Krispy Kreme $1.6M Data Breach Settlement, Claim $75 to $3,500 Before June 22 — In re: Krispy Kreme Data Security Litigation, Case No. 3:25-cv-00434

The Krispy Kreme data breach settlement is a $1,616,760 class action where eligible current and former employees and their family members who received a breach notice can claim up to $3,500 in documented losses — or $75 with no paperwork — by filing before June 22, 2026. Krispy Kreme confirmed that attackers stole the personal information of over 160,000 individuals in a November 2024 cyberattack, with the vast majority of those affected being current and former employees and members of their families. If you got a breach notification letter, your deadline is 27 days away.

Krispy Kreme Data Breach Settlement — Key Facts

Field	Detail
Settlement Amount	$1,616,760
Claim Deadline	June 22, 2026
Opt-Out / Objection Deadline	June 6, 2026
Who Qualifies	Individuals sent a notice by Krispy Kreme that their private information may have been impacted by the November 2024 breach
Estimated Class Size	161,676 individuals
Option A — Documented Losses	Up to $3,500 per person (with supporting documentation)
Option B — Alternate Cash	Estimated $75 per person (no documentation required)
Credit Monitoring	1 year free — automatic, no claim form needed
Proof Required	Yes for Option A; No for Option B
Settlement Status	Preliminary approval granted March 5, 2026
Court & Case Number	U.S. District Court, W.D.N.C. — Case No. 3:25-cv-00434-MOC-SCR
Judge	Hon. Max O. Cogburn, Jr.
Specific Law Alleged	Negligence; breach of implied contract; failure to implement reasonable cybersecurity measures
Settlement Administrator	Administrator — KrispyKremeDataSettlement.com — (877) 239-1879
Official Claim Website	KrispyKremeDataSettlement.com
Final Approval Hearing	July 6, 2026, 9:30 AM, Western District of North Carolina
Expected Payment Date	Approximately 75 days after final approval
Last Updated	May 26, 2026

Where Does the Krispy Kreme Data Breach Settlement Stand Today?

• The Settlement Preliminary Approval Order was entered March 5, 2026.
• The opt-out and objection deadline is June 6, 2026 — just 11 days from today.
• The claim filing deadline is June 22, 2026 — 27 days away. Do not wait.
• The Final Approval Hearing is scheduled for July 6, 2026. Payments will go out approximately 75 days after the court grants final approval.

Who Is Krispy Kreme and Why Are They Facing a Data Breach Settlement?

Krispy Kreme employed 22,800 people in 40 countries as of December 2023 and operates 1,521 shops and 15,800 points of access, along with four Doughnut Factories in the United States and 37 internationally. As a large employer, Krispy Kreme held the kind of sensitive employee data — Social Security numbers, payroll records, health insurance information, and financial account details — that makes it an attractive ransomware target.

The 46-page class action complaint alleged that Krispy Kreme not only failed to adequately protect employee data but also failed to encrypt or redact the highly sensitive information stored in its systems. That allegation — that the data sat unencrypted — is what gives this case particular weight. Krispy Kreme denies all wrongdoing but agreed to settle to avoid the cost and uncertainty of continued litigation.

What Did the November 2024 Krispy Kreme Ransomware Attack Expose?

⚠️ June 22 claim deadline is 27 days away — file now at KrispyKremeDataSettlement.com

Krispy Kreme detected unauthorized activity on its IT systems on November 29 and disclosed the incident, along with disruptions to its online ordering, in an SEC filing on December 11, 2024. The Play ransomware group claimed responsibility and stated they had stolen 184 gigabytes of sensitive information. When Krispy Kreme refused to pay the ransom, the cybercriminals leaked the stolen documents on the dark web in December 2024.

The affected data includes highly sensitive financial information as well as names, Social Security numbers, dates of birth, driver’s licenses or state ID numbers, financial account information, financial account access information, credit or debit card information, passport numbers, digital signatures, biometric data, USCIS or Alien Registration Numbers, US military ID numbers, health insurance information, and medical or health information. The type of information accessed varied by individual.

Krispy Kreme finished a months-long investigation on May 22, 2025, and determined that personal information was stolen from 161,676 people. The firm’s annual report estimated that the incident cost it $11 million in lost revenue.

For comparison with other recent employee data breach cases, see our earlier coverage of the Krispy Kreme $1.6M data breach settlement filing details and how the settlement structure was built. For a similar healthcare-adjacent case with the same June 2026 window, our Onsite Mammography $2.53M data breach settlement guide breaks down an identical two-option claim structure with an August 2026 deadline.

If you worked at Krispy Kreme, received a breach notification letter, or are a family member of a current or former Krispy Kreme employee who was notified, this settlement may directly affect you.

Related article: How to Read a Credit Report? And Use It to Protect Your Financial Future

Who Qualifies for the Krispy Kreme Data Breach Settlement?

Here is exactly how to know if this settlement covers you.

You qualify if:

• You were sent a notice from Krispy Kreme Doughnut Corporation informing you that your private information may have been impacted in the November 2024 data breach
• You are a current or former Krispy Kreme employee whose personal, financial, or health information was stored in the systems accessed by the Play ransomware group
• You are a family member of a current or former Krispy Kreme employee who received a breach notification

You do NOT qualify if:

• You never received a breach notification from Krispy Kreme about the November 2024 incident
• You are a current director, officer, or agent of Krispy Kreme Doughnut Corporation or any of its subsidiaries or affiliates
• You are a governmental entity or a judge presiding over this matter

Krispy Kreme Employees Outside North Carolina — Are You Still Covered?

The settlement class covers individuals in the United States who were sent a notice of the data incident indicating that their private information may have been impacted. Because the case is filed in federal court under nationwide class certification, coverage is not limited to North Carolina residents. Krispy Kreme reported the data breach to regulators in Maine, Texas, Vermont, South Carolina, and Massachusetts — confirming that affected employees span the country. Wherever you live, if you received the notice letter, you are included.

If you are unsure whether you qualify, contact the settlement administrator at (877) 239-1879 or email [email protected].

If you are unsure whether you qualify for the Krispy Kreme data breach settlement, a free consultation with a data privacy attorney can help you assess your situation before the June 22, 2026 deadline.

How Much Can Krispy Kreme Settlement Class Members Recover? Up to $3,500 Per Person

Krispy Kreme Settlement Option A — Up to $3,500 With Documented Proof

Class members who can document losses related to fraud or identity theft as a result of the data breach can claim up to $3,500 per person. Supporting documentation may include telephone records, correspondence, emails, or receipts.

Qualifying documented losses include:

• Fraudulent charges on financial accounts traceable to the breach
• Costs to place or lift credit freezes with credit bureaus
• Identity protection or credit monitoring services you paid for out of pocket
• Professional fees, notary charges, or other out-of-pocket expenses directly tied to addressing the breach
• Lost time dealing with breach-related fraud or identity theft issues (with appropriate documentation)

Krispy Kreme Settlement Option B — Estimated $75, No Documentation Needed

Class members who do not have documented losses can receive an estimated $75 alternate cash payment with no documentation required. This amount is an estimate — the actual amount depends on how many valid claims are filed. If fewer people file, the pro rata payment rises. If more people file, it drops. File as soon as possible to lock in your spot.

One Year of Free Credit Monitoring — No Claim Form Needed

One year of credit monitoring will be available for any eligible class member regardless of whether they file a claim. Given that Social Security numbers, financial account numbers, passport numbers, and biometric data were all potentially stolen, activating this monitoring right away is worth doing even if you choose not to file a cash claim.

Given the breadth of data exposed — including biometric data, military IDs, and USCIS numbers — the exposure risk for affected individuals is especially long-lasting. Some of these data types cannot be changed. Keep monitoring your accounts and credit reports for years, not just months.

Pro rata cash payments may be taxable — check with a tax professional if your payment exceeds $600.

How to File Your Krispy Kreme Data Breach Settlement Claim — Step by Step

⚠️ Claim deadline: June 22, 2026 — file now at KrispyKremeDataSettlement.com

1. Find your Unique ID and PIN from the breach notification letter Krispy Kreme mailed or emailed to you. All claims require the unique ID and PIN from the settlement notice the class member received. Without these, you cannot file online. Call (877) 239-1879 if you cannot locate them.
2. Visit KrispyKremeDataSettlement.com — the official settlement website. You can also mail a paper claim form to: Krispy Kreme Data Incident Settlement Administrator, PO Box 2047, Portland, OR 97208-2047.
3. Choose your option — Option A (up to $3,500 with documentation) or Option B (estimated $75, no proof needed). You may only select one.
4. Upload supporting documentation if choosing Option A — bank statements, receipts, invoices, or other records showing unreimbursed losses directly tied to the breach.
5. Submit your claim online or postmark your paper form no later than June 22, 2026.
6. Save your confirmation number. The administrator will contact you if additional information is needed.

Takes about 10 minutes to complete online.

Should Krispy Kreme Class Members Opt Out or Object Before June 6, 2026?

What Does Opting Out of the Krispy Kreme Data Breach Settlement Mean for Your Rights?

Opting out of the settlement means giving up your right to any payment or credit monitoring from this case, but keeping your right to sue Krispy Kreme separately. For most people, opting out makes no practical sense unless you have documented losses that significantly exceed $3,500 and have already spoken with a data privacy attorney about an individual claim. The opt-out deadline is June 6, 2026 — already just 11 days away.

How to Object to the Krispy Kreme Settlement Before June 6, 2026

Objecting means telling the court you believe the settlement is unfair while remaining in the class. You can still file a claim form even if you object. The Final Approval Hearing is scheduled for July 6, 2026 at 9:30 AM in the U.S. District Court for the Western District of North Carolina before Judge Hon. Max O. Cogburn, Jr. Written objections must be postmarked by June 6, 2026.

If you are considering opting out or objecting, speaking with a data privacy attorney before June 6, 2026, is strongly recommended.

Krispy Kreme Data Breach Settlement — Key Dates, 2026

Milestone	Date
Play ransomware attack detected	November 29, 2024
Krispy Kreme SEC filing discloses incident	December 11, 2024
Play gang leaks stolen data on dark web	December 2024
Investigation concluded; 161,676 people confirmed affected	May 22, 2025
Breach notification letters sent to class members	June 2025
Class action complaint filed	June 21, 2025
Preliminary approval order entered	March 5, 2026
Opt-Out / Objection Deadline	June 6, 2026
Claim Filing Deadline	June 22, 2026
Final Approval Hearing	July 6, 2026, 9:30 AM
Expected Payment Date	TBD — approximately 75 days after final approval

Krispy Kreme Data Breach Settlement — Frequently Asked Questions, No. 3:25-cv-00434

Is there a class action settlement against Krispy Kreme for the 2024 data breach right now?

 Yes. A $1,616,760 settlement has been reached in In re: Krispy Kreme Data Security Litigation, Case No. 3:25-cv-00434-MOC-SCR, in the U.S. District Court for the Western District of North Carolina. The preliminary approval order was entered March 5, 2026.

Do I need to do anything right now to be included in the Krispy Kreme settlement?

 One year of credit monitoring will be available for any eligible class member regardless of whether they file a claim. However, to receive any cash payment — either the $75 alternate option or up to $3,500 for documented losses — you must submit a claim form by June 22, 2026. If you do nothing, you get no money.

When will Krispy Kreme settlement payments be sent? 

The settlement administrator will issue payments to approved claimants approximately 75 days after the court grants final approval of the settlement. The Final Approval Hearing is July 6, 2026, so payments could begin in September or October 2026, assuming no appeals.

What happens if I missed the Krispy Kreme settlement claim deadline? 

If you do not file by June 22, 2026, you will not receive any cash payment from this settlement. You will still be bound by the settlement’s release of claims against Krispy Kreme if you do not also opt out by June 6.

Can I file my own lawsuit against Krispy Kreme instead of joining the settlement?

 Yes, but only if you formally opt out by June 6, 2026. If you do nothing or submit a claim form, you release all related claims against Krispy Kreme from the settlement period. Individual data breach lawsuits are expensive and complex — consult a data privacy attorney before opting out.

What specific laws does Krispy Kreme allegedly violate?

 The complaint asserts negligence, breach of implied contract, and failure to implement reasonable cybersecurity standards to protect personally identifiable information, in violation of applicable federal and state consumer protection laws. Krispy Kreme denies all these allegations.

How much could Krispy Kreme employees actually receive from the settlement?

 Class members with no documentation can receive an estimated $75. Those with receipts, bank statements, or other records showing fraud or identity theft costs tied to the breach can claim up to $3,500. The $75 estimate is pro rata — the actual amount depends on how many valid claims are submitted. File before the June 22 deadline to maximize your share.

Will my Krispy Kreme settlement payment be reported to the IRS? 

Cash payments from data breach settlements may be taxable depending on the type and amount. Consult a tax professional if your payment exceeds $600.

Sources Used in This Krispy Kreme Data Breach Settlement Article

• Official Settlement Website — KrispyKremeDataSettlement.com, 2026: https://krispykremedatasettlement.com
• Maine Attorney General Data Breach Filing — Krispy Kreme Doughnut Corporation, 2025

Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against the official settlement website at KrispyKremeDataSettlement.com, BleepingComputer, The Record, Infosecurity Magazine, and the Maine Attorney General filing on May 26, 2026. Last Updated: May 26, 2026.

This article is for informational purposes only and does not constitute legal advice. For advice specific to your situation, consult a qualified attorney.