Christian Dior Data Breach Settlement, Are You Eligible for Up to $1,600?

If you received a notice from Christian Dior about the January 2025 data breach, you may qualify for cash payments and two years of free credit monitoring through a class action settlement. Christian Dior Inc. agreed to settle a lawsuit alleging it failed to protect customer data after an unauthorized party accessed a Dior database. The claim deadline is May 25, 2026. You must file a claim form to receive any benefit — doing nothing means you get nothing.

Quick Facts

FieldDetail
Settlement AmountTBD — Dior pays attorneys’ fees ($400,000) and benefits separately
Claim DeadlineMay 25, 2026
Who QualifiesAll U.S. individuals who received notice from Dior that their personal information was impacted in the January 2025 data incident
Payout Per PersonUp to $1,500 (documented losses) + $100 flat payment (SSN impacted)
Proof RequiredYes — for documented losses; No — for $100 flat payment and credit monitoring
Settlement StatusProposed — awaiting final court approval
AdministratorSimpluris, Inc.
Official Websitecddatasettlement.com

Current Status and What Happens Next

  • Proposed settlement — the Court has not yet decided whether to approve it. Notices went out to class members starting March 11, 2026.
  • All deadlines fall on May 25, 2026 — this is the same date to file your claim, opt out, or submit an objection to the Court.
  • Final approval hearing: June 22, 2026 at 10:30 a.m. ET — the hearing will take place via Zoom (Meeting ID: 111-475-745). Payments go out after the court grants final approval and resolves any appeals.

What Is the Christian Dior Data Breach Lawsuit About?

In January 2025, an unauthorized party gained access to a Christian Dior Inc. database containing personal information about Dior customers across the United States. Dior did not discover the breach until May 7, 2025 — more than three months after it occurred on January 26, 2025. The company then waited until July 18, 2025, to notify affected customers, nearly six months after the initial incident.

Plaintiff Michael Toikach and six other named plaintiffs filed a class action lawsuit alleging Dior failed to implement reasonable data security measures and stored sensitive customer information in an unprotected format. The lawsuit claims this left customers exposed to an elevated risk of identity theft and fraud. The case, Michael Toikach, et al. v. Christian Dior, Inc., Case No. CACE 25-18776, is pending in the Circuit Court for Broward County, Florida.

Dior denies all wrongdoing. The company agreed to settle to avoid the cost and uncertainty of continued litigation.

Who Is Eligible to File a Claim?

The settlement class is defined as all U.S. individuals who received a notice from Christian Dior Inc. — by mail or email — stating that their personal information may have been impacted in the January 2025 data incident. If you received that notice, Dior’s records indicate you may be a class member.

  • You may qualify if you received a notification letter or email from Christian Dior Inc. about the January 2025 data breach.
  • You may qualify if the compromised information includes your name, contact details, address, date of birth, or government ID number.
  • You may qualify for an extra $100 flat payment if Dior’s notice to you specifically indicated that your Social Security number was impacted — these are called Tier 1 class members.
  • You do not qualify if you are a director, officer, or legal representative of Christian Dior Inc.
  • You do not qualify if you validly opt out of the settlement before May 25, 2026.
  • You do not qualify for documented loss reimbursement if your out-of-pocket expenses occurred outside the window of July 18, 2025 – March 11, 2026.

If you are unsure whether you received a notice, check your mail and email — including spam folders — for correspondence from Christian Dior or the Dior Data Incident Settlement Administrator. You can also contact Simpluris at (888) 836-1708 or [email protected].

Related article: Google Play Store Subscription $5M Settlement, Do California Residents Qualify for a Payment?

Christian Dior Data Breach Settlement, Are You Eligible for Up to $1,600

How Much Can You Receive?

The settlement offers three separate types of benefits. You can claim more than one if you qualify.

Benefit 1 — Two Years of Free Credit Monitoring All class members can enroll in two years of CyEx Financial Shield Complete credit monitoring at no cost. The service includes monitoring for fraud and identity theft, unauthorized financial transactions, $1 million in financial fraud insurance, and access to a fraud resolution agent.

Benefit 2 — Cash Payment for Documented Losses (up to $1,500) If you suffered actual, documented out-of-pocket expenses or financial losses directly resulting from fraud or identity theft connected to the Dior breach, you can claim reimbursement up to $1,500. Losses must have occurred between July 18, 2025, and March 11, 2026.

Eligible documented expenses include:

  • Losses from identity theft or fraud
  • Fees for credit reports, credit monitoring, or freezing/unfreezing your credit
  • Costs to replace a government-issued ID
  • Postage costs to contact banks or financial institutions by mail

You must submit receipts, bank statements, or similar documentation. Personal declarations or affidavits alone are not enough — but you may include them to provide additional context.

Benefit 3 — $100 Flat Cash Payment (Tier 1 members only) If your Social Security number was specifically impacted in the breach, you can claim a one-time $100 flat cash payment with no proof required. Simply check the appropriate box on the claim form. Check your notice letter — it will indicate whether you are a Tier 1 class member.

Maximum possible benefit: A Tier 1 class member with $1,500 in documented losses could receive up to $1,600 in total cash plus two years of free credit monitoring.

How to File a Claim

Step 1 — Visit the official settlement website at cddatasettlement.com and click “Submit a Claim.”

Step 2 — Log in using your Unique ID and PIN from the settlement notice you received by mail or email. If you cannot find your login details, contact Simpluris at (888) 836-1708.

Step 3 — Select the benefits you want to claim: credit monitoring, documented losses reimbursement, or the $100 flat payment (Tier 1 only).

Step 4 — If you are claiming documented losses, upload your supporting documentation — receipts, bank statements, or records showing the amount and nature of your expenses.

Step 5 — Review your claim form carefully, then submit it online before May 25, 2026. Alternatively, download the claim form and mail it to: Dior Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958. Mailed forms must be received (not just postmarked) by May 25, 2026.

Step 6 — Save your claim confirmation number or take a screenshot for your records.

Estimated time to complete: 5–10 minutes for basic claims; 15–20 minutes if uploading documentation for documented losses.

Important Deadlines and Dates

MilestoneDate
Data Breach OccurredJanuary 26, 2025
Dior Discovered the BreachMay 7, 2025
Notification to Affected Customers BeganJuly 18, 2025
Settlement Notice Mailing to ClassMarch 11, 2026
Claim Filing DeadlineMay 25, 2026
Opt-Out DeadlineMay 25, 2026
Objection DeadlineMay 25, 2026
Final Approval HearingJune 22, 2026 at 10:30 a.m. ET (via Zoom)
Expected Payment DateTBD — after final approval and resolution of any appeals

Frequently Asked Questions

Do I need a lawyer to file a claim in this settlement? 

No. Class Counsel — Jeff Ostrow of Kopelowitz Ostrow P.A. and Mariya Weekes of Milberg PLLC — already represent all class members at no cost to you. You simply need to submit a claim form at cddatasettlement.com before May 25, 2026. You can also hire your own attorney at your own expense if you prefer.

Is this Christian Dior settlement legitimate? 

Yes. The settlement is a court-supervised class action, Michael Toikach, et al. v. Christian Dior, Inc., Case No. CACE 25-18776, pending in the Circuit Court for Broward County, Florida. The official settlement website is cddatasettlement.com, administered by Simpluris, Inc. Always verify any settlement communication against the official website before sharing personal information.

When will I receive my payment? 

The Court will hold a final approval hearing on June 22, 2026. If the Court approves the settlement and no appeals follow, Simpluris will distribute payments after that process concludes. The timeline depends on whether anyone files an appeal. Check cddatasettlement.com for the most current payment schedule.

What if I miss the May 25, 2026 claim deadline? 

If you do not file a claim by May 25, 2026, you will not receive any cash payment or credit monitoring from this settlement. You will still be bound by the settlement’s release of claims against Dior — meaning you give up your right to sue Dior separately — unless you also opted out before the same May 25, 2026 deadline.

Will this settlement payment affect my taxes? 

Settlement payments may count as taxable income depending on how the IRS classifies the payment and your individual tax situation. A tax professional can advise you on how to report any payment you receive. The settlement administrator does not provide tax advice.

What personal information was exposed in the Dior data breach?

 The Dior database that was accessed contained customer names, contact information, mailing addresses, dates of birth, and in some cases government identification numbers. A small number of customers also had their Social Security numbers exposed. Dior confirmed that no payment card or financial account information was accessed in the breach.

Why did Dior wait so long to notify customers about the breach?

 Dior discovered the breach on May 7, 2025, more than three months after it occurred on January 26, 2025. The company then notified affected customers starting July 18, 2025 — nearly six months after the initial breach. Plaintiffs argued this delay prevented customers from taking timely steps to protect themselves. Dior has not publicly explained the reason for the notification delay.

What happens if I do nothing?

 If you do nothing, you will not receive any payment or credit monitoring benefit. You also give up your legal right to sue Dior individually about the issues this settlement covers. To protect your rights, you must either file a claim, opt out, or object — all by May 25, 2026.

Sources and References

  1. Official Settlement Website — cddatasettlement.com
  2. Settlement FAQ — cddatasettlement.com
  3. California Attorney General — Christian Dior Couture Data Breach Notice (July 18, 2025)

If your personal data was also exposed in a separate corporate cyberattack, you may want to review Cadence Bank’s $5.25 million MOVEit data breach settlement claims. Consumers who had their data exposed in the 2024 AT&T breaches can also check eligibility under the AT&T $177 million data breach settlement.

Last Updated: March 14, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.

About the Author

Sarah Klein, JD

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah

Leave a Reply

Your email address will not be published. Required fields are marked *