Data breach settlements open now: check if you're owed

What a data breach settlement actually pays for

A data breach settlement is money a company agrees to pay after it exposed customer information — names, emails, Social Security numbers, health records, payment cards. Instead of fighting thousands of lawsuits, the company funds a single pool that gets split among affected consumers. Courts approve the deal, an administrator mails or emails notices, and eligible people file claims.

Payouts almost always come in two tiers. The flat cash tier (often $25–$100) requires no proof beyond confirming you were in the breach. The documented losses tier reimburses actual costs — fraudulent charges you paid back, credit-freeze fees, hours spent on the phone with your bank at a set hourly rate (often $20–$25/hr, capped at 4–10 hours). A few settlements also include free credit monitoring for 1–3 years, which has real value even if you don't take cash.

If you're new to how these funds are built and distributed, our primer on what a class action lawsuit is walks through the mechanics.

Notable breach settlements open in 2026

The list below reflects settlements Owed is currently tracking with open claim windows. Deadlines and fund sizes come from the administrator sites — always confirm on the official page before filing. New breaches settle every month, so treat this as a snapshot, not a complete list.

The largest active breach fund right now is the Bank of America data breach settlement, which pays a flat $50 with no proof and up to $600 for documented losses. Smaller health-data and biometric cases (like Fitbit and Instagram's biometric case) technically aren't 'breaches' in the hacking sense but follow the same claim mechanics.

Who actually qualifies

Eligibility for a data breach settlement is defined narrowly by the court in what's called the class definition. Usually it's: everyone whose personal information was compromised in the specific incident during a specific date range (the 'class period'). If the company sent you a notice letter — the ones that start 'We are writing to inform you of a data security incident' — you're almost certainly in the class.

You may qualify even if you never got a letter. Companies mail to their last known address; if you moved, or if the breach was discovered years later, notices get lost. The administrator's website usually has a lookup tool where you enter your name and email or the last four of your Social to check. Our guide on how to check if you're part of a class action shows the exact steps.

You do not need to have suffered identity theft to qualify. Exposure alone is enough for the no-proof tier. Fraud or documented spending unlocks the higher tier.

How to file a breach claim step by step

Filing takes 5–15 minutes for a no-proof claim, longer if you're submitting receipts. Everything happens on the settlement administrator's website — never file through an email link without verifying the URL matches the official case name.

1. Find the official administrator URL (linked from classaction.org or the company's own breach notice page).
2. Locate your Notice ID or Class Member ID from the mailed/emailed notice if you have one — it auto-populates your eligibility.
3. Choose your tier: flat cash (fastest) or documented losses (higher payout, requires uploads).
4. For documented losses, upload bank statements, credit-freeze receipts, or a time log showing hours spent resolving fraud.
5. Pick your payment method — direct deposit is fastest, checks take 4–8 weeks longer.
6. Save your claim confirmation number. Screenshot it. Admins lose emails.
7. Wait. Payments typically arrive 6–18 months after the deadline once the court finalizes the deal.

Red flags: how to spot fake settlement emails

Scammers love breach settlements. The playbook: send an email that looks like an administrator notice, link to a lookalike domain, and harvest Social Security numbers or bank credentials on a fake claim form. Real settlements never work this way.

Legitimate breach notices and claim sites will never: ask for your full Social Security number upfront (only the last 4 for lookup, at most), demand a fee to file, threaten that your claim will be 'denied' if you don't act in 24 hours, or send you to a domain that doesn't match the case name. The administrator is usually a known firm — Epiq, Kroll, Angeion, JND, Verita, Rust, Simpluris.

If in doubt, cross-check the settlement on classaction.org's open settlements list. The URLs there link to real administrator sites. You can also look up the case on the federal court's PACER-adjacent public search or CourtListener.

Realistic payout expectations

Marketing headlines love the big numbers ('$425 million settlement!') but individual payouts are much smaller. The fund pays lawyers' fees (typically 25–33%), administrator costs, incentive awards to lead plaintiffs, and then splits what's left among claimants — sometimes tens of millions of people.

For breach cases specifically: expect $25–$100 for the no-proof tier if you file on time, and $200–$2,000 for documented losses if you have solid receipts. Cases with capped funds that get flooded with claims pay pro rata — meaning your $50 promise might shrink to $18 if too many people claim. Cases where fewer people file often pay the full amount or even more (the administrator redistributes leftover funds).

Our deep dive on how much no-proof settlements actually pay breaks down historical averages by case type. For a full walkthrough of the mechanics behind these numbers, see how a class action lawsuit works.

Get notified when new breach settlements open

New breach settlements are announced weekly. Tracking them manually means checking classaction.org, TopClassActions, and half a dozen administrator sites — and still missing the ones that never make headlines. Owed does this monitoring automatically. Members complete a 9-question profile (email addresses, phone numbers, past employers, services used), and the app matches them against every settlement as it opens.

You can also see what you're owed in about 30 seconds — the tool checks your history against currently open cases, including breach settlements. If you'd rather browse manually, the full settlements directory lists everything currently active with filing links.

For a broader look at where to find open cases, see how to find open class action settlements and who's eligible for a class action settlement. This article is general information, not legal advice.

Glossary

Class period

The specific date range during which the breach occurred or your data was exposed. If you weren't a customer or user during this window, you're not in the class.

Administrator

The independent firm (Epiq, Kroll, Angeion, etc.) hired by the court to send notices, review claims, and mail payments.

Pro rata

When claims exceed the fund's capacity, each valid claim gets a proportional share — so your $50 flat payout can shrink.

Notice ID

A unique code on your mailed or emailed breach notice that pre-fills your eligibility on the claim form.

Documented losses tier

The higher payout track that reimburses actual fraud, credit-freeze fees, or time spent — requires receipts or a signed time log.

Objection deadline

The date by which class members can formally object to the settlement terms in court. Rarely used by consumers.

FAQ