Panda Express $2.45M Data Breach Class Action Settlement

Current and former employees and other individuals who received a notice stating the Panda Restaurant Group data breach may have compromised their personal information could be eligible to claim up to $5,000 and/or other benefits from a class action settlement. The cybersecurity incident impacted an estimated 240,295 people.

Panda Restaurant Group Inc. agreed to pay $2.45 million to settle a class action lawsuit alleging a data security incident occurred in or around March 2023. The lawsuit claimed an unauthorized third party may have accessed files containing sensitive personal information, including full names, dates of birth and Social Security numbers.

Who can file a claim for a data breach payout?

Class members are individuals residing in the United States whose personal information a threat actor accessed or potentially accessed in connection with the Panda Restaurant Group data breach in or around March 2023 and/or who received a notice letter about the incident on behalf of Panda Restaurant Group.

Panda Restaurant Group brands include Panda Express, Panda Inn, Hibachi San, Uncle Tetsu, Yakiya, Great Panda and some Whataburger locations.

How much will the settlement payment be?

Class members have the following benefit options:

• Documented loss payment: Class members can claim up to $5,000 in documented, unreimbursed expenses and/or losses resulting from the data breach. This includes costs for credit monitoring, late fees, unauthorized and unreimbursed charges and other expenses traceable to the incident.
• Pro rata cash payment: Class members who do not submit a documented loss claim can submit a claim to receive an alternative flat cash payment estimated at $100. The settlement administrator will determine the final payment amount by the total number of claims filed.
• California statutory cash payment: Class members who are California residents can also submit a claim to receive an additional payment estimated at $125.
• Credit monitoring: All class members may elect to receive two years of three-bureau credit monitoring services, which includes real-time monitoring, dark web scanning, public records monitoring, identity theft insurance and access to fraud resolution agents.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: PRG Breach Settlement, c/o A.B. Data Ltd., P.O. Box 173073, Milwaukee, WI 53217

The claim deadline is April 10, 2026.

Required proof and claim information

• All claims require the unique ID and PIN from settlement notice required to submit a claim.
• Documented loss payment claims require third-party documentation, which may include receipts, bank statements or other proof of out-of-pocket expenses and monetary losses due to fraud or identity theft.

Payout options

• Digital payment
• Paper check mailed to the address provided

$2.45 million data breach settlement fund

The $2,450,000 settlement fund will include:

• Settlement administration costs: Estimated at $225,381
• Attorneys' fees: Up to $816,666.67
• Attorneys' expenses: Up to $30,000
• Service awards to class representatives: Up to $3,000 each
• Credit monitoring: Cost determined by number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Deadline to opt out: March 23, 2026
• Deadline to file a claim: April 10, 2026
• Fairness hearing: April 20, 2026

When is the Panda Restaurant Group data breach settlement payout date?

The settlement administrator will issue payments and credit monitoring codes to eligible class members after it completes claim processing and the court grants final approval to the settlement.

Why is there a class action settlement?

The class action lawsuit alleged Panda Restaurant Group Inc. was responsible for a data security incident that occurred in or around March 2023 that may have exposed sensitive personal information. The plaintiffs claimed negligence, breach of implied contract, unjust enrichment, breach of the implied covenant of good faith and fair dealing, and breach of fiduciary duty.

Panda Restaurant Group denies the allegations but agreed to settle to avoid the expense and risk of a possible trial and appeals.

Sources

1. Official class notice
2. Settlement website
3. Settlement agreement