Scrubs & Beyond and Kindthread Reach $2,500 Data Breach Settlement Following June 2024 Cyberattack
301 Scrubs Investors LLC, operating as Scrubs & Beyond and Kindthread, has agreed to settle a class action lawsuit stemming from a June 2024 cyberattack that exposed sensitive personal data. The breach compromised files containing names, Social Security numbers, dates of birth, and employee identification numbers of affected individuals.
Who is eligible?
U.S. residents who received a notice confirming their data was implicated in the breach may qualify as class members. Claims must be submitted by May 18, 2026, with payments processed approximately 90 days after final court approval on June 2, 2026.
Settlement benefits include:
- Up to $2,500 for documented out-of-pocket losses (e.g., identity theft, credit freeze fees, ID replacement costs) incurred between June 6, 2024, and May 18, 2026.
- A one-time $50 cash payment for those without documented losses.
- Two years of credit monitoring via CyEx Identity Defense Complete, including $1 million in identity theft insurance and fraud resolution support.
Claim process:
Eligible individuals must submit a claim online or by mail using their unique ID and PIN from the settlement notice. Documented losses require supporting evidence, such as receipts or bank statements. Payouts will be issued via PayPal, Venmo, Zelle, or paper check.
Fund allocation:
The settlement covers administration costs, up to $250,000 in attorneys’ fees, $2,500 service awards for class representatives, and payments to approved claimants. The total payout depends on the number and type of claims filed.
Background:
The lawsuit alleged 301 Scrubs Investors failed to adequately protect sensitive data, though the company denied wrongdoing and settled to avoid prolonged litigation. The breach impacted 301 individuals, with notices sent to affected parties. The final approval hearing is scheduled for June 2, 2026.
Source: https://www.claimdepot.com/settlements/301-scrubs-data-settlement
Kindthread cybersecurity rating report: https://www.rankiteo.com/company/kindthread
Scrubs & Beyond cybersecurity rating report: https://www.rankiteo.com/company/scrubs-&-beyond
"id": "KINSCR1773679073",
"linkid": "kindthread, scrubs-&-beyond",
"type": "Breach",
"date": "6/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '301 individuals',
'industry': 'Retail/Apparel',
'location': 'U.S.',
'name': 'Scrubs & Beyond',
'type': 'Company'},
{'customers_affected': '301 individuals',
'industry': 'Retail/Apparel',
'location': 'U.S.',
'name': 'Kindthread',
'type': 'Company'}],
'customer_advisories': 'Notices sent to affected individuals with unique ID '
'and PIN for claims',
'data_breach': {'number_of_records_exposed': '301 individuals',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Social Security numbers',
'Dates of birth',
'Employee identification '
'numbers']},
'date_detected': '2024-06',
'description': '301 Scrubs Investors LLC, operating as Scrubs & Beyond and '
'Kindthread, agreed to settle a class action lawsuit following '
'a June 2024 cyberattack that exposed sensitive personal data, '
'including names, Social Security numbers, dates of birth, and '
'employee identification numbers.',
'impact': {'data_compromised': 'Names, Social Security numbers, dates of '
'birth, employee identification numbers',
'financial_loss': '$2,500 settlement per eligible individual for '
'documented losses',
'identity_theft_risk': 'High (exposure of SSNs and PII)',
'legal_liabilities': 'Class action lawsuit settlement'},
'investigation_status': 'Settled',
'post_incident_analysis': {'corrective_actions': 'Settlement includes credit '
'monitoring and identity '
'theft insurance for '
'affected individuals',
'root_causes': 'Alleged failure to adequately '
'protect sensitive data'},
'references': [{'source': 'Settlement Notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'response': {'communication_strategy': 'Notices sent to affected parties'},
'title': 'Scrubs & Beyond and Kindthread Data Breach Settlement',
'type': 'Data Breach'}