RFK Racing Data Breach Settlement, Are You Eligible for Up to $2,500?

Roush Fenway Keselowski Racing LLC agreed to settle a class action lawsuit after a cyberattack in May 2025 exposed the personal information of current and former employees. If you received a data breach notice from RFK Racing — most likely sent in September 2025 — you may be eligible to claim up to $2,500 for documented losses or a flat $90 with no proof required. The claim deadline is May 31, 2026.

Quick Facts

Field	Detail
Settlement Amount	TBD (total fund not yet publicly confirmed)
Claim Deadline	May 31, 2026
Who Qualifies	Individuals who received a data breach notice from RFK Racing about the May 2025 incident
Payout Per Person	Up to $2,500 (with documentation) or $90 flat (no proof needed)
Proof Required	Yes (for up to $2,500); No (for $90 flat payment)
Settlement Status	Proposed — awaiting final court approval
Administrator	Simpluris
Official Website	RFKRacingDataSettlement.com

Current Status & What Happens Next

• The settlement is proposed and awaiting final court approval. A final approval hearing date has not yet been publicly confirmed — check RFKRacingDataSettlement.com for updates.
• The deadline to file a claim, opt out, or object is May 31, 2026 — all three share the same date.
• Payments will go out approximately 75 days after the court grants final approval and resolves any appeals.

What Is the RFK Racing Data Breach Lawsuit About?

Roush Fenway Keselowski Racing LLC — known as RFK Racing — is one of NASCAR’s most storied teams, based in Concord, North Carolina, and currently fielding three NASCAR Cup Series cars driven by Brad Keselowski, Chris Buescher, and Ryan Preece. On May 14, 2025, the team discovered suspicious activity on its computer systems and launched an investigation with the help of third-party forensic specialists. The investigation confirmed that unauthorized parties had accessed and copied certain files from the network.

By August 4, 2025, RFK Racing confirmed the stolen files contained highly sensitive personal information. The exposed data included names, addresses, Social Security numbers, dates of birth, driver’s license numbers, passport numbers, health insurance information, health information, financial account information, and medical information belonging to current and former employees. RFK Racing notified affected individuals in September 2025 — approximately four months after the breach first occurred.

Plaintiff Wyatt Cowley, along with additional class members, filed a class action lawsuit in the U.S. District Court for the Middle District of North Carolina, alleging that RFK Racing failed to implement adequate safeguards to protect employee data and delayed notifying affected individuals. The case is captioned Wyatt Cowley, et al. v. Roush Fenway Keselowski Racing LLC. RFK Racing denies all wrongdoing and agreed to settle to avoid the cost and uncertainty of continued litigation.

Who Is Eligible to File a Claim?

The settlement class covers all individuals in the United States who received an official data breach notification from RFK Racing about the May 2025 incident. Specifically:

• You may qualify if RFK Racing sent you a notice in September 2025 stating the May 2025 data incident may have affected your private information.
• You may qualify if you are a current or former employee of Roush Fenway Keselowski Racing LLC whose personal data — such as your Social Security number, health information, or financial account details — was stored on the company’s systems at the time of the breach.
• You may qualify if you received an identity monitoring enrollment code from RFK Racing as part of their breach notification, indicating your records were included in the affected files.
• You do not qualify if you are a current officer, director, or agent of RFK Racing, a government entity, or a judge or court staff member assigned to this case.

If you believe you qualify but did not receive a notice, or if you cannot locate your unique ID and PIN needed to file online, contact the settlement administrator by emailing [email protected] with your full name and mailing address.

Related article: Amazon Retail Wage and Hour 2M Settlement, Did You Work at Amazon Go or Amazon Fresh in Washington?

How Much Can You Receive?

The settlement offers two cash payment options plus automatic access to free credit monitoring. You must choose one cash payment option — you cannot claim both.

Credit Monitoring (All Class Members — Automatic) Every eligible class member qualifies for two years of CyEx Identity Defense Complete at no cost. This service includes real-time monitoring for identity theft and fraud, dark web scanning, and additional identity protection tools to help you stay alert to misuse of your personal information.

Cash Payment A — Documented Losses (Up to $2,500) If you suffered actual, out-of-pocket expenses directly traceable to the RFK Racing breach, you can claim reimbursement of up to $2,500. Eligible losses must have occurred between May 14, 2025 and May 31, 2026. Covered expenses include:

• Identity theft or fraud losses
• Fees for credit reports, credit monitoring services, or credit freezes
• Costs to replace government-issued IDs or documents
• Postage for breach-related correspondence with banks or agencies
• Other documented financial losses fairly traceable to the breach

You must submit third-party documentation — such as receipts, bank statements, or invoices — to support your claim. Personal declarations or affidavits alone do not qualify as sufficient proof, though you may include them alongside other documentation to provide context.

Cash Payment B — Flat Cash Payment ($90, No Proof Required) Instead of Cash Payment A, you can claim a one-time $90 flat payment simply by attesting you are a class member. No supporting documentation is required for this option. This is the fastest path if you did not experience specific out-of-pocket losses but still want to participate in the settlement.

Payments distribute approximately 75 days after the court grants final approval and any appeals are resolved. This payment timeline is similar to what affected workers received in the Ingram Micro Americas data breach settlement, where employees whose Social Security numbers were exposed also had the choice between a documented-loss payment and a simpler flat-rate option.

How to File a Claim

Step 1 — Visit the official claim portal at RFKRacingDataSettlement.com and log in using the unique ID and PIN included in the settlement notice you received from the administrator.

Step 2 — If you cannot locate your ID and PIN, email [email protected] with your full name and mailing address to request your login credentials before filing.

Step 3 — Choose your payment option: Cash Payment A (documented losses, up to $2,500) or Cash Payment B (flat $90 payment, no documentation required).

Step 4 — If you chose Cash Payment A, upload your supporting documentation — receipts, bank statements, or invoices — showing breach-related expenses incurred between May 14, 2025 and May 31, 2026.

Step 5 — Review all your information, then submit your completed claim form online by May 31, 2026. If filing by mail, download the PDF claim form from the settlement website, complete and sign it, and postmark it by May 31, 2026. Mail to: RFK Racing LLC Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958.

Step 6 — Save a copy of your submitted claim or mail receipt as confirmation for your records.

Estimated time to complete: 5–10 minutes online.

Important Deadlines & Dates

Milestone	Date
Data Breach Occurred	May 14, 2025
Breach Confirmed by RFK Racing	August 4, 2025
Affected Individuals Notified	September 2025
Lawsuit Filed	October 1, 2025
Claim Filing Deadline	May 31, 2026
Opt-Out Deadline	May 31, 2026
Objection Deadline	May 31, 2026
Final Approval Hearing	TBD — check RFKRacingDataSettlement.com
Expected Payment Date	~75 days after final approval and resolution of any appeals

Frequently Asked Questions

Do I need a lawyer to file a claim in the RFK Racing data breach settlement?

 No. Class Counsel represents all class members at no cost. Filing takes roughly 5–10 minutes online using your unique ID and PIN from the settlement notice. If you want independent legal advice, you may hire your own attorney at your own expense.

Is the RFK Racing data breach settlement legitimate?

 Yes. This is a court-supervised class action filed in the U.S. District Court for the Middle District of North Carolina. The official website is RFKRacingDataSettlement.com, administered by Simpluris. You can also reach the administrator at (833) 215-5560 or [email protected].

When will I receive my RFK Racing settlement payment? 

Payments go out approximately 75 days after the court grants final approval and resolves any appeals. The final approval hearing date has not yet been confirmed. Check RFKRacingDataSettlement.com regularly for the latest updates.

What if I missed the RFK Racing claim deadline? 

If you do not submit a valid claim by May 31, 2026, you will not receive a cash payment. Unless you formally opt out, you remain bound by the settlement and give up your right to sue RFK Racing separately over this breach.

Will my RFK Racing settlement payment affect my taxes? 

It may. Reimbursements for documented out-of-pocket losses are generally not taxable. The $90 flat payment may be treated as ordinary income by the IRS. Consult a tax professional for guidance specific to your situation.

What personal information was exposed in the RFK Racing breach? 

RFK Racing confirmed the stolen files may have contained names, addresses, Social Security numbers, dates of birth, driver’s license numbers, passport numbers, health insurance details, financial account information, and medical information. The exact data varies by individual based on what RFK Racing had on file.

What is the difference between Cash Payment A and Cash Payment B? 

Cash Payment A reimburses up to $2,500 for actual documented out-of-pocket expenses — receipts or bank statements required. Cash Payment B is a flat $90 with no documentation needed. You can only select one, so choose the option that fits your situation.

I lost my settlement notice. Can I still file a claim? 

Yes. Email [email protected] with your full name and mailing address to request your unique ID and PIN. You can also call (833) 215-5560 for assistance. Do this well before the May 31, 2026 deadline to give yourself enough time to file.

Sources & References

• RFKRacingDataSettlement.com — Official Settlement Website
• RFKRacing.com — Official Data Security Incident Notice

Also see: TurboTax Faces Multiple Class Actions — Free Filing Fraud, Data Breaches, and Privacy Violations— a related look at how companies that store sensitive financial and personal employee data face liability when that data is not properly secured.

Last Updated: March 22, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.