The sequence is worth noting. Slim CD has said it detected suspicious activity in its environment on June 15, 2024, and that its investigation indicated unauthorized access dating back to August 17, 2023. Notification letters went out beginning September 6, 2024. The Florida case followed roughly a month later. The Pennsylvania case came almost a year after that.

That gap is normal. Data-exposure claims often surface in waves: individuals who received notice letters tend to file first, and institutional plaintiffs — banks and credit unions that absorb reissuance and fraud-monitoring costs — typically file later, after they can quantify what happened on their end.

What the two suits allege

Both matters arise out of the same underlying event: the security incident at Slim CD’s payment gateway and the exposure of cardholder information. The Florida matter is docketed as a contract case, which in this context generally signals claims sounding in agreement, duty, and obligation rather than statutory injury alone.

The Pennsylvania plaintiff is a federal credit union — a financial institution, not a consumer. Credit unions in this position ordinarily come to court over costs they did not cause and cannot recover from the cardholder: replacing compromised cards, monitoring accounts, and eating fraudulent charges.

Beyond the docket facts above, this article does not characterize specific counts, theories, or damages. Complaints are allegations. Nothing in either case has been established as fact by a court, and Slim CD has not been found liable of anything.

Who is actually affected

Two groups sit in the exposure zone. First, consumers whose card payments ran through a merchant using Slim CD’s gateway between August 2023 and June 2024. Reporting on the incident indicates the exposed fields included names, physical addresses, and card numbers with expiration dates, but not card verification values — which reduces some fraud avenues without eliminating card-not-present risk.

📨 Get Free Mass Tort Guides Alerts

Free · No spam · Unsubscribe anytime

Second, the card issuers themselves — the banks and credit unions that had to respond. The Pennsylvania filing shows at least one institution has decided the courthouse is the right venue for that conversation. For verified background on the underlying incident, see SecurityWeek’s reporting on the Slim CD breach.

What to do now if you think you’re affected

Keep records. That is the single most useful thing anyone in this position can do, and it costs nothing. Save the notification letter or email if you received one, including the date. Save bank and card statements covering late 2023 through 2024. Save anything documenting an unauthorized charge, a card reissuance, a fee, or time you spent cleaning it up.

Monitor your card activity rather than assuming a quiet month means you’re clear. Exposed card data can sit unused for a long stretch before it is tested. If you see a charge you don’t recognize, report it to your card issuer promptly — that process is separate from, and faster than, any court case.

Deadlines exist, and they vary

Every legal claim is governed by a filing deadline. Those deadlines differ by state, by the type of claim, and sometimes by when a person is deemed to have learned of the problem. Some are short. There is no single nationwide cutoff that applies to everyone touched by this incident, and no date in this article should be read as your deadline.

The practical takeaway: time is a real constraint, not a formality. Anyone weighing their options should get information about their own situation sooner rather than later. This article is legal information, not legal advice, and it is not a substitute for consulting a licensed attorney in your jurisdiction.

What usually happens next as litigation builds

With filings in two different districts arising from one event, several well-worn paths are possible. The defendant commonly moves to dismiss early, testing whether the alleged harm is concrete enough and whether the legal theories hold. Discovery, if the case survives, moves into forensic detail about what happened inside the network and when.

When separate suits over the same incident accumulate across districts, parties sometimes ask the Judicial Panel on Multidistrict Litigation to centralize pretrial proceedings before one judge. Two filings is a thin basis for that; more filings would change the calculus. Matters at this stage also frequently resolve privately without any public finding.

Current status of the slim cd lawsuit docket

Both matters appear as active filings on the public docket as of today, with no publicly recorded final resolution reflected in the docket list verified for this article. No amounts, no payouts, and no claims process are described here, because none are established in the verified record. Nobody should assume they are owed anything.

If you are following the slim cd lawsuit situation, the docket itself is the only reliable tracker. Court records update as motions are filed and ruled on, and additional filings elsewhere would appear there before they appear in news coverage.

The honest summary

Two verified federal filings — one consumer-side matter in Florida from October 2024, one credit union matter in Pennsylvania from July 2025 — now name the same payment gateway over the same security incident. Litigation is building rather than concluding. The slim cd lawsuit picture today is early-stage and unresolved: allegations on a docket, a company that has not been found liable, and a large notified population whose best immediate move is documentation and vigilance.

Were You Injured by a Recalled Product?

A recall by itself is a safety action, not a legal claim. However, if a recalled product caused a real injury, you may be eligible to pursue compensation. A licensed attorney can review your situation at no upfront cost — most work on contingency, meaning you pay nothing unless you recover.

Official Sources & Resources

Verify every recall against the issuing agency before acting:

  • the issuing agency: official recall database — the record of truth for this notice
  • CPSC: cpsc.gov — household goods, toys, furniture, appliances
  • FDA: fda.gov — food, drugs, and medical devices
  • NHTSA: nhtsa.gov — vehicles, tires, and child car seats
  • USDA FSIS: fsis.usda.gov — meat, poultry, and egg products

Content last reviewed July 2026. This is general educational information, not legal advice. If you notice outdated information, please contact us.

Related Guides

Going through divorce too? Compare state laws at Divorce Help Guide. Affected by a recalled drug as a Medicare patient? See Medicare Cover Guide. Just diagnosed with a serious illness? Compare life insurance at Life Insure Guide. PFAS in your water? Check homeowners coverage at Home Insure Guide.