Data Breach Settlements: How to Check If You're Eligible

If your personal data was exposed in a security breach, you may be entitled to compensation. Here's what you need to know to find out if you qualify and how to claim it.

Plain English · ~7 min read · Not legal advice

What is a data breach settlement?

When a company loses your personal data to hackers or fails to secure it properly, affected customers sometimes sue. If the case settles or a class-action lawsuit succeeds, the company typically sets aside money to compensate victims. These settlements are public, and you don't need to hire a lawyer to claim your share-though you do need to know the settlement exists and how to file.

Who qualifies for a data breach settlement?

You may qualify if you had an account or relationship with the breached company during the time your data was exposed. Common scenarios include:

• You were a customer, employee, or applicant when the breach occurred
• Your information (name, email, SSN, credit card, or other personal details) was included in the exposed data
• The settlement period covers the year(s) you were a customer

Different settlements have different eligibility rules. Some cover all customers during a time window; others only those whose specific data types were exposed (like social security numbers or financial information).

What can you typically claim?

Settlement payouts vary widely depending on the case. Common types include:

• Cash payments. A flat amount (often $5–$100 per person, sometimes more) paid directly to your bank account or sent as a check
• Reimbursement for losses. Coverage for fraud, identity theft, time spent dealing with the breach, or expenses like credit monitoring-you may need to submit receipts
• Free credit monitoring. Complimentary identity theft protection or credit-monitoring services for 1–3 years
• Service credits. Discounts or free months with the affected company (though this matters less if you no longer want their service)

The actual amount depends on how many people claim, how much money the settlement set aside, and the type of claim you file. If few people claim, you may receive more; if many claim, the pool is divided among more recipients.

How to check if a settlement exists for a breach that affected you

Follow these steps to find out if you're eligible:

1. Identify if you were affected

Search for "[company name] data breach" online or check news archives. Sites like Have I Been Pwned (haveibeenpwned.com) let you enter your email to see if your data appeared in known breaches. Note the year of the breach and what data was exposed.

2. Search the official settlement databases

Several free, official resources let you search for active settlements:

• ClassAction.org - A comprehensive database of class-action settlements. Search by company name or case number
• Settlement Agreement websites. The company that was breached often lists their settlements on a dedicated claims page. Look for links labeled "Settlement," "Claim," or "Data Breach" on their website
• Federal Trade Commission (FTC). The FTC's Equifax settlement site (equifax.com/order) is one of the largest breaches ever; check there if you were a U.S. credit consumer
• Your state attorney general's website may have links to major settlements affecting residents

3. Verify the settlement deadline and requirements

Once you find a relevant settlement, check three things:

• Claim deadline. Most settlements have a final deadline to submit claims (often 6–12 months after the settlement is approved). Missing this deadline usually means you lose your right to claim
• Eligibility requirements. Confirm you match the criteria (time period as a customer, type of data exposed, etc.)
• What you need to prove. Some settlements let you claim with just your name and email; others ask for account numbers or receipts if you're claiming reimbursement

4. File your claim

Most settlements have an online claim form or a paper claim form you can print and mail. You'll typically enter:

• Your full name and contact information
• Account number (if applicable)
• Last four digits of your SSN (to verify your identity)
• How you want to be paid (check, bank transfer, or credit to an account)

Keep a copy of your claim confirmation for your records. After filing, you may wait a few months to a year for payment, depending on how the settlement is administered.

Important: Protect your SSN

Key deadlines and next steps

Data breach settlements are time-sensitive. Most have claim deadlines between 6–18 months after court approval. If you've been notified of a breach, act soon:

• Register on the settlement website to confirm your eligibility
• File your claim before the deadline
• Keep all confirmation emails and receipts
• Watch your email for payment updates-some settlements take 6–12 months to distribute

The bottom line

Data breach settlements are real, free to claim, and available to the public. If your data was exposed, it's worth taking 10 minutes to search for an active settlement. The payout may not be life-changing, but it's money you're entitled to-and deadlines are real.

Eligibility and payouts are not guaranteed. PendingMoney is not a law firm and does not provide legal advice.