Data breach settlements are the fastest-growing category of class action cases in 2026. If you've had an account with any major company in the last 5 years, there's a good chance your data has been part of a breach — and a settlement you can claim.
Why Data Breaches Create Class Action Settlements
When companies fail to protect customer data and a breach occurs, affected customers can sue. These lawsuits typically allege the company:
- Failed to implement adequate security measures
- Delayed notifying affected customers
- Stored data it didn't need and shouldn't have kept
- Violated state privacy laws (CCPA, etc.)
Most large data breach cases settle out of court. The company pays into a fund; affected customers file claims. You don't need to have experienced identity theft or financial fraud to qualify — you just need to have been in the breach.
Data breach settlements now represent approximately 30% of all consumer class action cases.
5 Major Active Data Breach Settlements in 2026
1. Cadence Bank Data Breach
Total fund: Multi-million settlement
Payout per person: $50–$300+
Who qualifies: Cadence Bank customers affected by the breach
Proof needed: None for base tier
Cadence Bank failed to adequately protect customer data. Affected customers can claim base compensation without providing documentation of financial harm.
2. Christian Dior Data Breach
Payout per person: $50–$200+
Who qualifies: Christian Dior online customers in the affected period
Proof needed: Account confirmation only
Christian Dior's customer database was compromised, exposing names, emails, purchase history, and in some cases payment data. If you shopped on Dior.com or created an account during the affected period, you're eligible.
3. CarGurus Data Breach
Payout per person: $50–$150
Who qualifies: CarGurus users whose data was exposed
Proof needed: Account information
CarGurus exposed user data including contact information and vehicle search history. If you created a CarGurus account or used the platform, check your eligibility.
4. AT&T Data Breach
Total fund: $100M+
Payout per person: $25–$75 base; up to $25,000 with documented losses
Who qualifies: AT&T wireless, internet, or TV customers affected by 2022/2024 breaches
Proof needed: None for base payout
AT&T's multiple data breaches exposed the personal information of tens of millions of customers. Base payouts require no documentation. If you experienced identity theft or fraud as a result, the documented losses tier pays significantly more.
5. Capital One 360 Savings Settlement
Total fund: $425M
Payout per person: Varies by account history
Who qualifies: Capital One 360 Savings account holders (Sept 2019–June 2025)
Deadline: March 30, 2026
Proof needed: None — automatic if you held the account
Understanding Settlement Tiers
Most data breach settlements have two or three payout tiers:
Tier 1: No Documentation (Base Payout)
You confirm you were affected. You get a base payment ($25–$100 typically). No receipts, no fraud reports needed. This is what most people claim.
Tier 2: Documented Out-of-Pocket Losses
You provide receipts showing you paid for credit monitoring, identity theft protection, or similar services. Typical additional compensation: $100–$500.
Tier 3: Documented Identity Theft / Fraud
You provide proof that your data was used in fraud directly linked to the breach. The highest tier — $1,000 to $25,000+ in some cases. Requires significant documentation but pays substantially more.
How to Check If You're Eligible
Method 1: Settlement Administrator Website
Most breach settlements have an eligibility checker. Enter your email, phone, or name — the system tells you if you're in the affected class.
Method 2: SettlementRadar Directory
Browse all data breach settlements. Each listing includes eligibility criteria and a link to the official claim site.
Method 3: Your Email Inbox
Search your email for "data breach" or "settlement" from the past 3 years. Companies are legally required to notify affected customers. You may have received a notification and forgotten about it.
Step-by-Step Filing Guide
- Find the settlement on SettlementRadar or via Google ("Company Name data breach settlement")
- Visit the official settlement website — verify the URL is court-approved
- Check eligibility on the site
- Complete the claim form (5–10 minutes)
- Choose your payout method — direct deposit, check, or PayPal/Venmo
- Submit and save your confirmation number
Payment arrives 6–12 months after the claim deadline closes.
Frequently Asked Questions
Do I need to prove I was harmed?
No, for the base payout tier. Simply being in the breach is enough.
What if I didn't get a breach notification?
You may still be eligible. If you had an account during the affected period, you're likely in the class even if you didn't receive a notice.
Can I claim multiple breach settlements?
Yes. There's no restriction. File in each independently.
Is this a scam?
Legitimate settlements are court-supervised. No legitimate settlement ever asks for upfront fees. Verify on SettlementRadar.
How long until I get paid?
Typically 6–12 months after the claim deadline.
How to Avoid Data Breach Settlement Scams
Real settlements:
- ✓ Have official websites with court case numbers
- ✓ Are always free to file
- ✓ Are listed on SettlementRadar
Red flags:
- ✕ Asking for upfront payment to "process your claim"
- ✕ Collecting credit card or bank info
- ✕ Ads on Facebook/Google not linking to official settlement sites
Don't Miss the 2026 Deadlines
Several major data breach settlements are closing in the next 60–90 days. Check deadlines and file immediately.
Browse all data breach settlements →
Sign up for deadline alerts → Never miss a settlement closing date again.
