Data Breach class action settlements
Data breach settlements compensate people whose personal information (Social Security numbers, medical records, financial details) was exposed in a hack or security lapse. Most follow the same structure: a documented-loss tier for people with receipts, a flat or pro rata cash payment with no proof, and free credit monitoring. If you received a breach notice letter or email, you are usually already in the class.
22 open data breach settlements, sorted by deadline. Last verified August 3, 2026.
| Deadline | Settlement | Category | Proof | Country | Estimated payout |
|---|---|---|---|---|---|
| Aug 11, 2026 Closing this month | Flagstar Bank Data Breach Settlement The roughly 2.19 million U.S. consumers whose personal information was exposed in the Flagstar-related breaches disclosed in January and December 2021, including about 364,000 California residents who qualify for an added statutory payment. | Data Breach | Partial | US | $31,500,000 fund. Documented losses reimbursed up to $25,000; alternative cash payment estimated around $60 (capped at $599); Californians can add up to $100; three years of three-bureau credit monitoring also available |
| Aug 17, 2026 Closing this month | Bradford Health Data Breach Settlement Anyone whose personal information was exposed in the November 2023 cybersecurity incident at Bradford Health and who was sent a notice about the settlement. The compromised data reportedly included names, Social Security numbers, medical records, and financial details. | Data Breach | Partial | US | $900,000 fund. Up to $5,000 for documented losses, or roughly $150 as a pro rata cash payment with no documentation; three years of medical data monitoring is also available |
| Aug 18, 2026 Closing this month | Datavant Data Breach Settlement People whose personal or health information may have been exposed when a Datavant employee's email account was accessed by an intruder on May 8-9, 2024, generally those who received a settlement notice. About 58,000 individuals are covered. | Data Breach | Partial | US | $900,000 fund. Up to $5,000 for documented out-of-pocket losses, or a pro rata cash payment requiring no proof; identity monitoring is also offered |
| Aug 19, 2026 Closing this month | Legends Hospitality Data Breach Settlement Individuals whose personal information was compromised in the cyberattacks on Legends Hospitality's systems in November 2024, December 2024, and January 2025. Court filings indicate about 16,258 people were affected. | Data Breach | Partial | US | $812,900 fund. Up to $5,000 for documented losses tied to the breaches, or an estimated $200 cash payment with no proof required |
| Aug 20, 2026 Closing this month | OBI Seafoods Data Breach Settlement People, largely employees, whose private information was caught up in the August 2024 cyberattack on OBI Seafoods and who received a settlement notice. Exposed data allegedly included Social Security numbers, bank account details, medical and insurance information, and government IDs. | Data Breach | Partial | US | $380,280 fund. Up to $5,000 for documented losses incurred between August 16, 2024 and August 20, 2026, or a pro rata cash payment with no proof; a year of medical-focused credit monitoring is also available |
| Sep 2, 2026 Closing this month | ZOLL Medical Data Breach Settlement U.S. residents who were sent a notice from ZOLL Medical about its data incident. The class splits into two groups depending on whether a person's Social Security number was potentially exposed. | Data Breach | Partial | US | $3,500,000 fund. Out-of-pocket losses reimbursed up to $5,000 with documentation, plus a pro rata cash payment (doubled for those whose SSNs were affected); amounts depend on claim volume |
| Sep 3, 2026 | AMCA/Labcorp Data Breach Settlement People who received diagnostic services from Labcorp and whose personal or payment information was caught up in the 2019 breach of American Medical Collection Agency, the billing collector at the center of the multidistrict litigation. | Data Breach | Partial | US | $35,000,000 fund. Not published on the settlement homepage; individual amounts depend on the claims process and the volume of valid submissions |
| Sep 3, 2026 | Circle K / Gas Express Data Breach Settlement People whose personal details, including names and Social Security numbers, may have been compromised in the May 2024 data incident at Gas Express, a Circle K operator, typically those who received breach notification letters. | Data Breach | Partial | US | Up to $2,000 for documented out-of-pocket losses (program capped at $45,000 total), or a no-proof $50 alternate payment limited to the first 700 valid claims, plus two years of credit monitoring for all class members |
| Sep 8, 2026 | Lemonade Insurance Data Disclosure Settlement People notified by Lemonade in 2025 that their personal information, including driver's license numbers, was exposed through the company's online insurance quoting platform between April 2023 and September 18, 2024. | Data Breach | Partial | US | $10,500,000 fund. Documented losses reimbursed up to $10,000, or a pro rata cash payment from what remains of the fund; three years of credit monitoring with $1 million identity theft insurance is automatic for all class members |
| Sep 10, 2026 | STIIIZY Data Breach Settlement Anyone whose personal or private health information was exposed in the security incident that STIIIZY disclosed on January 7, 2025. Affected individuals typically received a breach notification from the company. | Data Breach | Partial | US | $2,950,000 fund. Documented loss reimbursement up to $7,500, or a pro rata cash payment requiring no documentation (California residents get a double share), plus two years of free credit monitoring with $1M identity theft insurance |
| Sep 14, 2026 | Comcast Data Breach Settlement People who were mailed or emailed a notice around December 18, 2023 telling them their personal information may have been exposed in the Comcast (Xfinity) data breach. | Data Breach | Partial | US | $117,500,000 fund. Reimbursement for documented out-of-pocket losses and lost time, plus identity defense and restoration services; cash amounts vary by claim |
| Sep 16, 2026 | American Consumer Credit Counseling Data Breach Settlement Anyone who was notified that their personal details, potentially including Social Security, driver's license, financial account, or payment card numbers, may have been exposed in ACCC's January 2025 data incident. | Data Breach | Partial | US | Settlement benefits are available to notified class members who file; specific amounts were not published on the administrator's site |
| Sep 22, 2026 | 700Credit Data Breach Settlement People who received an email or postcard notice in July or August 2026 telling them their information was involved in the data incident 700Credit detected around October 25, 2025. | Data Breach | Partial | US | $17,500,000 fund. Either reimbursement of ordinary documented losses up to $2,500 or a flat $50 alternative cash payment, both subject to pro rata adjustment |
| Sep 30, 2026 | ApolloMD Data Breach Settlement Anyone who received a letter from ApolloMD saying their private information may have been exposed in the company's May 2025 data incident. Notified individuals are automatically part of the class unless they opt out. | Data Breach | Partial | US | $4,020,000 fund. Up to $5,000 for documented fraud or identity-theft losses, or an alternate cash payment estimated at $75 (subject to pro rata adjustment), plus one year of CyEx medical data monitoring with $1 million in identity-theft insurance. |
| Oct 1, 2026 | Healthcare Services Group Data Breach Settlement Living US residents who got a breach notice from Healthcare Services Group, or whose private information HCSG otherwise determined may have been compromised in its data incident. No purchase or employment status matters; being on HCSG's notification list is what counts. | Data Breach | Partial | US | $3,000,000 fund. Reimbursement of up to $5,000 in documented monetary losses, a pro rata cash payment, and three years of credit monitoring. |
| Oct 1, 2026 | NJ Lenders Corp Data Breach Settlement People who were sent direct notice from NJ Lenders Corp that their name, Social Security number, or other private information may have been compromised in the mortgage lender's August 2025 data incident. | Data Breach | Partial | US | Up to $2,500 for documented out-of-pocket losses incurred between August 18, 2025 and October 1, 2026, or a $40 flat cash payment with no documentation, plus one year of CyEx Financial Shield Complete with $1 million in fraud insurance. |
| Oct 8, 2026 | Ernst & Young MOVEit Data Breach Settlement Living US residents whose personally identifiable information sat in files compromised through the MOVEit file-transfer software incident tied to Ernst & Young's systems, including Bank of America-related data handled by EY. | Data Breach | Partial | US | $2,500,000 fund. Reimbursement of documented ordinary losses up to $2,500 and extraordinary losses up to $10,000, or a $100 alternative cash payment (all subject to pro rata adjustment), plus two years of identity theft protection for all class members. |
| Oct 12, 2026 | Urban One Data Breach Settlement U.S. residents whose private information may have been exposed in the cyberattack Urban One discovered in March 2025, generally the people who received a breach notice from the company. | Data Breach | Partial | US | $675,000 fund. Documented losses up to $10,000 plus lost time at $25/hour (max $375), or an alternate pro rata payment expected up to $500; all class members can also claim three years of credit monitoring |
| Oct 13, 2026 | Doxim Data Breach Settlement Living US residents whom Doxim identified and notified that their private information was affected by the December 30, 2023 security incident at the customer-communications vendor. | Data Breach | Partial | US | $5,500,000 fund. Either up to $5,000 for documented fraud or identity-theft losses (Cash Payment A) or roughly $100 with no documentation (Cash Payment B), and every claimant also gets one year of free credit monitoring. |
| Oct 22, 2026 | Lands' End Data Breach Settlement US residents whose private information, such as names, birth dates, Social Security numbers, driver's license or passport details, or limited medical information, was compromised in the December 2024 Lands' End data incident. Affected individuals appear in the company's records. | Data Breach | Partial | US | Up to $5,000 for documented out-of-pocket losses incurred between December 6, 2024 and October 22, 2026, or a $60 flat payment with no documentation, plus two years of CyEx Financial Shield Complete including $1 million in fraud insurance. |
| Oct 23, 2026 | Equinox Data Breach Settlement US residents who received a notice from Equinox that their private information, which could include Social Security numbers, health insurance details, medical treatment information, or financial data, may have been affected by the fitness company's April 2024 data incident. | Data Breach | Partial | US | $685,000 fund. Up to $5,000 for documented out-of-pocket losses, an estimated $100 pro rata cash payment with no proof required, and three years of one-bureau credit monitoring with dark web monitoring. |
| Portal opening soon | Government of Canada Online Accounts Privacy Breach Settlement (Sweet v. Canada) People whose personal or financial information in a Government of Canada online account, including CRA My Account and GCKey-linked services, was accessed without authorization during the credential-stuffing attacks of summer 2020, roughly June 15 to August 30. Class members should have received an eligibility notice from KPMG and can confirm status on the administrator's site. | Data Breach | Partial | CA | $8,760,500.90 CAD fund. Up to $80 for accounts that were accessed, up to $200 where the access led to fraud such as bogus CERB applications (both calculated at $20 per hour of lost time), and up to $5,000 from a special fund for documented out-of-pocket losses. Note: the claims portal had not yet opened and no filing deadline had been published as of August 3, 2026; a six-month claims window is expected once it launches. |