Data breach settlement cash or credit monitoring: which to pick?

The three ways breach settlements package cash and monitoring

Not every settlement makes you choose. Read the notice carefully, because the structure decides your strategy:

• Either/or. You pick free credit monitoring or an "alternative cash payment" (the Equifax model). The cash pool is often capped, so the more people who choose cash, the smaller each payment gets.
• Both. Every class member gets a flat payment and monitoring — the newer, friendlier model. Our Bank of America page is an example: $50 flat, two years of monitoring, and reimbursement of documented losses up to $600, no proof needed for the flat part.
• Tiered. A flat or pro-rata payment for everyone, a higher tier for people with documented out-of-pocket losses, sometimes an hourly rate for time spent dealing with the breach, plus monitoring for anyone who wants it.

Whatever the structure, the money comes from the settlement administrator, not from the company that was breached, and it arrives months after the claim deadline. More on that in our data breach settlements guide.

What credit monitoring is actually worth

Settlement notices love to quote the "retail value" of monitoring, and the number is real in a narrow sense: Experian's three-bureau IdentityWorks Premium plan lists at $24.99 a month, so two years is roughly $600 at sticker price. But the defendant pays a fraction of that wholesale, and you only capture the value if you would otherwise have paid for it.

What monitoring does: it alerts you when something changes on your credit file (new account, hard inquiry, address change) and usually bundles identity-theft insurance and a restoration service that helps you undo fraud. What it doesn't do: stop anyone from opening an account in your name. The free tools do that job better:

• Credit freeze — free at Equifax, Experian and TransUnion, lasts until you lift it, and blocks new credit accounts entirely (FTC guidance).
• Fraud alert — free, one year (renewable) or seven years if you've filed an identity-theft report; tells lenders to verify it's really you.
• Free credit reports — from AnnualCreditReport.com; check them for accounts you don't recognize.

So the honest value of settlement monitoring is: convenience plus the restoration service. That is worth something, especially if your Social Security number leaked — just not "hundreds of dollars" to someone who already has a freeze in place.

When the cash wins

Pick the cash when any of these are true:

• You already have monitoring — from an earlier breach (many people have three or four overlapping enrollments by now), your bank, a credit card, or an employer benefit.
• You've frozen your credit at all three bureaus and you'd rather not babysit another dashboard.
• The cash is a flat amount for every claimant rather than a share of a capped pool. Flat money doesn't shrink.
• The monitoring offered is single-bureau only, or shorter than a year.

If the settlement gives you both (flat cash and monitoring), there's no trade-off: claim the cash, enroll in the monitoring if you want it, and spend your real effort on the documented-loss section below.

When the monitoring wins (the Equifax lesson)

The 2017 Equifax breach exposed 147 million people's information and produced the most famous either/or choice in settlement history: free credit monitoring, or an alternative cash payment of "up to $125" for people who already had monitoring. So many people chose cash that the FTC publicly urged claimants to switch: the cash pool was capped at $31 million, which meant payments would be "far less than $125," while the monitoring came with identity-theft insurance and restoration services the agency valued at hundreds of dollars.

The general rule that falls out of that episode: when the cash is a share of a capped pool and the settlement is big and well-publicized, the monitoring is usually the better deal — unless you truly don't need it. Monitoring also wins when your Social Security number or driver's license number leaked (rather than just an email address), when you have no freeze in place, or when the package includes multi-year restoration help you'd struggle to buy on your own. Equifax claimants, for example, kept access to free identity-restoration services through January 2029 even if they never filed a claim.

Documented-loss claims: the part most people skip

Flat payments are small because almost everyone qualifies. Documented-loss claims are where the real money is, and claim rates for them are low because people assume they have nothing to document. Check again — the settlements usually accept losses that are "fairly traceable" to the breach, such as:

• Unreimbursed fraudulent charges, bank fees or overdrafts caused by the breach.
• Costs of credit reports, credit monitoring you bought yourself, notary fees, postage, and certified mail.
• Professional fees (accountant, attorney) to fix identity theft, and sometimes travel to a bank or police station.
• Time spent — often a few hours at a set hourly rate, backed by a short description of what you did.

Caps vary: the Bank of America settlement caps documented losses at $600 per person; some breaches allow thousands, and the Equifax settlement separately paid identity-theft and fraud claims for years after the deadline. Our proof guide covers what documents count.

1. Pull the statements for the months after the breach notice and highlight every charge or fee you didn't authorize.
2. List each loss with a date, amount and one-line explanation of why it traces to the breach.
3. Attach the document for each line (statement page, receipt, police or FTC report, monitoring invoice).
4. Add time spent, with a brief description of what you did and roughly how long it took.
5. Sign the attestation and file before the deadline — then keep copies in case the administrator asks for more.

A 60-second checklist

Run through these before you file:

• Is it either/or, or both? (Read the "Benefits" section of the notice.)
• Is the cash flat or a share of a capped fund?
• Do I already have monitoring or a freeze?
• Did I lose money or hours? If yes, the documented-loss claim is worth more than either option above.
• Did I freeze my credit anyway? It's free and it's the strongest protection.

Keep your expectations realistic on timing: breach settlements often take 6–18 months from deadline to payment because the claims review is heavy. Our guide on how long settlement checks take explains the stages.

How Owed handles breach claims

Owed matches you against open data breach settlements (along with privacy, fee and purchase settlements), pre-fills the administrator's form, and tracks the claim from filed to approved to paid — free. For proof-heavy documented-loss claims, the optional concierge service assembles the statements and receipts with you and is charged only after you're paid; self-filed claims are never clipped. Browse current examples in the settlements directory, or check what you're owed — it takes about 30 seconds.

Glossary

Credit monitoring

A service that watches one or all three credit bureaus and alerts you to new accounts, inquiries or changes; often bundled with identity-theft insurance and restoration help.

Credit freeze

A free lock on your credit file at Equifax, Experian and TransUnion that stops new credit accounts from being opened until you lift it.

Alternative cash payment

Money offered instead of credit monitoring to people who already have coverage; often paid from a capped pool and reduced pro rata.

Documented losses

Out-of-pocket costs and unreimbursed fraud you can prove with statements or receipts, reimbursed up to a per-person cap.

Pro rata

A payout that is divided among all valid claims, so it shrinks as more people file.

Identity restoration

A service that works the phone calls, disputes and paperwork to undo fraud committed in your name.

FAQ