- Tier 1 — flat cash payment (~$75): No documentation required. All valid class members who filed a Tier 1 claim receive this amount, subject to pro rata adjustment based on the total number of claims filed.
- Tier 2 — up to $3,500: Reimbursement for documented out-of-pocket losses tied to the breach, including credit monitoring fees, identity theft expenses, and time spent dealing with the breach.
- Credit monitoring (all class members): One year of free credit monitoring. Activation codes were mailed on March 25, 2026 on postcard notices; class members who did not receive a code can contact the settlement administrator to obtain one.
Payment Timeline and What to Expect
Final approval was granted on July 30, 2026. The settlement administrator will now complete claim processing and distribute award payments once all claims have been reviewed and any appeals have been resolved. Based on similar class action timelines, expect payments to begin in late 2026 or early 2027, typically four to ten months after the claim deadline.
Class members who selected Tier 1 (flat cash) should not need to provide additional documentation. Tier 2 claimants whose documentation was insufficient were reclassified to Tier 1 — the settlement administrator will reach out if that applies to your claim.
If You Missed the June 22 Deadline
The claim window is closed. Late claims are not accepted under any circumstances. However, you remain a class member — meaning you give up the right to sue Krispy Kreme separately about the data incident, but you also do not need to take any further action. To have preserved your right to sue independently, you would have had to submit a written Request for Exclusion postmarked by June 6, 2026. That deadline also has passed.
Why the Settlement Is Smaller Than Other Breaches
Compared to the $117.5 million Comcast/Xfinity settlement or the $700 million Equifax settlement, $1.6 million looks modest. Several factors explain the size:
- Rapid settlement: The case settled relatively early in litigation with limited discovery, before plaintiffs could develop expert damage testimony.
- Fewer high-value claims: Krispy Kreme's exposure data was less concentrated than financial or healthcare breaches — fewer people had financial account numbers exposed compared to, for example, the Fidelity breach.
- Per-class-member math: With 161,000 affected people and a $1.6M fund, even after attorneys' fees (up to one-third) and service awards, the remaining balance supports only modest per-person payments.
The free credit monitoring benefit is the more valuable component for most class members, since it provides one year of identity protection that would otherwise cost $120–240. Class members who did not receive an activation postcard in March 2026 should contact the settlement administrator through the official site to obtain one — do not respond to unsolicited emails claiming to offer activation, as phishing campaigns frequently piggyback on high-profile settlements. Stick to krispykremedatasettlement.com and any court-ordered communications for legitimate updates on this case.
For broader guidance on responding to any data breach, see our complete guide to data breach insurance and consumer response, and our guide to cybersecurity insurance for individuals and small businesses.
Fazlur Rahman
