$1.6M+ Krispy Kreme Settlement Ends Class Action Lawsuit Over 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Krispy Kreme has agreed to a proposed $1,616,760 settlement to resolve a class action lawsuit that claimed the donut seller failed to prevent a November 2024 data breach that exposed current and former employees’ sensitive personal information.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The proposed Krispy Kreme class action settlement, if approved by the court, will cover all United States residents whose private information was impacted by the Krispy Kreme data breach.

Court documents state that the private information of 161,676 current and former Krispy Kreme employees was involved in the data breach.

ClassAction.org will update this page if and when the Krispy Kreme data breach settlement receives preliminary court approval and when the official website for the Krispy Kreme settlement goes live.

Settlement documents state that class members who submit a timely, valid claim form may receive either up to $3,500 in reimbursement for documented losses stemming from the Krispy Kreme data breach or a flat cash payment of approximately $75.

According to court documents, all Krispy Kreme settlement class members are automatically eligible to receive, in addition to either monetary reimbursement option and without having to submit a claim form, one year of one-bureau credit monitoring services, which includes $1,000,000 in identity theft insurance with no deductible.

Class members seeking reimbursement for data breach-related losses, such as identity theft and/or fraud, must include with their Krispy Kreme claim form reasonable documentation of each loss. Per the settlement agreement, acceptable documentation may include phone records, correspondence (including emails) and receipts.

The class action settlement agreement notes that class members may not submit a claim for losses that have already been reimbursed by another source, including the credit monitoring and identity theft protection services provided in Krispy Kreme’s initial data breach notice.

No proof or documentation is required to submit a claim form for the roughly $75 cash payout, court documents state.

The two payment options are mutually exclusive from each other, meaning class members may only claim one or the other. Both settlement benefit options may increase or decrease on a pro rata, or equal share, basis, depending on the total number of valid claims filed, court documents add.

The Krispy Kreme class action lawsuit claimed that the company failed to protect current and former employees’ sensitive personal information—including Social Security numbers, names, driver’s license or state ID numbers, dates of birth, financial account information, credit or debit card information, biometric data, health and health insurance information, USCIS or Alien Registration Numbers, military ID numbers, email addresses, passwords, passport numbers and digital signatures—from a November 2024 cyberattack.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.