Data breach settlements: how to claim your share (and what "documented losses" really means)

Your data was in a breach and the company settled. Here's who qualifies, the difference between the flat payment and reimbursement of losses (up to thousands), how to prove time spent and costs, and how to check whether your email or SSN was exposed.

Updated September 16, 2026 · Reviewed against current federal and state rules · Class action settlements
In 30 seconds
  • Data breach settlements are the most common and the easiest to claim: if your information was in the breach, you're in the class, no purchase needed.
  • Most offer two tracks: a flat cash payment (typically $20–$150) or credit monitoring, plus reimbursement of documented losses (out-of-pocket costs and hours spent) up to a cap that's often $500 to $10,000.
  • Time spent dealing with the breach is usually paid at $20–$25 an hour for a few hours, on your own attestation.
  • Check whether your data was exposed at HaveIBeenPwned.com and in the breach notification letters companies are required to send.
  • File on the official settlement site before the deadline; payouts arrive 6 to 18 months later.

Who qualifies

The class is everyone whose data the company confirms was exposed during the breach window. You'll usually get a notice by email or mail with a claim ID. If you didn't get one but believe you're affected (you were a customer at the time), most settlements let you file anyway and the administrator checks your name against the breach list.

The two kinds of payment

1. Flat payment or alternative benefits

A fixed amount per person (or a pro-rata share of what's left after documented claims) that requires no proof beyond your attestation. Some settlements offer a choice: cash, or 2–3 years of credit monitoring and identity theft insurance. If you already have monitoring, take the cash.

2. Documented losses

Reimbursement of what the breach actually cost you, up to a cap. Commonly covered:

Proof can be receipts, bank statements, screenshots, or a signed statement for time. Keep it simple and truthful; administrators do check.

How to file

  1. Find the official site from your notice, or search the case name plus "settlement" (or the aggregators listed in how settlements work).
  2. Enter your claim ID, or your details if you don't have one.
  3. Choose flat payment, monitoring, or documented losses (often you can claim both flat and documented).
  4. Upload documents if claiming losses.
  5. Pick digital payment (PayPal, Venmo, Zelle, ACH) to avoid a lost check.
  6. Save the confirmation.

Check whether you were breached

Protect yourself while you wait

These steps also count as "time spent" you can claim.

FAQ

I can't find my claim ID

File without it. Provide the email and address you had with the company at the time of the breach.

Can I claim on more than one breach?

Yes, each settlement is separate. People in the Equifax, T-Mobile, AT&T, and similar breaches have often qualified for several.

Is the flat payment always that small?

The advertised amount is a maximum; if many people claim, it's reduced pro rata. Documented claims are paid first and are usually paid in full up to the cap.

Do I need a lawyer?

No. The class attorneys represent everyone; their fees come out of the fund and are approved by the judge.

This guide is general consumer information based on the laws, agency rules, and official sources cited. It is not legal advice for your specific situation, and rules vary by state. Spot something outdated? Let us know and we'll fix it.