Krispy Kreme Settles $1.6M Class-Action Over 2024 Data Breach
Krispy Kreme has agreed to a $1.6 million settlement in a class-action lawsuit alleging the company failed to prevent a November 2024 data breach that exposed sensitive customer information. The breach reportedly compromised names, dates of birth, Social Security numbers, and financial account details. While Krispy Kreme denies any wrongdoing or liability, the settlement covers U.S. residents who received a breach notification.
Eligible consumers must file a claim by June 22, 2026, to receive compensation. All class members can claim a $75 cash payment, though the final amount may vary based on the number of claims submitted. Those with documented losses such as fraud or identity theft may receive up to $3,500 in reimbursement with proper evidence. Consumers who do not file a claim will still receive one year of credit monitoring, with activation codes provided via postcard notices.
Claims can be submitted online through the Krispy Kreme settlement website or mailed to the settlement administrator. The deadline to opt out or object to the settlement is June 6, 2026.
Florida has 32 Krispy Kreme locations, with the highest concentration in Jacksonville (4) and Pensacola (2). Nationwide, California leads with 41 locations, while the U.S. has a total of 361 stores.
Krispy Kreme TPRM report: https://www.rankiteo.com/company/krispy-kreme
"id": "kri1779668812",
"linkid": "krispy-kreme",
"type": "Breach",
"date": "5/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'U.S. residents who received a '
'breach notification',
'industry': 'Food & Beverage',
'location': 'United States',
'name': 'Krispy Kreme',
'size': '361 stores (U.S.)',
'type': 'Corporation'}],
'customer_advisories': 'Eligible consumers must file a claim by June 22, '
'2026, for compensation. Non-filers receive one year '
'of credit monitoring.',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (PII and financial data)',
'type_of_data_compromised': ['Names',
'Dates of birth',
'Social Security numbers',
'Financial account details']},
'date_detected': '2024-11',
'description': 'Krispy Kreme has agreed to a $1.6 million settlement in a '
'class-action lawsuit alleging the company failed to prevent a '
'November 2024 data breach that exposed sensitive customer '
'information, including names, dates of birth, Social Security '
'numbers, and financial account details.',
'impact': {'data_compromised': 'Names, dates of birth, Social Security '
'numbers, financial account details',
'financial_loss': '$1,600,000 (settlement amount)',
'identity_theft_risk': 'High (exposure of SSNs and financial '
'account details)',
'legal_liabilities': 'Class-action lawsuit settlement',
'payment_information_risk': 'High (financial account details '
'exposed)'},
'investigation_status': 'Settled (denies wrongdoing)',
'references': [{'source': 'Krispy Kreme Breach Settlement Website',
'url': 'https://www.krispykremebreachsettlement.com'}],
'regulatory_compliance': {'legal_actions': 'Class-action lawsuit settlement'},
'response': {'communication_strategy': 'Breach notification to affected '
'customers, settlement website for '
'claims'},
'title': 'Krispy Kreme Settles $1.6M Class-Action Over 2024 Data Breach',
'type': 'Data Breach'}