Roush Fenway Keselowski Racing Settlement Ends Class Action Lawsuit Over May 2025 Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Roush Fenway Keselowski Racing has agreed to settle a class action lawsuit that alleged the professional stock car organization failed to protect the private information of its current and former employees from a May 2025 cyberattack.

Don’t miss out on class action settlement news like this. Sign up for ClassAction.org’s free weekly newsletter.

The Roush Fenway Keselowski Racing class action settlement received preliminary approval from the court on February 24, 2026 and covers all living United States residents who were sent notice from the company indicating that their private information may have been compromised in the May 2025 data breach.

Court documents estimate that the private information of approximately 13,632 current and former employees may have been compromised during the breach.

The court-approved website for the Roush Fenway Keselowski (RFK) Racing settlement can be found at RFKRacingDataSettlement.com.

According to the website, RFK Racing settlement class members who file a valid, timely claim form have multiple options for reimbursement.

Class members who submit with their claim form proof of documented losses stemming from the breach are eligible to receive a one-time cash payment of up to $2,500 to reimburse expenses related to identity theft and fraud.

The agreement states that class members making a claim for a documented-loss payment must submit third-party documentation, such as receipts or invoices, to receive compensation for unreimbursed losses related to bank fees, overdraft charges, late fees, credit freezes, professional fees, cost to replace identification, fraudulent charges, and miscellaneous expenses like postage and notary.

In lieu of a documented-loss payment, settlement class members may instead file a claim form to receive an alternative one-time $90 cash payment, with no proof required.

Class members may receive their settlement payout via check or electronic payment, the agreement notes, and all checks must be cashed within 90 days of issuance before expiration.

In addition to any monetary benefits, all RFK Racing settlement class members can file a claim form to receive an enrollment code for two free years of CyEx Identity Defense Complete, which includes credit monitoring, identity theft insurance, dark web scanning and public records monitoring, per the agreement.

To file an RFK Racing data breach claim form online, class members can head to this page and log in using the unique ID and PIN found on their received copy of the settlement notice. Alternatively, class members may download a PDF of the claim form from the site to print, fill out and return by mail to the address of the settlement administrator listed on the second page of the document.

All RFK Racing settlement claim forms must be submitted online or by mail by May 31, 2026.

The court will determine whether to grant final approval to the RFK Racing data breach settlement following a hearing on June 15, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals are resolved.

The Roush Fenway Keselowski Racing class action lawsuit alleged that the professional stock car association competing in NASCAR failed to implement reasonable cybersecurity safeguards to protect the sensitive information of its current and former employees, leading to a cyberattack discovered by the company on or around May 14, 2025. Per court documents, private information that may have been compromised by the breach includes names and Social Security numbers.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.