Krispy Kreme $1.6M Data Breach Class Action Settlement

Individuals who received a notice that a data breach involving Krispy Kreme may have affected their private information could qualify to submit a claim for up to $3,500 and/or credit monitoring from a class action settlement. The cybersecurity incident compromised the data of an estimated 161,676 current and former employees.

Krispy Kreme Doughnut Corp. agreed to pay $1,616,760 to settle a class action lawsuit related to a data breach discovered on Nov. 29, 2024. The plaintiffs claim that unauthorized parties accessed or acquired sensitive personal information, including names, dates of birth, Social Security numbers and financial account access details.

Who can file a claim for a data breach payout?

Class members are individuals in the United States who received a notice indicating the Krispy Kreme data breach may have impacted their private information.

How much will the Krispy Kreme settlement payments be?

Class members have the following benefit options:

• Cash payment A – Documented losses: Class members can claim up to $3,500 in documented losses related to fraud or identity theft resulting from the data breach. Documentation is required.
• Cash payment B – Alternate cash payment: Class members who do not submit a documented losses can submit a claim to receive a cash payment estimated at $75. The settlement administrator will determine the final payment amount by total number of claims filed.
• Credit monitoring: All class members can receive one year of free credit monitoring without submitting a claim form. The settlement administrator sent activation codes with the settlement notice. Those who did not receive one or lost theirs should contact the administrator.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: Krispy Kreme Data Incident Settlement Administrator, PO Box 2047, Portland, OR 97208-2047

The claim deadline is June 22, 2026.

Required proof and claim information

• All claims require the unique ID and PIN from the settlement notice the class member received.
• Documented losses claims require supporting documentation, which may include receipts, invoices, bank or credit card statements showing unreimbursed fees and fraudulent charges and other proof of identity theft or fraud that occurred due to the data breach.

Payout options

• PayPal
• Venmo
• Zelle
• ACH
• Paper check mailed to the address provided

$1.62 million Krispy Kreme settlement fund

The $1,616,760 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $538,920
• Attorneys' expenses: Reasonable costs to be presented to the court for approval
• Service awards to class representatives: Up to $1,500 each
• Credit monitoring: Cost determined by number of eligible class members
• Payments to approved claimants: Remainder of the fund

Important dates

• Exclusion deadline: June 6, 2026
• Deadline to file a claim: June 22, 2026
• Final approval/fairness hearing: July 6, 2026

When is the Krispy Kreme data breach settlement payout date?

The settlement administrator will issue payments to approved claimants approximately 75 days after the court grants final approval of the settlement.

Why did Krispy Kreme settle this lawsuit?

The class action lawsuit alleged a data breach discovered on Nov. 29, 2024, resulted in unauthorized access to sensitive personal information. The plaintiffs claimed Krispy Kreme Doughnut Corp. failed to adequately protect private data.

Krispy Kreme denies the allegations but agreed to settle to avoid the uncertainty and cost of ongoing litigation and a possible trial.

Sources

1. Class notice
2. Settlement website
3. Claim form
4. Settlement agreement