Time is running out for current and former Krispy Kreme employees who may be eligible for compensation from a $1.6 million data breach settlement. The claim deadline is June 22, 2026, and affected individuals who received notice of the incident could qualify for a cash payment, reimbursement for documented losses, or free credit monitoring.
The settlement resolves claims connected to a cybersecurity incident that Krispy Kreme discovered on November 29, 2024. According to court records and settlement documents, cybercriminals gained unauthorized access to company systems and obtained personal information belonging to 161,676 current and former employees.
The exposed information reportedly included names, dates of birth, Social Security numbers, and certain financial account access details. While Krispy Kreme has denied any wrongdoing or liability, the company agreed to settle the litigation and provide benefits to affected individuals.
Who Can Receive Compensation?
The settlement applies to U.S. residents who received notice stating that their personal information may have been impacted by the Krispy Kreme data breach.
Eligible class members can file a claim for a $75 cash payment. The final amount may vary depending on the number of valid claims submitted and approved.
Individuals who experienced financial harm linked to the incident may be eligible for significantly higher compensation. The settlement allows reimbursement of up to $3,500 for documented losses related to fraud, identity theft, unauthorized account activity, or other expenses connected to the breach.
Because data breach settlements often attract large numbers of claimants, affected individuals should review eligibility requirements carefully before submitting their forms.
How to Qualify for the $3,500 Reimbursement
The reimbursement benefit is intended for people who can demonstrate actual losses associated with the breach. Settlement administrators require supporting documentation before approving these claims.
Examples may include receipts, invoices, bank statements, credit card records, emails, phone records, or other documents showing expenses incurred as a result of identity theft, fraud, or efforts to secure compromised accounts.
Unlike the standard cash payment, reimbursement claims must be supported by evidence showing a connection between the loss and the data security incident.
How to File a Krispy Kreme Settlement Claim
Eligible individuals can submit a claim through the official Krispy Kreme data breach settlement website or mail a completed claim form to the settlement administrator. The site contains claim forms, eligibility information, settlement details, and instructions for submitting documentation.
Claim forms are also available by calling 877-239-1879. To remain eligible, claims must be submitted online or postmarked no later than June 22, 2026.
Anyone seeking reimbursement for documented losses should gather supporting records before filing to avoid delays in claim processing.
What Happens if You Do Not Submit a Claim?
Even individuals who choose not to file for a cash payment may still receive a benefit under the settlement agreement. Class members are eligible for one year of credit monitoring, which can help identify suspicious activity linked to compromised personal information.
According to settlement information, activation codes were provided in the notices sent to affected individuals. Those who received a notice should review it carefully to determine which benefits are available.
The Krispy Kreme case also highlights a broader trend of companies facing legal and financial consequences following cyberattacks. Similar issues have emerged in the Comcast data breach settlement, where affected consumers were also offered compensation after personal information was allegedly exposed.
Read More
The Financial Impact Extended Beyond the Settlement
The legal settlement represents only part of the overall cost associated with the cybersecurity incident. In its first-quarter 2025 earnings report, Krispy Kreme disclosed approximately $5 million in operational inefficiencies related to the breach.
The company also reported spending roughly $4.4 million on remediation efforts, including fees paid to cybersecurity specialists and other advisers brought in to investigate and respond to the attack.
Those figures demonstrate how cybersecurity incidents can create significant expenses beyond legal settlements. Businesses often face costs related to forensic investigations, customer notifications, compliance requirements, system recovery, and security upgrades long after an attack is discovered.
With the June 22 deadline approaching, affected current and former employees have limited time remaining to determine their eligibility, gather supporting documents, and submit a claim. For individuals whose personal information may have been exposed, reviewing the available settlement benefits before the filing window closes could help ensure they do not miss compensation they may be entitled to receive.















