Up to $3,500 per Person Incoming As Krispy Kreme Settles Data Breach Lawsuit Impacting 161,676 Americans

Krispy Kreme has agreed to shell out more than a million dollars to compensate those affected by a data breach.

According to the settlement administrator’s portal, the doughnut and coffeehouse chain will pay $1.6 million to end a class action lawsuit filed after its 161,676 current and former employees had their sensitive personal information exposed by hackers in November 2024.

Those impacted by the data breach will receive up to $3,500 for documented out-of-pocket losses from the breach. People without losses can claim a $75 cash payment, and all eligible class members also get one year of free credit monitoring.

Krispy Kreme denies any wrongdoing as part of the proposed settlement.

Claims must be filed online or postmarked by June 22nd. Opt-outs or objections are due by June 6th, and a final approval hearing is set for July 6th.

Last year, Krispy Kreme said that an unknown actor gained unauthorized access to the retailer’s information technology systems, stealing multiple types of data, including names, Social Security numbers, dates of birth and driver’s license or state ID numbers. The firm sent out notices in June 2025 to those impacted.

“On November 29th, 2024, Krispy Kreme became aware of unauthorized activity on a portion of its information technology systems. Upon learning of the unauthorized activity, we immediately began taking steps to investigate, contain, and remediate the incident with the assistance of leading cybersecurity experts. On May 22nd, 2025, our investigation into the incident determined that certain personal information was affected.“

Generated Image: Midjourney