Panda Express $2.45M Data Breach Class Action Settlement

Current and former employees and other individuals who received a notice that their personal information may have been compromised in the Panda Restaurant Group data breach, you may be eligible to claim up to $5,000 or other cash benefits from a class action settlement. The cybersecurity incident impacted an estimated 240,295 people.

Panda Restaurant Group Inc. has agreed to pay $2.45 million to settle a class action lawsuit related to a data security incident that occurred in or around March 2023. The lawsuit alleges that an unauthorized third party may have accessed files containing sensitive personal information, including full names, dates of birth and Social Security numbers.

Who can file a claim for a data breach payout?

Class members are individuals residing in the United States who had their personal information accessed or potentially accessed in connection with the Panda Restaurant Group data breach that occurred in or around March 2023 and/or received a notice letter about the incident on behalf of Panda Restaurant Group.

Panda Restaurant Group brands include Panda Express, Panda Inn, Hibachi San, Uncle Tetsu, Yakiya, Great Panda and some Whataburger locations.

How much will the settlement payment be?

Class members have the following benefit options:

• Documented loss payment: Class members can claim up to $5,000 in documented, unreimbursed expenses and/or losses resulting from the data breach. This includes costs for credit monitoring, late fees, unauthorized charges not reimbursed, and other expenses traceable to the incident.
• Pro rata cash payment: Class members who do not submit a documented loss claim can submit to receive an alternative flat cash payment, estimated at $100. Final payment amount will be determined by the total number of claims filed.
• California statutory cash payment: Class members who are California residents can also submit to receive an additional payment, estimated at $125.
• Credit monitoring: All class members may elect to receive two years of three-bureau credit monitoring services, which includes real-time monitoring, dark web scanning, public records monitoring, identity theft insurance and access to fraud resolution agents.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or by printing the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: PRG Breach Settlement c/o A.B. Data Ltd. P.O. Box 173073 Milwaukee, WI 53217

The claim deadline is April 10, 2026.

Required proof and claim information

• Unique ID and PIN from settlement notice required to submit a claim.
• Documented loss payment claims require third-party documentation, which may include receipts, bank statements or other proof of out-of-pocket expenses and monetary losses due to fraud or identity theft.

Payout options

• Digital payment
• Paper check mailed to the address provided

$2.45 million data breach settlement fund

The $2,450,000 settlement fund of $2.45 million will include:

• Settlement administration costs: Estimated at $225,381
• Attorneys' fees: Up to $816,666.67
• Attorneys' expenses: Not to exceed $30,000
• Service awards to class representatives: Up to $3,000 each
• Credit monitoring: Cost determined by number of claims filed.
• Payments to approved claimants: Remaining settlement funds

Important dates

• Fairness hearing: April 20, 2026
• Deadline to file a claim: April 10, 2026
• Deadline to opt out: March 23, 2026

When is the Panda Restaurant Group data breach settlement payout date?

Payments and credit monitoring codes will be issued to eligible class members after the settlement is granted final approval and claim processing is completed.

Why was there a class action settlement?

The class action lawsuit alleged that Panda Restaurant Group Inc. was responsible for a data security incident that occurred in or around March 2023, which may have exposed sensitive personal information. Plaintiffs claimed negligence, breach of implied contract, unjust enrichment, breach of the implied covenant of good faith and fair dealing, breach of fiduciary duty and sought declaratory and injunctive relief.

Panda Restaurant Group denies the allegations but agreed to settle to avoid the expense and risk of a possible trial and appeals.

Sources

1. Official class notice
2. Settlement website
3. Settlement agreement