Circle K data breach settlement
Yes. The Circle K data breach settlement is real: a class action settlement in the State Court of Fulton County, Georgia, run by a court-appointed settlement administrator. The claim deadline, 3 September 2026, has passed and the judge’s final decision has not been posted.
Claims closed on September 3, 2026 and the final approval hearing was set for September 18, 2026; as of 7 November 2026 the official site shows no approval or payment update.
Is it real?
Yes. The case is Brittany Canup, et al. v. Gas Express, LLC d/b/a Circle K, case number 25EV012357, in the State Court of Fulton County, Georgia. A court-appointed settlement administrator runs it, and its only official site is gasexpressdatasettlement.com.
How the real notice reached people. The settlement agreement says the administrator notified the class by Postcard Notice by mail, with the long notice and paper claim forms on request. The claim form asks for a 'Unique ID (if known)' from the notice. Class members may also have received an earlier breach letter directly from Gas Express/Circle K. The official site, FAQ and notice carry no scam warning.
To tell a real message from a scam:
- The only official site is gasexpressdatasettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your Circle K password, your online banking login or a code texted to you. Payment details go only into the claim form on gasexpressdatasettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on (833) 386-6575, the number on gasexpressdatasettlement.com, not one in the message.
- Claims have closed.The deadline was 3 September 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on gasexpressdatasettlement.com instead.
Who qualifies
All living individuals residing in the United States who were sent a notice by Gas Express (Circle K) that their Private Information was impacted in the May 2024 data incident. Excludes Gas Express's directors, officers and agents, government entities, and the judge, the judge's family and court staff.
It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.
How much
There is no single settlement fund: each valid claim is paid on its own, up to the limits below.
| Benefit | Amount | Notes |
|---|---|---|
| Cash Payment A: documented losses | up to $2,000.00 | out-of-pocket losses between May 20, 2024 and September 3, 2026 (identity theft or fraud, credit reports, monitoring or freezes, replacing IDs, postage); receipts required; total Cash A claims capped at $45,000.00 |
| Cash Payment B: alternate cash | $50.00 | one-time payment, no proof needed; instead of Cash A; capped at 700 valid claims (10% of the class) |
| Credit monitoring | 2 years | CyEx Financial Shield Complete with $1 million financial fraud insurance; available to every class member alongside one cash option |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
Payout. The administrator has not published a payment date; benefits go out only if the court grants final approval and after any appeals are resolved.
Filing and payment
- The claim deadline (September 3, 2026) has passed; new claims are not being accepted.
- If you filed, check GasExpressDataSettlement.com (the official site) for approval and payment updates.
- The claim form offered PayPal, Venmo, Zelle, a virtual prepaid card or a physical check.
Official site: gasexpressdatasettlement.com. Phone: (833) 386-6575. Mail: Circle K Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799.
The breach, and what to do today
On or about May 20, 2024, a targeted cyberattack hit the computer systems of Gas Express, LLC, which runs Circle K stations and stores, and files containing names and Social Security numbers were accessed. Gas Express began sending notice letters on January 13, 2025.
What was exposed: names; Social Security numbers.
A settlement pays for what already happened. The data is still out there, so do these now:
- Freeze your credit.In the US it’s free at Equifax, Experian and TransUnion, and no one can open credit in your name while it’s on. Lift it for a day when you apply for credit yourself.
- Get an IRS Identity Protection PIN.It stops anyone filing a tax return in your name with your Social Security number. Request one at irs.gov/ippin.
- Distrust messages about Circle K and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- When payments will be sent.
- Whether the judge has granted final approval (the hearing was set for 18 September 2026).
- How many people are in the settlement.
Questions
Is the Circle K data breach settlement legit?
Yes. It is Brittany Canup, et al. v. Gas Express, LLC d/b/a Circle K, case 25EV012357, in the State Court of Fulton County, Georgia. A court-appointed settlement administrator runs it for the court, and the only official site is gasexpressdatasettlement.com.
Who qualifies for the Circle K settlement?
All living individuals residing in the United States who were sent a notice by Gas Express (Circle K) that their Private Information was impacted in the May 2024 data incident. Excludes Gas Express's directors, officers and agents, government entities, and the judge, the judge's family and court staff.
How much will I get from the Circle K settlement?
Up to up to $2,000.00 for losses you can prove, or $50.00 as a cash payment without receipts. Final amounts depend on how many valid claims there are.
What is the deadline for the Circle K settlement?
The claim deadline was 3 September 2026. It has passed.
When will the Circle K settlement pay out?
The administrator has not published a payment date; benefits go out only if the court grants final approval and after any appeals are resolved.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- Gas Express Data Settlement: home, Simpluris (settlement administrator), read 7 Nov 2026: case number, court, deadlines, hearing date and place, phone.
- Gas Express Data Settlement: FAQ, Simpluris (settlement administrator), read 7 Nov 2026: class definition, benefits, caps, mailing address, fees up to $235,000.00.
- Notice of Proposed Class Action Settlement, Simpluris / State Court of Fulton County, read 7 Nov 2026: data involved, Cash A/B wording and caps, 700-claim cap.
- Claim Form, Simpluris, read 7 Nov 2026: Unique ID field, payment options.
- Settlement Agreement, Parties' agreement (copy hosted by ClassAction.org), read 7 Nov 2026: May 20, 2024 attack; notice letters from January 13, 2025; postcard notice plan.