$2.45M Panda Restaurant Group Settlement Ends Class Action Lawsuit Over March 2024 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Panda Restaurant Group has agreed to a $2,450,000 settlement to resolve a class action lawsuit that alleged the restaurant management group failed to prevent a March 2024 data breach that potentially exposed the private information stored on its systems.

Get class action lawsuit and class action settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Panda Restaurant Group class action settlement received preliminary approval from the court on January 6, 2026 and covers all United States residents whose personal information was potentially accessed during the data breach, including those who received a written notice from the restaurant management company.  

Court documents indicate that approximately 240,295 current and former employees may have been impacted by the March 2024 data breach.

The court-approved website for the Panda Restaurant Group (PRG) settlement can be found at PRGBreachSettlement.com.

The website explains that settlement class members who submit a timely, valid claim form are eligible for multiple settlement benefits.

Per the site, class members who submit documented proof of out-of-pocket losses resulting from the data breach are eligible to receive up to $5,000 in reimbursement. It adds that all documented-loss claims must be accompanied by proof of the claimed expenses, including invoices, receipts, bank statements, and similar documents that are not self-prepared.

In addition to, or in lieu of a documented-loss payment, PRG settlement class members may also file a claim to receive a one-time cash payment of approximately $100.

According to the settlement site, no proof or explanation is required from class members to receive the alternative cash payment. Additionally, court documents state that the final amount of the alternative cash payment may be pro-rated based on the number of valid claims and the amount of money remaining in the settlement fund after all attorneys’ fees, administrative expenses, and lead plaintiff service awards are paid.

Furthermore, the agreement highlights that class members who lived in California at the time of the data breach are additionally eligible for a one-time statutory cash payment of up to $125. Court documents note that the California statutory cash payment may also be pro-rated if the number of valid claims exceeds the available funds.

In addition to any monetary benefits, the agreement reports that all PRG class members may submit a claim form to receive one free year of credit monitoring and insurance services, which includes fraud consultation and identity theft restoration services.

To submit a PRG settlement claim form online, class members can head to this page and enter the unique ID and PIN found on their received copy of the settlement notice. Alternatively, class members can download a PDF claim form from the settlement site to print, complete and submit by mail to the settlement administrator listed on the first page of the document.

All Panda Restaurant Group settlement claim forms must be submitted online or postmarked no later than April 10, 2026.

The court will decide whether to grant the PRG settlement final approval at a hearing on April 20, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The Panda Restaurant Group class action lawsuit claimed that the restaurant conglomerate, which owns Panda Express, Panda Inn, and Hibachi-san, failed to implement proper cybersecurity measures to protect the confidential consumer and employee information in its care, leading to a March 2024 data breach. According to the filing, private information implicated in the breach included full names, dates of birth, and Social Security numbers.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.