How to claim a data breach settlement

When a breach leads to a class action, it rarely ends in a verdict. It ends in a deal: the company puts money into a fund and admits nothing, and everyone in the affected group gives up the right to sue over that incident. You are not a plaintiff and you do not hire anyone — you are a class member, and your only job is to file a claim before the deadline. Miss it and the release still binds you, which is why the paperwork matters more than it looks.

Every settlement has a class definition, and it is narrow: usually people whose data was in one named incident at one company during a stated period. A mailed or emailed notice is the clearest sign you qualify, but plenty of people never get one because the address on file is old. If you are not sure which incidents involved you, start by checking which breaches your email appears in with our free breach check, and read the company entry in our breach directory for what was exposed and when.

Real claims are handled by a court-appointed administrator on a dedicated site, linked from the company’s own breach page and named in the court documents. Scam versions go up within days of any settlement making the news, and they ask for exactly what the breach exposed. Type the address yourself rather than tapping a link in an unsolicited email, and treat “your compensation is waiting, confirm your bank details” as fraud every single time. Our guide to checking a breach notification letter covers how to tell the genuine paperwork from the imitation.

Most funds pay along the same lines. There is reimbursement for documented out-of-pocket losses — fraudulent charges you had to chase, bank or freeze fees, notary and postage costs, sometimes credit-repair bills — capped at a stated amount. There is a payment for time you spent dealing with the fallout, claimed as hours at a set rate and capped low, which is where the “a few hours at $25” figure people quote comes from. Many settlements also offer a flat cash alternative for people with nothing to document, plus a couple of years of credit monitoring. Read which options are mutually exclusive: choosing the flat payment often rules out the documented-loss route.

Documented losses need documents: statements showing the charge, receipts, letters from your bank, the invoice from a credit-repair service. Screenshots of an app are weak; a statement with dates on it is strong. Time spent is different — it is normally self-attested, so you describe what you did and how long it took, honestly, and sign under penalty of perjury. Claims get rejected far more often for a missing attachment than for a small award, so assemble the file before you open the form.

The claim deadline is the only date under your control, and it is usually a few months after notices go out. What follows is not fast: a final approval hearing, an appeal window, then the administrator dividing the fund by how many valid claims came in. A year between filing and money arriving is ordinary, and appeals stretch it further. Amounts get adjusted at the end too — if far more people file than expected, every payment shrinks pro rata.

A settlement compensates you for a leak. It does not delete anything. The records that were taken stay in circulation, get merged with older leaks, and keep feeding the phishing calls that quote a real detail to sound credible. The steps that change your actual exposure are separate and free to start: freeze your credit, kill password reuse, and take your address and phone number off the people-search sites that make you easy to target. Our guide on what to do after a data breach runs through the order that works.