Krispy Kreme data breach settlement
Yes. The Krispy Kreme data breach settlement is real: a $1,616,760 class action settlement in federal court, Western District of North Carolina, run by a court-appointed settlement administrator. Payments to people who filed a valid claim have been sent.
Final approval was granted on July 30, 2026, claims processing is complete, no late claims are accepted, and award payments went out on Monday, September 14, 2026.
Is it real?
Yes. The case is In re: Krispy Kreme Data Breach Litigation, case number 3:25-cv-00434-MOC-SCR, in the US District Court for the Western District of North Carolina. A court-appointed settlement administrator runs it, and its only official site is krispykremedatasettlement.com.
How the real notice reached people. A Postcard Notice was sent by first-class mail on March 25, 2026 to identified class members. It carried a Unique ID and PIN (needed to file online) and a credit monitoring activation code. People without a postcard could get their ID or code from the administrator. The site gives no specific scam warning; the only official addresses are the website, 1-877-239-1879, [email protected] and PO Box 2047, Portland, OR.
To tell a real message from a scam:
- The only official site is krispykremedatasettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
- Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
- Nobody needs your passwords.The administrator never asks for your Krispy Kreme password, your online banking login or a code texted to you. Payment details go only into the claim form on krispykremedatasettlement.com.
- Check by phone.If you aren’t sure a message is real, call the administrator on 1-877-239-1879, the number on krispykremedatasettlement.com, not one in the message.
- Claims have closed.The deadline was 22 June 2026. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on krispykremedatasettlement.com instead.
Who qualifies
Living individuals residing in the United States who were sent a notice of the Data Incident saying their private information may have been impacted.
It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.
How much
The total settlement is $1,616,760. What each person can claim:
| Benefit | Amount | Notes |
|---|---|---|
| Cash Payment A: documented losses | up to $3,500 per Settlement Class Member | Losses from fraud or identity theft due to the incident, with reasonable documentation (e.g. phone records, emails, receipts). |
| Cash Payment B: alternate cash | estimated $75 | Instead of Payment A, no documents needed; subject to pro rata increase or decrease. |
| Credit Monitoring | one year | No claim needed; activation code on the Postcard Notice; live after final approval. |
| Injunctive relief | additional security measures | Krispy Kreme is implementing them; no cash value. |
An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.
Deadline and payout
- Claim deadline: (passed).
- Opt-out and objection deadline: .
- Final approval hearing: .
- Final approval granted: .
Payout. Award payments were sent out on September 14, 2026; electronic payments or paper checks may take a few days to arrive.
The administrator: “Award payments were sent out on Monday, September 14, 2026.”
Filing and payment
- Claims closed on June 22, 2026 and the administrator is not accepting late claims.
- Claims were filed at www.krispykremedatasettlement.com with the Unique ID and PIN printed on the Postcard Notice, or by mail to PO Box 2047, Portland, OR 97208-2047.
- Credit monitoring needs no claim: use the activation code on the Postcard Notice, or contact the administrator if you lost it.
Official site: krispykremedatasettlement.com. Phone: 1-877-239-1879. Mail: Krispy Kreme Data Incident Settlement Administrator, PO Box 2047, Portland, OR 97208-2047.
The breach, and what to do today
Krispy Kreme discovered on November 29, 2024 that people’s private information had been accessed or taken without permission. Krispy Kreme has not said who did it.
What was exposed: names; dates of birth; Social Security numbers; financial account access information.
A settlement pays for what already happened. The data is still out there, so do these now:
- Freeze your credit.In the US it’s free at Equifax, Experian and TransUnion, and no one can open credit in your name while it’s on. Lift it for a day when you apply for credit yourself.
- Get an IRS Identity Protection PIN.It stops anyone filing a tax return in your name with your Social Security number. Request one at irs.gov/ippin.
- Watch your statements.Look for small charges you don’t recognise and report them to your bank. Ask for a new card if a full card number leaked.
- Distrust messages about Krispy Kreme and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.
To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.
Not published yet
The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:
- How many people are in the settlement.
Questions
Is the Krispy Kreme data breach settlement legit?
Yes. It is In re: Krispy Kreme Data Breach Litigation, case 3:25-cv-00434-MOC-SCR, in the US District Court for the Western District of North Carolina. A court-appointed settlement administrator runs it for the court, and the only official site is krispykremedatasettlement.com.
Who qualifies for the Krispy Kreme settlement?
Living individuals residing in the United States who were sent a notice of the Data Incident saying their private information may have been impacted.
How much will I get from the Krispy Kreme settlement?
Up to up to $3,500 per Settlement Class Member for losses you can prove, or estimated $75 as a cash payment without receipts. The total settlement is $1,616,760. Final amounts depend on how many valid claims there are.
What is the deadline for the Krispy Kreme settlement?
The claim deadline was 22 June 2026. It has passed.
When will the Krispy Kreme settlement pay out?
Award payments were sent out on September 14, 2026; electronic payments or paper checks may take a few days to arrive.
Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.
Sources
Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.
- Krispy Kreme Data Security Settlement: home and current status, Settlement Administrator, read 7 Nov 2026: fund, data types, deadlines, final approval July 30, 2026, payments September 14, 2026.
- Krispy Kreme Data Security Settlement: FAQ, Settlement Administrator, read 7 Nov 2026: benefits, postcard notice March 25, 2026, contacts, hearing.
- Krispy Kreme Data Security Settlement: documents, Settlement Administrator, read 7 Nov 2026: Final Approval Order and other court papers listed.
- Postcard Notice (archived copy of the site's PDF), Settlement Administrator via Internet Archive, read 7 Nov 2026: case number, mail ID, activation code, benefit amounts.
- Claim instructions and login (archived), Settlement Administrator via Internet Archive, read 7 Nov 2026: Unique ID and PIN required; full case number 3:25-cv-00434-MOC-SCR; admin email.