Krispy Kreme Data Breach Settlement: $1.6 Million, Payments Sent September 14, 2026

According to the official settlement website, Krispy Kreme Doughnut Corporation discovered a data incident on November 29, 2024 that resulted in unauthorized access to or acquisition of personal information. The information involved includes some combination of names, dates of birth, Social Security numbers, and financial account access information.

People affected sued, and the cases were consolidated as In re: Krispy Kreme Data Security Litigation in the U.S. District Court for the Western District of North Carolina. ClassAction.org, citing court documents, reports that the private information of 161,676 current and former Krispy Kreme employees was involved. The settlement received preliminary approval on March 5, 2026.

The settlement pays a fixed fund of $1,616,760 and requires Krispy Kreme to implement additional security measures. Combining Social Security numbers with financial account information creates a real risk of identity theft. For how these cases work, see our data breach lawsuit guide.

The class is every living individual residing in the United States who was sent a notice of the data incident indicating their private information may have been impacted. In practice that means the current and former employees who got breach letters, not doughnut customers in general.

• If you got a Krispy Kreme breach notice, you were in the class.
• Buying doughnuts or using the Krispy Kreme app does not by itself put you in the class.
• Excluded: Krispy Kreme's directors, officers, and agents and those of its subsidiaries and affiliates; government entities; the judge and the judge's family; and anyone who opted out by June 6, 2026.

Not sure if you were included? Contact the settlement administrator, Epiq, at info@KrispyKremeDataSettlement.com or 1-877-239-1879.

Claimants picked Cash A or Cash B, not both. For Cash A, reasonable documentation meant things like phone records, emails, or receipts; personal statements alone did not count. A Cash A claim that lacked documentation and was not fixed was paid as Cash B.

Cash payments were adjusted pro rata: up if valid claims did not use the whole net fund, and down if they exceeded it. The fund first paid attorneys' fees (class counsel could seek up to one-third), costs, service awards of up to $1,500 per class representative, administration, and credit monitoring, then cash claims. The settlement website has not published the final per-claimant amount, so the $75 figure remains an estimate; check your payment notice for your actual amount. For typical ranges, see how much a data breach settlement is worth.

1. Look for your payment. The website says payments went out Monday, September 14, 2026, by the method each claimant chose, electronic or paper check.
2. Cash or deposit a paper check promptly. Uncashed checks usually expire after a set period.
3. If nothing arrived after a few weeks, contact Epiq at 1-877-239-1879 with your claim ID. See what to do if you have not received a settlement check.
4. Activate your credit monitoring using the code on your postcard notice, or request the code from the administrator. Monitoring started once the settlement became effective.

Be wary of calls or texts asking you to "verify" details to release a Krispy Kreme payment. The administrator already has what it needs. Our guide on settlement scams explains the warning signs.

From final approval on July 30, 2026 to payment on September 14, 2026 took 46 days, which is fast for a data breach settlement.

The website states that claims processing is complete and no late claims are being accepted. If you were in the class and did not file, you do not get cash, and because you did not opt out by June 6, 2026, you released your claims over this incident once the final approval order took effect. You do still get the one year of credit monitoring.

If your information turns up in fraud later, freeze your credit and follow our checklist on what to do after a data breach notice. If you were affected by a different breach and have documented losses, a free case review can connect you with independent attorneys who handle data breach cases.

Breach settlements still taking claims include the Highlands Oncology settlement and the Equinox, Inc. settlement. See all current options on our open settlements page. Payment questions for this case go to the administrator through the official settlement website linked above.