Time is running out to file a claim in the Krispy Kreme data breach class action settlement

WASHINGTON — Krispy Kreme has agreed to pay a $1.6 million settlement as part of a class action lawsuit alleging it failed to protect personal information exposed in a 2024 data breach, but time is running out to file a claim.

Claims must be submitted online or be postmarked in the mail by June 22, 2026. 

Krispy Kreme store logo and window on 9th January 2026 in London, United Kingdom. Krispy Kreme, previously known as Krispy Kreme Doughnuts, Inc is an American multinational doughnut company and coffeehouse chain. (photo by Mike Kemp)

During the breach, cybercriminals were able to access information on 161,676 of Krispy Kreme's then-current and former employees, according to the settlement agreement. 

The reported data leak was discovered on Nov. 29, 2024, and those impacted started to be notified in June 2025, settlement documents state. 

While the doughnut and coffee chain denies any wrongdoing or liability in the case, it agreed to the class action settlement. 

Class members are eligible for up to $3,500 in reimbursement for documented losses related to the breach, or can receive a cash payment of around $75. 

Are you owed money from Krispy Kreme's class action settlement?

For this settlement, class members include the nearly 162,000 Krispy Kreme employees who had their data exposed in 2024. If you were not a Krispy Kreme employee, you don't qualify. 

Those who may be owed money from the settlement were sent a postcard notice with an ID and PIN. If you didn't get a notice or lost yours, contact the Settlement Administrator at info@KrispyKremeDataSettlement.com or 1-877-239-1879 for assistance.

The settlement was given initial approval in federal court last month. 

You can submit a claim here at krispykremedatasettlement.com. Claims must be submitted online or be postmarked in the mail by June 22, 2026. 

The court will decide whether to approve the settlement at a hearing on July 6, 2026.