CR&R Environmental Services $500K Data Breach Settlement

Individuals who received a notice that the December 2022 CR&R Inc. Environmental Services data breach may have affected their personal information could qualify to submit a claim for up to $5,000 from a class action settlement. The cybersecurity incident impacted approximately 13,014 individuals.

CR&R Inc. agreed to pay $500,000 to settle a class action lawsuit alleging a targeted cyberattack exposed sensitive data. The plaintiff claimed that the company failed to adequately protect personal information, including names, Social Security numbers, financial account details and health insurance information.

Who can file a claim for a data breach payout?

Class members are individuals residing in the United States who received a notice from CR&R indicating the December 2022 data breach may have impacted their private information.

How much are settlement payments?

Class members have the following benefit options:

• Cash payment A - documented losses: Class members can claim up to $5,000 in documented out-of-pocket losses traceable to the data breach that occurred between Dec. 13, 2022, and Aug. 24, 2026. This includes monetary losses due to identity theft or fraud, fees for credit reports or monitoring or for freezing/unfreezing credit, costs to replace IDs and postage for contacting financial institutions.
• Cash payment B - Alternate cash payment: Class members who do not submit a documented losses claim can submit a claim to receive a one-time cash payment estimated at $150. The settlement administrator will determine the final amount by the total number of claims filed.
• Credit monitoring services: All class members can elect to receive two years of three-bureau credit monitoring services.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail or email to the settlement administrator.

Settlement administrator's mailing address: CR&R Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

Settlement administrator's email address: info@CRRDataSettlement.com

The claim deadline is Aug. 24, 2026.

Required proof and claim information

• Online claims require the unique ID and PIN from the settlement notice the class member received.
• Documented losses claims require supporting documentation, which may include receipts, invoices, bank statements showing unreimbursed fees or fraudulent charges and other proof of fraud or identity theft.

Payout options

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Paper check mailed to the address provided

Settlement fund breakdown

The $500,000 settlement fund will include:

• Settlement administration costs: Up to $45,000
• Attorneys' fees: Up to $150,000
• Attorneys' expenses: Up to $2,000
• Service award to class representative: Up to $3,000
• Credit monitoring services: Cost determined by number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Opt-out deadline: Aug. 8, 2026
• Deadline to file a claim: Aug. 24, 2026
• Final approval hearing: Sept. 14, 2026

When is the CR&R Environmental Services settlement payout date?

The settlement administrator will issue payments and credit monitoring information to approved claimants approximately 75 days after the court grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit alleged a targeted cyberattack on CR&R’s computer systems in December 2022 led to unauthorized access to files containing sensitive personal information. The plaintiff claimed CR&R failed to adequately protect this data.

CR&R denies the allegations but agreed to settle the case to avoid the cost and uncertainty of continued litigation.

Sources

1. Class notice
2. Settlement FAQ
3. Claim form
4. Settlement agreement