A newly approved class action settlement could put extra cash in your pocket if you qualify for a payment. Krispy Kreme agreed to a $1.6 million settlement regarding an alleged data breach, and victims could potentially receive as much as $3,500 in payment. Victims should work quickly to submit a claim by the June 22 deadline.
Here's what you need to know about the settlement, whether you might qualify, and how to submit a claim.
Get instant access to hundreds of discounts
Over 50? Join AARP today— because if you’re not a member you could be missing out on huge perks like discounts on travel, dining, and even prescriptions.
Get 25% off membership — just $15 for your first year with auto-renewal — and a free gift if you join today.
The Krispy Kreme class-action lawsuit
In November 2024, a cyberattack compromised personal information including names, numbers, dates of birth, social security information, driver's license numbers, health information, and financial accounts of over 160,000 current and former Krispy Kreme employees. In some cases, the information of employees' family members was also exposed.
Krispy Kreme disclosed the breach in December 2024, and a class action lawsuit followed, alleging the company failed to prevent unauthorized access to the sensitive information it had collected and stored. Play, a ransomware group, allegedly claimed that they were responsible for the cyberattack and indicated that they had stolen hundreds of gigabytes of data.
The Krispy Kreme settlement
While Krispy Kreme denied wrongdoing, the company ultimately agreed to a settlement, and the lawsuit didn't go to court. The company reached a preliminary settlement in March, and the court is scheduled to decide whether to issue a final approval on July 6, 2026.
Who qualifies for a payout
Individuals who qualify for a payout must live in the United States. They must have also received a Notice of the Data Incident; that notice informed them that their data had been compromised during the November cyberattack.
The notice read, in part: "Upon learning of the unauthorized activity, we immediately began taking steps to investigate, contain, and remediate the incident with the assistance of leading cybersecurity experts. In addition to containing the incident, we contacted law enforcement and engaged leading cybersecurity firms to assist us in assessing the incident's scope and cause."
Resolve $10,000 or more of your debt
National Debt Relief could help you resolve your credit card debt with an affordable plan that works for you. Just tell them your situation, then find out your debt relief options.1 <p>Clients who complete the program and settle all debts typically save around 45% before fees or 20% including fees over 24–48 months, based on enrolled debts. “Debt-free” applies only to enrolled credit cards, personal loans, and medical bills. Not mortgages, car loans, or other debts. Average program completion time is 24–48 months; not all debts are eligible, and results vary as not all clients complete the program due to factors like insufficient savings. We do not guarantee specific debt reductions or timelines, nor do we assume debt, make payments to creditors, or offer legal, tax, bankruptcy, or credit repair services. Consult a tax professional or attorney as needed. Services are not available in all states. Participation may adversely affect your credit rating or score. Nonpayment of debt may result in increased finance and other charges, collection efforts, or litigation. Read all program materials before enrolling. National Debt Relief’s fees are based on a percentage of enrolled debt. All communications may be recorded or monitored for quality assurance. In certain states, additional disclosures and licensing apply. ©️ 2009–2025 National Debt Relief LLC. National Debt Relief (NMLS #1250950, CA CFL Lic. No. 60DBO-70443) is located at 180 Maiden Lane, 28th Floor, New York, NY 10038. All rights reserved. <b><a href="https://www.nationaldebtrelief.com/licenses/">Click here</a></b> for additional state-specific disclosures and licensing information.</p>
Sign up for a free debt assessment here.
What affected employees received
In addition to informing employees that their information had been involved in the data breach, the notice included details about available identity monitoring services being offered. Those services included options like credit monitoring, fraud consultation, and identity theft restoration for qualifying employees.
What qualifying individuals need to do to file a claim
Affected individuals won't automatically receive a payout from the settlement and need to submit a claim form; the form must be submitted or postmarked by June 22. The claim form is available on the settlement website, KrispyKremeDataSettlement.com.
Affected individuals do not need to submit a claim form to receive 12 months of credit monitoring as described in the Notice of the Data Incident.
Claiming the $3,500 payout
The settlement features a two-tier payout structure. Victims with documented losses related to fraud or identity theft resulting from the data breach may submit a claim for a cash payment of up to $3,500. Documentation might include phone records, emails, or receipts proving the loss. Documents like personal certifications or declarations aren't considered to be reasonable documentation.
If you don't submit documentation or if the documentation you provide doesn't support the loss or is declared invalid, your claim may be processed as an alternative cash payment.
Claiming the alternative cash payment
Victims who don't have a documented loss related to the data breach may apply for an alternate cash payment. No documentation is required, and the cash payment is estimated to be about $75. Victims still need to submit a claim form to receive the alternative cash payment.
Expected settlement amounts
The exact amount of the cash payments may vary depending on the number of valid claims. If the number of valid claims doesn't use the entire settlement fund, payment amounts may be increased. However, if the number of valid claims exceeds the amount of the settlement fund, payment amounts may be reduced.
Payments should be issued after the settlement is approved by the court.
How to opt out of the settlement
If victims don't opt out of the settlement, then all court orders and judgments apply to the victims, and victims are not going to be able to sue or be part of any other lawsuit against Krispy Kreme relating to the data breach.
To opt out of the settlement, you must mail a written request for exclusion to the settlement administrator. Your request must be postmarked by June 6, 2026, and must include your name, address, telephone number, email address, physical signature, and a statement that you want to be excluded from the settlement. There is no option to opt out by email or phone.
Earn $200 cash rewards bonus with this incredible card
The Wells Fargo Active Cash® Card (Rates and fees) has no annual fee and you can earn $200 cash rewards bonus after spending $500 in purchases in the first 3 months.
Cardholders can also earn unlimited 2% cash rewards on purchases.
The best part? There's no annual fee.
Bottom line
If you received a Notice of the Data Incident, you may be eligible to receive a payout. If you're unsure about whether you qualify for the settlement, you may contact the settlement administrator through the website or by phone at 1-877-239-1879. Be sure to act quickly, since deadlines are quickly approaching. If you want to opt out or object, you must do so by June 6, 2026. Claims must be submitted or postmarked by June 22, 2026.
Even if you don't file a claim, you may still qualify for a year of free credit monitoring, which may offer extra security. Knowing you're staying on top of your credit may give you some reassurance and help lower your financial stress.
More from FinanceBuzz:
- Bills to cut if money feels tight.
- Find out if you could pay less for car insurance in just a few clicks.
- Make these 7 savvy moves when you have $1,000 in the bank.
- 14 moves seniors could benefit from but often forget about.
Add Us On Google