Krispy Kreme Approaches Final Approval for $1.6 Million Data Breach Settlement
The donut maker has agreed to pay out compensation to 161,676 affected staff, though the company continues to deny liability for the security failure.
Krispy Kreme is nearing the final stage of a $1.6 million settlement regarding a data breach that compromised the personal information of 161,676 current and former employees. The incident, which occurred in November 2024, saw the theft of sensitive data including names, dates of birth, Social Security numbers, and financial details. While the company has denied any liability or wrongdoing, it agreed to the settlement to resolve the associated claims.
Eligible individuals must submit claim forms by June 22, 2026, to qualify for compensation. Claimants can choose between a $75 cash payment, which requires no documentation, or reimbursement for documented losses up to $3,500. These two options are mutually exclusive and cannot be combined. Those seeking reimbursement must provide evidence such as phone records, emails, or receipts to substantiate their losses.
The court is scheduled to grant final approval for the settlement on July 6, 2026, following a hearing. Compensation distribution will commence only after this final approval and the resolution of any subsequent appeals. Preliminary court approval was granted earlier in the year on March 5, 2026, setting the timeline for the current administrative deadlines.
In addition to financial compensation, eligible class members will automatically receive one year of credit monitoring services once the settlement is finally approved. This package includes $1 million in identity theft insurance with no deductible. Activation codes for these services were distributed via postcard notices on March 25, 2026, and are accessible using unique IDs and PINs provided to affected individuals.
Exclusions from the settlement apply to directors, officers, or agents of Krispy Kreme and its subsidiaries, as well as governmental entities. Class members who wish to exclude themselves from the settlement or object to its terms must do so by June 6, 2026. Claim forms can be submitted online at krispykremedatasettlement.com or by post to the Settlement Administrator in Portland, Oregon.
