Krispy Kreme $1.6M Data Breach Class Action Settlement

Individuals who received a notice that their private information may have been affected by a data breach involving Krispy Kreme, may be qualify to submit a claim for up to $3,500 from a class action settlement. The cybersecurity incident compromised an estimated 161,676 current and former employees.

Krispy Kreme Doughnut Corp. has agreed to pay $1,616,760 to settle a class action lawsuit related to a data breach discovered on Nov. 29, 2024. The plaintiffs claim that unauthorized parties accessed or acquired sensitive personal information, including names, dates of birth, Social Security numbers and financial account access details.

Who can file a claim for a data breach payout?

Class members are individuals in the United States who were sent a notice indicating that their private information may have been impacted in the Krispy Kreme data breach.

How much will the Krispy Kreme settlement payments be?

Class members have the following benefit options:

• Cash payment A – Documented losses: Class members can claim up to $3,500 in documented losses related to fraud or identity theft resulting from the data breach. Documentation is required for this claim.
• Cash payment B – Alternate cash payment: Class members that do not submit a documented losses can submit to receive a cash payment, estimated at $75. Final payment amount will be determined by total number of claims filed.
• Credit monitoring: All class members will receive one year of free credit monitoring. A claim form is not required to receive this benefit. Activation codes were sent with the notice or can be obtained from the settlement administrator.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: Krispy Kreme Data Incident Settlement Administrator, PO Box 2047, Portland, OR 97208-2047

The claim deadline is June 22, 2026.

Required proof and claim information

• Unique ID and PIN required to submit a claim.
• Document losses claims require supporting documentation, which may include receipts, invoices, bank or credit card statements showing unreimbursed fees and fraudulent charges and other proof of identity theft or fraud that occurred due to the data breach.

Payout options

• PayPal
• Venmo
• Zelle
• ACH
• Paper check mailed to the address provided

$1.62 million Krispy Kreme settlement fund

The $1,616,760 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $538,920
• Attorneys' expenses: Reasonable costs to be presented to the court for approval
• Service awards to class representatives: Up to $1,500 each
• Credit monitoring: Cost determined by number of eligible class members
• Payments to approved claimants: Remainder of the fund after the above deductions

Important dates

• Deadline to file a claim: June 22, 2026
• Exclusion deadline: June 6, 2026
• Final approval/fairness hearing: July 6, 2026

When is the Krispy Kreme data breach settlement payout date?

Settlement payments will be issued to approved claimants approximately 75 days after the court grants final approval of the settlement.

Why did Krispy Kreme settle this lawsuit?

The class action lawsuit was filed after a data breach discovered on Nov. 29, 2024, which resulted in unauthorized access to sensitive personal information. Plaintiffs alleged that Krispy Kreme Doughnut Corp. failed to adequately protect private data.

Krispy Kreme denies the allegations but agreed to settle to avoid the uncertainty and cost of ongoing litigation and a possible trial.

Sources

1. Class notice
2. Official settlement website
3. Claim form
4. Settlement agreement